Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File:                     Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier:          H+94GHfFFICsdNZRcoqVar5QRBxHlumQ33Q6rqg3s6Q=
Subject key identifier:   A9:5E:F7:B9:B4:59:F5:F8:A2:7E:5D:D4:D1:97:24:39:ED:47:6E:CC
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number:          2CAA
Signing time:             Fri 12 Jun 2026 15:30:02 +0000
Manifest this update:     Fri 12 Jun 2026 15:30:01 +0000
Manifest next update:     Fri 19 Jun 2026 15:30:01 +0000
Files and hashes:         1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: hWSI9OFj0gFXP9jXJQfgL/KSDc1kFRgUx6zlEjaFuv8=)
                          2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: SANw9dLH9bXdcBVHXUebGfCRir+vdFPmPdYxlp8aviU=)
                          3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: YAU3ILtOw6FXLUFev8JWBOKxyiChialBJy1oqxPurUE=)
                          4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: m42CkLhr+GKHo0TtapwYGoLo4QIiXG0fyh2xqAw/LvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11474 (0x2cd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Jun 12 15:30:01 2026 GMT
            Not After : Jun 19 15:30:01 2026 GMT
        Subject: CN=6a2c25fa-c39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:ee:67:7a:0d:b8:86:95:c7:cf:d5:0c:54:
                    a8:2b:2c:fc:2a:24:11:d5:9f:3c:f1:32:55:ac:d3:
                    18:f4:7a:83:0b:3c:dd:5e:51:70:2a:80:52:ee:03:
                    76:01:2c:c8:9f:b4:2b:72:1b:33:f2:ff:d9:1a:9b:
                    13:53:ed:08:15:a8:bb:7a:b0:23:e0:0e:42:3b:66:
                    90:d3:37:3b:2c:c2:00:29:37:85:48:ce:ef:81:fb:
                    6b:90:a2:f3:c0:f9:73:51:05:56:f9:5b:f4:a5:d1:
                    89:1b:a6:6d:fe:ee:cc:25:31:cf:90:e3:33:9d:bb:
                    4b:d0:6a:5a:02:e8:ae:19:0b:5a:43:ba:cc:64:ff:
                    4d:64:00:53:5d:85:15:2e:6c:1b:86:46:d7:fa:cf:
                    a8:12:43:4c:f9:8d:89:88:62:d0:6f:60:9e:16:d4:
                    ab:2d:3a:c6:dd:c7:b7:c0:ed:17:a9:6d:3a:a8:25:
                    5e:03:fc:cc:d9:29:5f:61:e3:10:37:83:0e:da:bf:
                    7d:18:cf:8f:38:dc:c4:48:6f:da:6b:7b:ed:b0:22:
                    4c:75:49:69:70:17:da:d7:89:bf:1b:a3:17:ef:3b:
                    aa:88:dd:e3:13:09:6c:db:a0:25:58:f1:2c:6d:cd:
                    3f:96:54:71:43:7b:83:72:aa:4f:bb:50:3f:d8:05:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:F7:B9:B4:59:F5:F8:A2:7E:5D:D4:D1:97:24:39:ED:47:6E:CC
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:de:8c:8a:56:bb:74:2d:51:df:18:b6:c7:c3:c1:5f:b6:
         98:e6:d4:40:9a:48:9c:0a:62:a2:3f:08:47:bc:89:b2:c0:c8:
         99:22:0f:c2:b4:8c:70:05:e0:b0:f6:9c:b0:88:5a:1f:51:fa:
         88:98:05:0d:9c:95:f8:ab:84:bb:62:f1:b0:3e:a9:cb:6f:a9:
         ae:e3:2b:5f:f8:6c:05:f6:9a:46:67:cf:9a:10:22:b2:03:24:
         57:1c:67:00:1b:40:0d:d5:d1:96:57:c0:f6:3a:8b:ca:cf:0b:
         5b:36:d6:a4:76:a3:36:c4:6d:ef:67:5a:c9:21:1a:fb:54:07:
         25:88:30:b3:e2:c6:96:17:08:c0:c3:07:dc:74:60:a7:2f:42:
         cc:c4:2b:5c:23:7b:a4:8d:69:75:fb:a7:34:e6:c1:5d:41:22:
         f6:75:2c:9b:ab:9b:ae:d0:07:a5:a2:56:cf:83:7d:fd:f4:73:
         73:4c:39:88:eb:cc:17:87:9b:45:db:b4:8f:d3:99:a5:e8:d2:
         c3:47:81:41:3b:21:45:a5:ca:2c:9c:dc:07:99:06:6b:a2:cf:
         ae:6b:50:d3:33:20:10:9c:36:4b:b9:4d:33:e3:b4:8b:f9:e6:
         5f:06:61:83:a8:52:41:44:fe:73:86:91:e8:0f:f5:6e:e9:ba:
         4d:4f:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:41 2026 by rpki-client