Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File:                     h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier:          pS+gWa3eg4XZzdJhRLnWne+E325TOXJV5k+nzi8fxAU=
Subject key identifier:   BA:B8:B2:55:A7:FB:E9:EC:BF:E3:D1:24:2C:38:10:55:A3:2C:72:BE
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer:       /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial:       3555
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number:          3555
Signing time:             Fri 12 Jun 2026 14:16:54 +0000
Manifest this update:     Fri 12 Jun 2026 14:16:53 +0000
Manifest next update:     Fri 19 Jun 2026 14:16:53 +0000
Files and hashes:         1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: MjkOvrgIJeilTMVKfGGVbUn56aOA9WpTS8OtMs8MpVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13653 (0x3555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736
        Validity
            Not Before: Jun 12 14:16:53 2026 GMT
            Not After : Jun 19 14:16:53 2026 GMT
        Subject: CN=6a2c14d5-2b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:f0:b7:9a:17:aa:f8:f5:a3:17:9c:ea:ee:
                    84:59:cc:b9:75:09:71:c6:d4:a0:9b:eb:60:1c:dc:
                    b3:61:00:a7:dd:9d:1a:24:8d:d6:31:a6:e7:03:bd:
                    7e:ae:d3:c7:f8:89:2d:f8:d1:90:67:30:e5:da:b0:
                    60:74:66:88:91:5f:71:c7:33:6a:6b:4a:d6:dd:52:
                    f2:66:08:0b:02:80:92:f1:b8:72:24:9b:ae:ca:17:
                    13:d3:ad:00:46:55:9a:6f:87:aa:66:bc:48:db:f9:
                    d1:e3:c3:05:64:b3:45:90:d8:80:47:b2:29:e5:79:
                    af:e0:15:2a:f0:f2:55:46:bf:15:3d:bb:b7:69:90:
                    56:14:3e:ff:a1:4b:8a:8a:c1:74:06:90:6b:ef:23:
                    75:ec:53:48:bb:e0:32:3e:28:f7:97:ab:23:b1:3d:
                    6f:a4:5c:33:4b:46:f9:65:a4:b7:f6:d5:dd:35:1d:
                    30:7a:3b:3c:d2:d0:4d:72:ad:51:ff:50:80:b0:24:
                    53:6b:b6:9d:e9:24:b6:48:1f:a3:9b:ff:ff:3f:b5:
                    22:b8:ee:61:5a:e1:26:9c:3a:35:d0:5b:1b:5e:17:
                    91:75:11:fe:47:64:65:13:64:2f:38:d4:dd:99:7a:
                    94:30:21:83:9d:6a:71:2e:fa:19:eb:62:ea:30:d6:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B8:B2:55:A7:FB:E9:EC:BF:E3:D1:24:2C:38:10:55:A3:2C:72:BE
            X509v3 Authority Key Identifier:
                keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:29:da:ae:7d:9e:45:55:f1:0e:e7:d7:88:c3:23:3a:0b:7e:
         8e:7b:43:1a:27:9a:f7:14:88:3c:97:99:c8:7f:83:c4:d1:b4:
         db:0e:a2:ce:e3:21:64:61:37:6c:3d:e1:91:96:c6:1a:09:27:
         13:05:9f:39:ef:7a:2c:08:3d:f2:67:2a:e9:c8:a3:87:ca:0b:
         a9:e3:03:09:51:af:98:f7:87:7b:bf:24:c1:65:37:6f:56:4b:
         d7:9b:97:f0:ba:6c:74:cf:72:d7:ac:59:16:4b:35:5d:a2:20:
         9c:1d:73:8f:60:d0:56:da:8e:60:ae:d0:bf:2e:65:9f:48:9f:
         25:f5:69:f2:a7:de:e5:2f:4a:49:a3:28:09:da:64:18:7a:bc:
         cf:f8:eb:54:6b:99:8b:b0:09:89:d2:de:e5:98:8c:c3:95:10:
         00:d1:22:96:b0:3b:65:39:b8:a2:d8:53:ec:16:1d:10:d7:f6:
         d1:ab:62:1d:18:58:60:cc:c5:1d:65:23:46:5d:48:a0:02:d7:
         b2:a3:ed:1b:43:2a:e2:e2:42:28:fc:d7:29:49:c5:bf:f6:08:
         f5:27:dd:b3:91:50:92:d1:30:98:64:0a:97:df:ab:77:95:e6:
         46:e4:b1:5d:20:74:37:b8:78:5b:11:a1:9d:91:a8:8a:a0:2c:
         d4:18:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:11 2026 by rpki-client