Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File:                     rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier:          gu4GjZe7Ls4W96+4VypjMs3WNeWRGMh30anNovGrWl8=
Subject key identifier:   55:82:E7:C5:3B:F5:7F:3A:9F:84:CE:79:DA:BD:48:83:42:5A:7B:08
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer:       /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial:       3584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number:          356B
Signing time:             Thu 04 Jun 2026 14:26:33 +0000
Manifest this update:     Thu 04 Jun 2026 14:26:33 +0000
Manifest next update:     Thu 11 Jun 2026 14:26:33 +0000
Files and hashes:         1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: Jlk23s3+P99iYMVtf5bL0+1HlEtSWgGdEgWvckDq8BM=)
                          2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: 3p8lhXOghfUUqdrTyAduNREPHKMrwV/GjFpR+aXGNZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 14:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13700 (0x3584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
        Validity
            Not Before: Jun  4 14:26:33 2026 GMT
            Not After : Jun 11 14:26:33 2026 GMT
        Subject: CN=6a218b19-0457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:00:9e:4c:1a:8a:2b:2f:3e:ee:d3:a5:c0:
                    c6:72:eb:d2:84:25:7f:84:84:b5:b2:72:77:55:97:
                    7f:7d:b3:e4:61:72:10:77:7c:f8:34:df:a5:e1:0b:
                    b5:43:99:ca:13:63:0d:34:f9:41:26:fb:3e:5c:2a:
                    6e:9a:fc:52:6b:9e:ba:fc:ec:5c:a8:59:d7:8b:7b:
                    65:f9:8f:59:84:11:0e:f8:ac:e0:a4:19:7f:38:3a:
                    82:b2:64:27:71:a9:62:1d:f2:bd:5b:26:89:00:7d:
                    60:70:01:96:c5:54:8f:df:03:76:45:c4:55:cd:21:
                    a9:57:6b:c3:19:60:e9:b4:42:cb:93:70:6f:e8:e4:
                    8c:6c:21:44:fc:16:85:9f:04:eb:b5:a0:b5:14:7f:
                    f4:56:eb:1a:b7:58:2a:4f:f1:d9:94:08:e5:71:b1:
                    c9:be:ca:7c:a3:b1:12:c4:95:23:db:76:3e:e7:0f:
                    1a:f7:4c:84:6d:ef:ac:ab:e1:3a:f9:4d:55:b7:ea:
                    fc:5b:35:c8:db:1e:4f:63:6f:df:ab:b9:5a:9e:aa:
                    f2:bd:cd:f2:6a:a2:eb:9d:9c:95:7b:b7:36:16:e5:
                    ee:91:91:fe:d5:71:84:b7:1f:03:d5:1a:94:d3:e0:
                    be:9c:41:5e:27:8a:32:b5:99:0f:53:8b:67:cf:99:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:82:E7:C5:3B:F5:7F:3A:9F:84:CE:79:DA:BD:48:83:42:5A:7B:08
            X509v3 Authority Key Identifier:
                keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d5:84:97:eb:5f:7d:4d:3c:d3:ab:01:3a:12:a5:78:6a:df:
         7f:de:b6:15:42:2b:cc:ee:68:48:11:83:c1:04:c5:89:50:08:
         19:92:bf:13:0b:85:91:ff:2f:f0:71:2b:8d:6b:77:c9:42:01:
         2a:57:3e:fc:13:5b:3f:82:69:06:9a:38:9e:92:0e:0c:bd:10:
         a1:3e:ad:9e:44:43:1c:88:18:68:a6:1c:02:ea:8e:dc:3b:4f:
         56:45:74:c4:1c:15:28:9e:39:7b:cb:a1:d2:60:72:fa:82:91:
         02:ed:c5:c1:f4:7c:3a:23:df:f8:4c:86:a0:a8:cf:5d:4e:78:
         e7:f3:29:2d:49:2a:60:87:77:ab:00:7a:9a:74:32:d8:e1:d5:
         a3:03:0e:6f:41:7b:9e:89:92:91:6d:36:c9:87:4c:14:46:44:
         2d:a0:3a:da:4c:26:3f:22:67:a3:cc:07:8b:61:6d:34:e6:65:
         9a:b6:cd:45:21:42:ba:ae:3e:6f:e4:5c:24:b7:8b:28:7b:bb:
         a4:74:2f:7f:cf:6f:5a:dc:52:fd:25:77:c0:11:eb:85:36:f5:
         38:86:89:3b:8a:30:35:0b:40:7c:20:24:94:60:c2:94:65:6b:
         1e:92:71:2b:f1:91:21:ed:20:57:77:e7:e7:cb:f8:a6:68:1a:
         9b:71:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:02 2026 by rpki-client