Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
File:                     P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json)
Hash identifier:          Zid6rJ/2ZtGPPt/ocut3o7E0f21DmtjJN63Trvm4Wjo=
Subject key identifier:   61:AB:4D:22:DA:84:F5:FE:AF:CD:D1:41:15:3C:2E:CA:2E:C1:1E:EF
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Certificate issuer:       /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
Manifest number:          028D
Signing time:             Sat 13 Jun 2026 01:51:29 +0000
Manifest this update:     Sat 13 Jun 2026 01:51:28 +0000
Manifest next update:     Sat 20 Jun 2026 01:51:28 +0000
Files and hashes:         1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: 5QTOKkkymPTdHDqn+p/UqCFPKWooxuDzgePZZt7nQgg=)
                          2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: cHa7YclYlDuD3d6uVoFpYSql4Y83b6GnqkLI1omuRXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
        Validity
            Not Before: Jun 13 01:51:28 2026 GMT
            Not After : Jun 20 01:51:28 2026 GMT
        Subject: CN=6a2cb7a1-9aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:92:fd:93:0d:14:6c:d8:a4:20:3c:72:c4:
                    26:c8:f0:bf:58:67:d2:74:60:0d:ed:af:b5:1c:6e:
                    62:28:9a:19:83:35:00:14:5b:0c:a8:e9:78:09:76:
                    1e:2d:c5:29:3d:f6:77:9b:c5:21:a2:2a:92:27:07:
                    1a:63:92:ae:af:d7:20:cb:54:ae:96:f1:14:2a:49:
                    93:de:58:d5:c4:21:5a:0b:d5:a7:0a:38:bb:64:10:
                    d5:e7:0b:e4:09:84:33:9d:03:57:5e:4b:06:04:57:
                    08:4b:22:29:bd:7e:87:91:8a:97:58:13:b4:ad:88:
                    2d:45:a4:d4:cf:69:75:c6:8e:66:9a:cd:44:da:70:
                    51:b5:4e:6c:4c:78:a0:44:de:5a:f6:dd:c2:c6:11:
                    7d:f9:d8:39:b1:99:58:35:45:cb:d6:75:2e:0d:38:
                    b6:14:ac:60:d6:7e:a2:ce:52:c5:bc:63:9c:b6:c1:
                    82:9b:6b:83:90:89:67:34:59:c0:f9:df:72:82:9d:
                    65:32:f6:66:68:29:48:55:5c:88:44:b4:10:b4:0a:
                    b6:f8:8a:fd:75:23:06:94:f3:80:b6:d1:62:c0:6e:
                    bc:2d:08:05:dd:d2:d8:ae:7f:5a:f4:e0:31:8b:13:
                    b9:a1:d4:5e:6c:83:86:f7:9c:af:08:56:01:d0:3f:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:4D:22:DA:84:F5:FE:AF:CD:D1:41:15:3C:2E:CA:2E:C1:1E:EF
            X509v3 Authority Key Identifier:
                keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6d:1d:3b:c6:76:db:f1:1d:8d:1e:6e:f8:7a:29:e6:c2:a1:
         92:e1:8b:68:f6:7b:ec:7d:37:c0:0a:03:11:8f:4c:ab:f7:72:
         89:b4:6e:23:bd:68:6d:b2:95:01:2b:63:ff:6c:40:de:a3:92:
         e7:b1:04:6e:36:a6:f0:b5:1d:93:ec:67:50:4d:5f:f6:ab:35:
         b0:e6:07:6c:72:7b:76:5a:24:90:80:dc:a3:59:f3:61:30:a0:
         37:3d:50:e2:a9:8d:93:e2:d7:9d:ff:fd:3f:97:81:ae:38:1b:
         d1:a8:0d:70:5c:64:33:72:80:fe:a5:52:f4:29:d4:12:89:f5:
         32:1d:0c:fe:06:70:76:57:46:40:17:e1:c2:9d:60:67:ef:89:
         37:96:99:9f:7f:34:7b:d5:89:8d:1d:79:7a:ce:85:21:b2:de:
         9c:ed:e0:9a:31:64:69:d6:30:9b:a1:cc:91:22:d4:90:46:32:
         6f:b3:0d:d1:0a:55:56:7b:b1:b8:c3:6b:dd:e6:8f:7d:7e:48:
         a7:2a:03:b0:a3:e2:95:6e:21:d8:0c:1c:11:d6:a0:ec:57:52:
         5b:08:b2:a3:a6:0d:1e:b5:50:98:b1:47:54:34:4e:1d:2b:05:
         8a:1b:de:67:43:47:ee:0b:cd:a8:1c:cb:ad:e9:6e:b4:a1:3f:
         0a:62:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:15:36 2026 by rpki-client