Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
File:                     poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json)
Hash identifier:          sswnaaV/1BZ2BoCPGhJLWArmkl2Jnv9YrJnYFjU+pIM=
Subject key identifier:   3F:CA:B9:BA:97:A7:24:1B:52:61:6E:60:82:F6:0B:93:C3:E9:9C:10
Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
Certificate issuer:       /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
Manifest number:          FB
Signing time:             Sat 13 Jun 2026 06:18:48 +0000
Manifest this update:     Sat 13 Jun 2026 06:18:47 +0000
Manifest next update:     Sat 20 Jun 2026 06:18:47 +0000
Files and hashes:         1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: 5PJWzqm15ySXytA1ZhXVgDZSskL87zpQVk3q0AIntOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
                          rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
        Validity
            Not Before: Jun 13 06:18:47 2026 GMT
            Not After : Jun 20 06:18:47 2026 GMT
        Subject: CN=6a2cf648-b96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:72:0f:96:d7:38:9b:2c:d1:8c:de:06:4f:
                    d0:d6:56:94:36:ef:4a:68:00:49:c9:7d:02:65:84:
                    1b:3a:22:f5:1a:c7:ed:d8:58:48:33:36:19:a4:98:
                    82:55:91:47:6b:21:17:31:c9:fc:fd:63:80:dd:34:
                    38:0b:f4:04:8b:81:dc:f9:c2:b5:c8:35:e2:20:bc:
                    47:32:0e:b9:92:14:91:61:e6:0c:98:1c:7f:b7:a1:
                    12:5c:64:46:45:ef:97:62:da:60:8a:91:f4:72:a0:
                    40:85:7b:97:f6:49:87:c2:2c:fa:26:b9:1c:0e:0a:
                    16:c6:75:f4:d0:3c:df:79:69:83:8e:b0:ac:e1:c0:
                    f0:55:1c:15:ed:5a:b6:2c:26:d0:00:75:c2:94:46:
                    be:b9:60:33:0a:2c:f4:49:a5:53:e5:3d:15:ed:fd:
                    91:16:2a:9b:f9:35:ef:8b:90:3e:21:dc:88:a0:3e:
                    63:89:9f:c5:66:2e:67:2c:a4:18:52:d5:69:bb:c3:
                    d4:33:5e:fd:84:40:14:23:5b:a2:5b:28:e6:0b:9e:
                    44:a5:4b:51:ea:5f:67:de:89:bf:52:5b:b4:59:63:
                    c6:43:40:5e:db:ae:67:7e:f5:f9:f7:a1:79:87:0f:
                    15:47:ed:61:36:60:c8:fe:1f:10:da:a1:17:d0:1d:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:B9:BA:97:A7:24:1B:52:61:6E:60:82:F6:0B:93:C3:E9:9C:10
            X509v3 Authority Key Identifier:
                keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:14:a3:b9:96:a9:8a:27:20:1a:42:06:f5:2a:66:8e:ec:56:
         bf:ff:3f:5b:ae:5b:4a:fc:e3:39:52:58:d0:58:d1:be:1f:5b:
         d3:d0:c2:72:36:7a:b7:bf:5a:f0:15:0e:0e:e5:cc:a3:8d:a0:
         51:13:f6:96:06:d6:63:b3:8d:2f:52:4f:8a:d9:83:cd:1a:42:
         04:67:5e:16:10:b6:53:58:2d:bf:72:d0:09:bb:bf:13:42:77:
         ed:b0:21:aa:9b:db:0a:53:56:74:75:f7:6e:7c:98:5f:ab:2a:
         7c:70:8f:33:ec:6a:a3:96:b2:e4:c4:8c:a0:63:ff:77:a3:4f:
         dd:2c:fd:bd:2d:b7:77:b0:bd:d5:85:d2:98:38:95:af:63:72:
         21:7c:ae:15:8e:a1:50:46:3c:37:d3:ff:de:d5:e1:c3:70:59:
         56:e0:a6:32:92:ee:34:f5:d1:57:66:dd:5c:f7:17:04:fa:bf:
         ae:21:39:1b:70:93:e6:49:fe:ec:ac:f2:24:d1:43:ac:02:70:
         d1:96:12:81:e9:78:23:cb:0d:13:7d:69:e2:83:f4:9b:79:1f:
         7d:da:67:fa:61:1a:aa:d9:af:87:08:bd:29:33:3e:c1:1e:d1:
         cd:20:d8:9d:f4:aa:63:e8:b8:c0:8f:4c:1a:37:54:63:97:77:
         05:6b:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:12 2026 by rpki-client