Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          5J0Q6Q9c9pEtaTIeLP8f9aOXgjImBgKVSkKhwEpn+3g=
Subject key identifier:   2D:B1:D8:B4:A4:C7:34:6D:15:0C:18:17:B0:1A:03:17:6B:EA:F9:2D
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       354F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          627D
Signing time:             Fri 12 Jun 2026 14:15:24 +0000
Manifest this update:     Fri 12 Jun 2026 14:15:23 +0000
Manifest next update:     Fri 19 Jun 2026 14:15:23 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 0Ct6Pe6RB2o/kJIIWXogI/0hVua8UoexPfjPI45vfew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13647 (0x354f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Jun 12 14:15:23 2026 GMT
            Not After : Jun 19 14:15:23 2026 GMT
        Subject: CN=6a2c147c-b584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:02:b0:4c:11:0b:9b:9c:ea:80:e3:ea:6b:
                    03:dc:22:ff:82:12:a6:18:c0:cc:0b:2d:95:c9:00:
                    96:a7:48:1d:dd:3d:14:c1:53:ff:46:96:28:5a:a4:
                    e2:cf:e9:d1:00:eb:56:fd:62:8e:f0:0f:57:74:03:
                    f7:b1:5e:f7:18:cd:73:3d:c9:d7:d2:57:35:17:46:
                    a6:c8:b8:c1:3c:fa:87:63:82:ee:8e:e5:27:aa:77:
                    40:ac:2a:80:4c:48:71:f0:07:b9:bf:fa:4f:79:b5:
                    47:d6:ab:6e:31:cc:08:cc:e3:ec:9c:da:14:13:ed:
                    98:1a:30:bd:9c:35:52:21:9d:3e:5c:c9:a6:e4:18:
                    73:50:4e:ba:09:86:9d:bc:2a:85:7b:3f:f9:db:4e:
                    35:ef:6b:ab:a4:a9:39:22:e6:c3:ca:2b:95:19:20:
                    75:b1:e2:7a:5a:6d:29:1d:2d:d7:65:85:d9:3a:96:
                    4c:70:3f:62:15:45:06:38:36:d5:33:e7:df:ab:0f:
                    bc:c7:c7:70:5f:2b:19:c8:bc:e4:f8:dd:f3:5c:dd:
                    87:c2:36:99:47:77:c6:31:b9:20:40:32:79:7e:ad:
                    12:96:db:81:21:f2:28:e4:6d:d1:05:b1:69:9c:dc:
                    bf:73:0a:0b:97:af:08:0e:5c:a1:e9:8b:70:5e:5b:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B1:D8:B4:A4:C7:34:6D:15:0C:18:17:B0:1A:03:17:6B:EA:F9:2D
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:ec:81:f4:50:b9:f7:77:77:8f:10:19:f8:3d:7b:63:f8:
         ce:ea:71:0f:5e:f7:7d:31:62:07:82:45:cb:41:a5:4a:33:be:
         58:b7:9e:e7:a4:f5:e3:9e:6e:24:e9:c4:aa:09:fe:19:8f:14:
         d6:e7:95:71:4f:e3:3d:cf:56:4a:29:8d:03:25:db:fc:6d:61:
         1a:9a:ec:c3:ea:2f:9f:d3:e7:cc:cd:3d:9d:68:61:a0:a2:fd:
         4a:92:f6:d2:ac:ab:50:47:9f:cd:9c:5b:fd:78:00:a6:ac:f1:
         01:a1:9c:05:6b:2a:f4:65:11:ec:43:13:f8:5b:27:c1:1b:74:
         5e:a4:12:37:29:4b:d7:f5:05:dc:01:fe:ad:cb:6d:09:f9:8f:
         37:63:c5:ff:db:da:c3:b3:5a:3c:bf:1d:d2:0f:31:df:ec:79:
         5d:09:a7:4d:aa:2b:da:de:57:2d:9e:b2:ad:c6:45:8a:ce:40:
         e4:5f:78:a5:c5:c8:b2:1b:1b:73:d3:62:49:ef:cd:af:e1:d5:
         d8:81:53:76:2a:0c:be:2b:47:97:5e:da:37:eb:19:43:bf:56:
         c5:f3:97:23:09:b2:6d:55:81:86:c5:d3:f1:b5:72:87:d3:05:
         3e:b5:62:ad:2a:b3:68:84:92:08:53:5f:0d:c5:17:fe:b7:e5:
         bd:2b:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:32 2026 by rpki-client