Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
File:                     PFRw6B-koZCHAh0K130zbOvipo0.mft (raw, json)
Hash identifier:          E3nvzFODPnL70Yn3Hk2k+Z9zXWqBwoCbtRO2nLB4+uE=
Subject key identifier:   DA:CD:FF:1C:20:EB:D9:84:22:F7:F2:9E:CF:00:BF:7E:ED:09:FD:B7
Authority key identifier: 3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
Certificate issuer:       /CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
Certificate serial:       1BA8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
Manifest number:          1BA5
Signing time:             Fri 12 Jun 2026 16:13:28 +0000
Manifest this update:     Fri 12 Jun 2026 16:13:28 +0000
Manifest next update:     Fri 19 Jun 2026 16:13:28 +0000
Files and hashes:         1: PFRw6B-koZCHAh0K130zbOvipo0.crl (hash: trNo3Vgj+20Y/CjSXZK0VZqCUVfOW+xgiITfaU3LDOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl
                          rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7080 (0x1ba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3, serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
        Validity
            Not Before: Jun 12 16:13:28 2026 GMT
            Not After : Jun 19 16:13:28 2026 GMT
        Subject: CN=6a2c3028-d678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:d3:a1:08:66:f8:86:80:93:27:de:6c:e8:
                    5e:f4:b0:51:3e:41:09:fb:8a:af:6d:49:7d:60:71:
                    58:b6:16:03:70:78:0a:71:d0:90:1c:3a:30:6b:af:
                    5d:ad:8a:c7:25:02:ba:0b:b3:12:64:06:79:76:c9:
                    97:db:41:0e:10:5b:a0:f9:b8:b1:76:11:38:90:84:
                    d1:aa:23:96:2a:e9:b4:6c:06:c0:f5:73:17:8e:4e:
                    ea:d2:16:55:25:dc:88:d7:d2:37:09:bf:20:fd:ac:
                    99:26:f4:91:2d:2b:82:ee:65:f9:8d:0d:4a:bf:26:
                    9e:db:72:69:27:dc:83:3e:6b:6f:3f:bd:20:b0:67:
                    bc:ca:df:4e:36:17:70:e3:45:0e:5d:14:21:04:5b:
                    1c:e2:ae:a1:f4:5a:a0:f6:9b:b7:fc:f8:16:6c:1c:
                    7f:e6:27:7f:2f:a0:98:78:06:e2:74:22:69:ac:2f:
                    22:29:a2:bf:b3:09:56:5d:b9:57:81:99:9c:cd:dd:
                    69:c0:6c:4e:c0:a0:40:e9:05:d5:f3:9f:ce:ca:dd:
                    79:4b:ec:0e:31:fe:0a:3b:35:b2:61:72:a1:47:f5:
                    3d:9d:7c:ee:ca:14:df:57:20:7c:d7:1e:3b:f7:44:
                    69:87:40:14:d8:1e:29:77:90:b4:6b:1b:58:f3:71:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:FF:1C:20:EB:D9:84:22:F7:F2:9E:CF:00:BF:7E:ED:09:FD:B7
            X509v3 Authority Key Identifier:
                keyid:3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:06:0a:9f:f1:6b:13:f0:47:a7:39:21:a2:24:97:06:3e:
         23:24:ec:ee:45:0f:9f:c4:5e:01:a7:02:7a:09:83:5f:ca:e5:
         89:5f:91:78:d4:f9:a4:ba:43:47:8c:00:7d:9f:80:3b:dc:15:
         4c:36:8c:9c:4f:4b:45:0a:29:11:8e:ce:5d:8f:a2:fe:3b:e9:
         30:90:f5:58:03:6e:7f:3a:81:9c:d2:e7:41:b6:ca:d8:4c:b0:
         f9:c0:ab:23:87:dc:6b:d7:28:cb:38:f4:45:cb:51:28:95:6f:
         db:d4:25:9f:a8:e1:b6:e3:95:55:f2:b2:8f:b9:87:d9:b4:ad:
         78:3d:8f:61:9b:04:59:90:7e:c9:50:2a:08:c8:ac:01:c8:78:
         5a:4c:7c:c4:c4:3f:8c:33:64:8a:19:32:ed:6a:ff:40:e2:64:
         98:5f:ca:da:da:b4:9c:21:40:d0:b3:02:02:39:a2:38:eb:ff:
         b6:e2:2e:6f:bf:7a:c5:29:18:2f:08:b3:30:52:7b:5c:e2:a9:
         6d:e1:c3:a8:54:7c:a8:a1:d7:22:b3:29:7b:66:24:bf:2a:66:
         6a:b9:a9:d7:77:ae:63:ea:3d:f3:7a:32:aa:c4:ef:74:ac:98:
         2b:74:a2:3d:94:f3:0b:32:95:54:73:03:54:ea:84:0e:12:26:
         ea:3f:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:45 2026 by rpki-client