Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          i3zHCqbQTfC37H+lrQebXJ/a8wzVzJWyyYvpNY2TyU0=
Subject key identifier:   34:11:D7:2C:4E:7C:C8:BD:B8:54:49:4B:48:85:23:34:17:CA:93:75
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       3566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          62C2
Signing time:             Tue 28 Jul 2026 14:15:24 +0000
Manifest this update:     Tue 28 Jul 2026 14:15:23 +0000
Manifest next update:     Tue 04 Aug 2026 14:15:23 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: BmZYcBRj3opgCvK8Tfc6W8ahE+vNseeGdskqdpJKSmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13670 (0x3566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Jul 28 14:15:23 2026 GMT
            Not After : Aug  4 14:15:23 2026 GMT
        Subject: CN=6a68b97c-a33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:45:f8:cc:e1:92:b1:1c:81:b8:7a:d8:5a:74:
                    f6:c5:45:0d:84:90:97:9c:77:19:1e:be:2d:1e:b4:
                    05:a9:81:48:5a:66:39:cb:f2:0d:d5:af:b6:10:47:
                    60:da:92:fe:17:b8:bd:86:9d:c2:43:f6:34:7a:01:
                    10:cf:f6:95:f0:c5:98:09:a9:b4:52:16:3d:23:9a:
                    fc:db:1a:11:82:2f:23:6e:f4:8f:10:d8:15:d0:6f:
                    07:a1:94:b1:07:cf:43:c4:00:1c:1f:9d:cd:cb:b0:
                    d1:89:3d:82:ca:00:86:2d:34:c6:7c:f6:83:e8:35:
                    79:d3:fd:26:d0:3f:25:51:8f:51:67:eb:b2:e8:a1:
                    07:01:7b:fd:b5:e8:c1:90:c3:63:f4:3f:bd:57:6b:
                    a4:62:38:35:cf:35:ba:29:f9:e1:dd:88:c9:03:dc:
                    24:a7:d4:73:14:88:f3:c2:fb:a3:55:bd:9e:d5:be:
                    af:01:75:9e:f9:10:18:0c:46:6e:c2:b3:eb:31:19:
                    be:ff:eb:5f:64:5c:e0:b8:53:79:40:7d:5c:79:8d:
                    50:a3:2f:ff:f0:8c:10:83:a4:1a:8e:f5:7d:43:90:
                    42:b0:15:7d:d9:77:c4:b8:e7:7a:16:95:9c:49:1f:
                    33:8e:1d:5e:03:37:4f:9a:9a:4c:86:de:69:fc:e2:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:11:D7:2C:4E:7C:C8:BD:B8:54:49:4B:48:85:23:34:17:CA:93:75
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:07:80:f5:cb:cd:28:61:ab:3e:c1:93:7a:e2:f4:83:1a:
         72:40:8a:b7:3d:75:83:7a:fd:77:62:1a:e5:3f:b2:59:b6:11:
         66:f9:d9:e8:78:9f:b0:4b:ba:23:25:14:7f:79:6f:ec:f9:b0:
         7f:c4:aa:27:7e:a3:94:28:95:b5:6f:ed:fe:de:b7:e2:36:05:
         f1:bb:04:70:f6:af:59:82:88:0f:12:e8:00:e4:67:f9:26:93:
         fb:2b:76:6f:8f:8a:96:24:82:9a:37:ff:e9:39:06:5c:60:c9:
         6b:91:43:58:6b:12:20:e5:fc:d5:12:65:30:e9:f8:0b:96:7f:
         7e:dd:e2:17:a6:4b:37:be:87:b2:cd:2f:5a:d6:82:76:68:81:
         5a:10:9e:11:1e:38:39:68:7a:aa:63:b4:88:9d:fd:63:34:7f:
         03:da:d9:36:88:c8:8f:e1:ba:26:a8:e7:d5:d8:e7:94:9c:a7:
         fe:d6:1b:8b:81:84:af:57:27:e6:d1:fb:93:c3:da:b8:4a:4e:
         26:01:ee:bc:38:af:76:c2:a9:6e:31:49:3a:ef:cb:d9:a4:7a:
         01:9e:c0:f3:45:ca:62:73:eb:78:22:39:09:f2:6d:68:37:42:
         ad:db:d7:14:f3:6e:3e:e3:af:02:77:14:a1:b9:9b:78:7a:fa:
         1b:6b:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:05 2026 by rpki-client