Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft
File:                     tHhQxGf-y0GdelnYEaxeaiegDx0.mft (raw, json)
Hash identifier:          3ZipdZLoMBhNQWFtgEH4NJMysqOoKbgaR2e/6TmDPZM=
Subject key identifier:   CD:3B:1D:CE:95:DD:3D:99:74:AC:95:A2:B9:BD:11:FD:7F:F5:9A:DB
Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D
Certificate issuer:       /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft
Manifest number:          15
Signing time:             Fri 12 Jun 2026 22:24:46 +0000
Manifest this update:     Fri 12 Jun 2026 22:24:45 +0000
Manifest next update:     Fri 19 Jun 2026 22:24:45 +0000
Files and hashes:         1: tHhQxGf-y0GdelnYEaxeaiegDx0.crl (hash: +pPypBuAoudICwpheJBbTRdby+XrkZ2mVhrSdgisyD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl
                          rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D
        Validity
            Not Before: Jun 12 22:24:45 2026 GMT
            Not After : Jun 19 22:24:45 2026 GMT
        Subject: CN=6a2c872e-7fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:9e:7e:51:9d:5d:6a:7c:af:7c:97:87:97:
                    5f:83:de:25:85:1f:df:d5:15:56:0d:01:45:9f:65:
                    ed:c8:2e:0c:b3:f7:ff:8e:83:b5:da:f9:78:17:02:
                    70:92:43:b7:5a:92:2c:83:10:a3:bb:f3:0f:12:93:
                    58:66:e8:88:b3:51:e5:28:a6:7e:88:23:44:21:f0:
                    72:1e:24:5c:a8:9d:bb:b0:8d:4f:2f:27:cd:cd:ed:
                    28:a5:46:59:02:0b:c7:d6:a1:37:36:f5:c8:01:70:
                    db:b8:6b:44:10:af:bc:19:59:8f:c6:c7:ac:98:2c:
                    5d:a3:5b:46:c9:0b:cd:e4:14:b6:dd:52:3a:ec:4c:
                    3d:1a:65:3c:7e:ff:7c:91:ef:30:f1:1b:02:5e:d7:
                    1d:c7:6d:ae:ba:72:42:a2:89:b6:3a:ad:66:bb:f5:
                    58:11:2a:82:ad:8b:01:c1:91:07:d7:5d:58:5a:64:
                    dc:67:c3:18:e9:e0:41:a9:5f:4f:c7:9f:28:90:7c:
                    a4:5a:de:a7:7d:d0:f8:f3:a4:96:3c:08:7b:e4:48:
                    8b:c5:4a:d8:66:e6:af:40:38:d7:58:87:f9:a3:f5:
                    6d:0d:30:1a:c1:6b:b3:56:90:56:2d:59:e3:58:cc:
                    4b:9c:9f:bc:6e:bf:7b:aa:bb:71:20:cb:10:06:8f:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:1D:CE:95:DD:3D:99:74:AC:95:A2:B9:BD:11:FD:7F:F5:9A:DB
            X509v3 Authority Key Identifier:
                keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:82:f2:bc:b1:35:26:df:a8:99:a6:32:b4:20:ef:09:1c:3d:
         ac:4e:3e:b3:1e:22:5a:fc:1d:e1:fc:18:43:7a:8a:31:45:94:
         b6:b3:7d:c7:84:91:42:18:36:43:5c:82:9c:2d:af:aa:dc:14:
         bd:41:90:44:c6:b9:83:bc:a2:ed:44:7e:68:5c:39:59:06:1a:
         07:1d:05:b9:84:29:5f:71:37:70:bf:f5:5d:4a:f5:15:bf:67:
         e5:2d:3a:04:7f:33:80:34:a0:94:8c:d5:4a:d4:60:ed:72:99:
         5a:6b:c5:eb:22:fc:30:73:c0:16:b4:4b:13:d0:34:f5:54:2c:
         ee:1e:f0:88:9f:87:67:e3:d7:ec:46:87:16:10:0c:89:4a:a1:
         24:b9:ec:88:e7:20:a7:7c:2a:3c:d3:4c:e5:9d:27:37:89:a3:
         cd:d1:96:13:5f:ec:4d:8a:41:56:99:9c:b5:0a:8d:fe:fc:bf:
         73:dd:13:66:33:b6:a7:6c:ad:3d:5e:95:c0:e2:1f:f2:99:94:
         5a:79:d1:d6:d4:14:9f:1f:70:15:c4:06:38:0b:a0:42:39:8b:
         d4:37:ed:f9:08:5f:5d:4b:c9:5a:49:91:3a:73:68:6b:1b:93:
         d6:ac:d1:e4:ca:90:8c:e6:7c:f8:77:a7:58:0c:63:88:7b:62:
         98:93:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:54:02 2026 by rpki-client