Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
File:                     iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json)
Hash identifier:          vFk6dgK1mO7O5ISMiSLF0kaiXYlBv5aO2fbqiPi6B2k=
Subject key identifier:   B0:4A:D6:4A:B4:51:23:DF:36:C3:50:B2:2F:7F:3F:9D:D5:8E:67:14
Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
Certificate issuer:       /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
Manifest number:          0150
Signing time:             Sat 13 Jun 2026 05:09:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:09:16 +0000
Manifest next update:     Sat 20 Jun 2026 05:09:16 +0000
Files and hashes:         1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: 15VpLWM5GFAwRpq7sgxODe1A3IyBa6oMOBis6CqHv/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
        Validity
            Not Before: Jun 13 05:09:16 2026 GMT
            Not After : Jun 20 05:09:16 2026 GMT
        Subject: CN=6a2ce5fc-5b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:e8:00:82:d8:45:39:aa:42:0a:a5:ad:0e:
                    f5:2a:86:a5:24:f9:ca:52:8a:86:7f:58:93:7a:89:
                    47:36:2b:ce:7c:29:04:eb:b4:f5:e0:50:4c:25:89:
                    e9:3c:06:8f:c5:92:37:0f:0a:85:da:e2:bc:d5:ef:
                    50:3b:b2:4d:1e:d6:c0:51:e5:42:c5:b8:e9:4d:61:
                    be:95:62:03:69:d5:99:a4:ed:72:e1:78:db:14:79:
                    40:64:8d:1e:e2:ad:c2:58:91:70:1d:e3:53:38:43:
                    e1:a4:8b:0f:9f:11:55:79:ff:10:c7:30:3b:1b:c6:
                    e8:79:17:11:79:b9:c2:c6:9e:fb:bc:6a:0d:8e:05:
                    26:ae:a7:42:87:4d:e4:23:1e:fd:75:fa:f0:c4:ce:
                    8b:6a:f6:0a:38:dd:e1:54:f5:4f:8c:8c:5b:13:0d:
                    38:d9:4d:47:55:06:df:ed:d9:f8:bc:4f:47:0e:28:
                    77:2e:3f:87:e0:ae:68:29:23:7a:27:30:32:71:53:
                    99:87:2a:5f:51:4a:1a:79:91:28:0f:07:44:46:0e:
                    2f:19:0f:74:15:cb:1c:dd:aa:c3:de:b2:6f:f6:50:
                    71:b2:91:d6:1f:d5:01:3e:96:9a:6b:f6:5b:18:1e:
                    94:b8:e5:19:64:4d:91:6d:bf:94:cc:e4:b7:9d:c1:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:D6:4A:B4:51:23:DF:36:C3:50:B2:2F:7F:3F:9D:D5:8E:67:14
            X509v3 Authority Key Identifier:
                keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:66:06:a0:45:0e:f7:e6:ce:88:fd:92:8e:20:a8:a8:f7:8d:
         c4:fd:5a:82:33:f3:e4:82:ce:12:21:68:44:52:83:e8:e8:7b:
         d2:65:5b:97:32:2d:b0:ee:01:d8:5b:7b:8a:45:e7:8a:2f:58:
         3a:ca:99:70:ce:7f:23:ff:9e:a5:bc:cd:04:1c:86:96:83:a1:
         23:a8:fd:1c:7a:f0:55:c8:fc:52:28:c2:87:9d:78:44:c0:33:
         e3:aa:7f:2a:48:43:d0:34:b7:8d:a5:94:6f:f8:db:f4:d7:8a:
         e0:b6:f0:89:b0:8d:dd:1f:41:0e:db:d7:86:f5:66:77:6a:16:
         e6:84:2a:ec:09:b3:0e:82:f6:7c:65:6a:91:77:2f:73:8f:06:
         24:b9:7f:a8:61:68:1e:64:54:3d:07:42:9c:bd:f0:c9:68:14:
         05:b9:9f:bd:a3:ba:6b:6d:06:fc:6c:46:26:9c:3b:b7:83:74:
         72:07:b0:21:0d:5e:2c:4d:8a:f7:60:7b:d8:1c:cd:6b:cc:d7:
         d3:10:8e:b7:8f:69:3d:ff:23:d5:eb:f4:77:c0:f8:32:c6:f3:
         8c:dd:3b:b8:90:cd:79:60:48:2d:55:22:c1:a0:ef:76:48:e9:
         91:6e:65:86:36:ae:ab:b0:39:8f:75:3b:5b:c6:4a:46:5d:c2:
         5c:09:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:06 2026 by rpki-client