Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          YGwmOZfmMGb0++u5nYCz4gWx8SBf2g8kkzxx0u+MSeA=
Subject key identifier:   C8:ED:B8:11:9D:2F:75:54:7C:D4:1D:9B:ED:17:E5:F5:4D:D6:CC:99
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          6325
Signing time:             Thu 24 Sep 2026 14:15:25 +0000
Manifest this update:     Thu 24 Sep 2026 14:15:25 +0000
Manifest next update:     Thu 01 Oct 2026 14:15:25 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: HFkZP62VcFSgt7POiYwG1vYs7FHfL7IiE2lO7J9elIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Sep 24 14:15:25 2026 GMT
            Not After : Oct  1 14:15:25 2026 GMT
        Subject: CN=6ab5307d-fe4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:f5:87:0c:ad:22:37:29:87:d1:b5:58:cd:
                    46:b6:16:14:03:69:b7:99:85:bb:da:69:b9:e5:29:
                    58:65:3d:b8:23:5c:1e:99:44:a6:67:68:7d:de:e1:
                    8c:0b:53:df:8a:59:63:b4:9e:e7:a5:69:e2:37:d7:
                    92:6f:fd:eb:5b:56:fd:e1:0b:bc:77:23:2a:16:dd:
                    06:01:af:40:81:9f:6e:53:67:e2:a8:1c:64:98:1a:
                    9c:8a:2c:77:63:81:b6:94:a6:d6:3f:e4:68:97:7b:
                    48:a9:f4:44:91:d7:eb:e1:b0:9b:f8:14:bd:60:bd:
                    4a:1e:2b:c9:98:8c:ad:f5:08:45:28:4c:71:95:32:
                    d9:f2:e0:8b:ef:be:8c:e0:87:10:90:b6:d1:14:b6:
                    14:c4:b0:e0:7e:07:f4:ec:d3:d8:9b:f8:1d:fc:a7:
                    23:68:91:26:74:46:0e:01:28:20:c1:3b:b7:a9:be:
                    9c:c5:9d:0c:08:fc:1a:7c:fc:91:e1:b8:43:dd:86:
                    96:64:47:1a:d5:7e:7d:eb:62:c0:6f:e5:77:16:49:
                    ad:1f:9f:48:06:52:d5:91:ee:ee:a6:b8:36:7e:87:
                    8b:6b:51:61:57:73:ec:a3:44:3d:aa:4a:b0:88:10:
                    30:15:c7:6a:ad:3d:d0:8b:7a:aa:95:82:94:2b:9e:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:ED:B8:11:9D:2F:75:54:7C:D4:1D:9B:ED:17:E5:F5:4D:D6:CC:99
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:38:f6:41:aa:8e:21:4e:d9:86:a2:d3:cb:08:a0:74:83:7c:
         fa:33:86:dc:31:dd:1b:c9:d7:a2:8c:9d:81:39:f7:6a:47:49:
         5f:91:78:7e:93:a5:67:0e:b4:12:74:80:f0:c7:b4:09:65:a9:
         7c:c5:28:e2:8a:f0:68:db:82:b4:76:82:66:b0:7d:35:84:2f:
         d7:73:cb:70:22:82:0f:0f:aa:f1:79:94:ed:cf:bf:3b:ad:27:
         e8:e1:3b:75:c4:ab:3c:d7:b7:da:a0:4b:52:4f:ef:ab:01:bb:
         c4:f3:4c:95:7f:c4:04:42:f3:e4:83:56:bd:8b:fe:34:fb:61:
         d0:ac:eb:db:2f:59:91:d9:9f:f5:5f:a7:60:a3:1d:fe:28:55:
         b0:61:22:89:f0:78:ae:50:b5:a0:45:f2:bf:fe:05:97:da:75:
         97:39:10:a0:f4:c3:d1:d4:e5:06:b2:0d:83:02:3f:b5:87:2e:
         0c:94:1d:12:2e:8b:90:2a:f2:aa:c4:da:96:09:86:8b:f1:7d:
         7b:31:d2:f7:97:66:db:a2:58:fb:7d:78:ae:e7:8e:7d:d9:75:
         21:e4:59:c8:d1:e6:7b:1e:de:95:e4:39:7a:b7:9e:4a:26:4f:
         20:cc:0d:61:82:8d:a5:3e:a1:83:48:83:df:77:1b:e9:ad:f1:
         00:8d:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:17:52 2026 by rpki-client