Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
File:                     dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft (raw, json)
Hash identifier:          6BzPQGtQtC0vEaB0uugiDpusYum/gOV1t4qfS17woRU=
Subject key identifier:   5B:C7:90:BE:73:82:EB:CF:00:A2:3F:26:60:A4:09:81:F6:12:DC:50
Authority key identifier: 74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19
Certificate issuer:       /CN=A913B25C/serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
Manifest number:          31
Signing time:             Tue 23 Jun 2026 08:56:09 +0000
Manifest this update:     Tue 23 Jun 2026 08:56:09 +0000
Manifest next update:     Tue 30 Jun 2026 08:56:09 +0000
Files and hashes:         1: dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl (hash: lCJcmr4yMeXz5iDOnwn4FWfA2sxXO6WNsskKmu73rUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B25C, serialNumber=74F30CC619FD12201784963DDD581D0772F38E19
        Validity
            Not Before: Jun 23 08:56:09 2026 GMT
            Not After : Jun 30 08:56:09 2026 GMT
        Subject: CN=6a3a4a29-19b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:d6:72:8b:8f:ea:32:52:d0:38:8d:3c:25:
                    43:82:6b:b8:8a:00:70:7d:e5:ac:2f:25:b9:6e:1b:
                    63:eb:59:50:00:37:b2:f1:99:8b:46:2e:39:ad:33:
                    31:6b:df:86:43:17:c1:05:1a:10:83:97:5d:1f:bd:
                    b6:15:d0:47:4c:4c:a4:70:39:cb:21:cf:08:63:a8:
                    3e:69:65:8e:f7:c4:cc:57:2a:87:24:dc:38:d9:da:
                    50:61:a8:db:1c:ea:d5:8a:20:84:46:89:72:d2:1e:
                    4f:b1:0f:e7:90:4e:a5:96:22:60:1d:f1:7b:70:88:
                    a9:69:85:9d:14:dc:68:45:5e:b8:d4:7e:bf:48:1b:
                    bb:df:b6:3a:35:88:7e:3e:f3:ff:33:a8:f3:ef:65:
                    df:15:26:83:dd:d5:66:05:a5:93:e5:26:f5:76:cb:
                    9a:c9:ff:a8:b3:35:b0:11:f0:3f:2e:18:7e:aa:75:
                    a4:88:51:b4:db:07:51:5c:43:09:5b:9b:a9:85:7a:
                    ba:dc:a4:3c:72:66:48:c7:82:6b:62:58:69:1a:a9:
                    5e:7b:e3:93:46:ad:75:84:94:8e:d4:19:32:a9:8f:
                    3a:c5:c8:2c:40:f5:8a:3b:55:12:25:ae:47:2a:f0:
                    bd:d8:c8:82:9d:42:1d:55:09:3a:ab:bf:9b:9a:c8:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:90:BE:73:82:EB:CF:00:A2:3F:26:60:A4:09:81:F6:12:DC:50
            X509v3 Authority Key Identifier:
                keyid:74:F3:0C:C6:19:FD:12:20:17:84:96:3D:DD:58:1D:07:72:F3:8E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dPMMxhn9EiAXhJY93VgdB3Lzjhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/6FF20A4A24D711F1881BD2D0AB833773/dPMMxhn9EiAXhJY93VgdB3Lzjhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:86:9f:6f:4c:c8:13:01:c5:c8:a2:df:42:9e:39:75:76:
         ac:b0:22:87:6c:d1:aa:bd:12:94:25:70:4d:28:94:89:5e:9b:
         55:c6:6d:aa:15:f0:dc:de:87:4a:18:fd:cc:3b:b9:c1:14:23:
         8c:85:13:80:39:6e:8e:fc:44:8c:1f:cf:79:d6:13:02:f5:cd:
         c2:39:7d:77:f7:df:aa:68:75:9e:60:5e:66:e3:0e:f6:b6:72:
         0b:f7:ec:ee:76:2c:92:de:e6:be:76:66:76:87:b8:01:e5:37:
         e5:93:be:a0:bb:ca:17:fb:0b:b9:b3:39:12:3d:0b:7c:5c:35:
         6f:85:64:06:f2:b5:d2:b4:e3:28:14:2b:f2:ea:3d:c4:88:f0:
         5a:44:61:c5:a6:5c:81:88:44:36:67:8e:57:d6:be:20:76:2a:
         c3:bc:34:24:ff:ea:20:a6:04:f0:91:9f:56:13:7b:1f:d7:84:
         39:5b:ca:0b:1d:56:46:ab:af:dd:6c:b8:de:d4:b5:2f:1c:a6:
         06:e0:37:db:e6:85:70:af:28:c7:93:31:35:32:c2:c6:e9:b7:
         01:3d:ed:cf:0c:cd:00:d5:31:4c:7b:bf:06:0e:5d:a5:d7:61:
         17:88:5f:29:1b:7a:6b:df:99:3a:f5:87:13:42:95:bc:7d:39:
         97:48:36:51
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QjI1QzExMC8GA1UEBRMoNzRGMzBDQzYxOUZEMTIyMDE3ODQ5NjNEREQ1ODFEMDc3
MkYzOEUxOTAeFw0yNjA2MjMwODU2MDlaFw0yNjA2MzAwODU2MDlaMBgxFjAUBgNV
BAMTDTZhM2E0YTI5LTE5YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcs9Zyi4/qMlLQOI08JUOCa7iKAHB95awvJbluG2PrWVAAN7LxmYtGLjmtMzFr
34ZDF8EFGhCDl10fvbYV0EdMTKRwOcshzwhjqD5pZY73xMxXKock3DjZ2lBhqNsc
6tWKIIRGiXLSHk+xD+eQTqWWImAd8XtwiKlphZ0U3GhFXrjUfr9IG7vftjo1iH4+
8/8zqPPvZd8VJoPd1WYFpZPlJvV2y5rJ/6izNbAR8D8uGH6qdaSIUbTbB1FcQwlb
m6mFerrcpDxyZkjHgmtiWGkaqV5745NGrXWElI7UGTKpjzrFyCxA9Yo7VRIlrkcq
8L3YyIKdQh1VCTqrv5uayLWPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW8eQvnOC
688Aoj8mYKQJgfYS3FAwHwYDVR0jBBgwFoAUdPMMxhn9EiAXhJY93VgdB3Lzjhkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjVDLzZGRjIwQTRBMjRE
NzExRjE4ODFCRDJEMEFCODMzNzczL2RQTU14aG45RWlBWGhKWTkzVmdkQjNMempo
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZFBNTXhobjlFaUFYaEpZOTNWZ2RCM0x6amhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC
MjVDLzZGRjIwQTRBMjRENzExRjE4ODFCRDJEMEFCODMzNzczL2RQTU14aG45RWlB
WGhKWTkzVmdkQjNMempoay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCGroafb0zIEwHFyKLfQp45dXassCKHbNGqvRKUJXBNKJSJXptVxm2qFfDc3odK
GP3MO7nBFCOMhROAOW6O/ESMH8951hMC9c3COX1399+qaHWeYF5m4w72tnIL9+zu
diyS3ua+dmZ2h7gB5Tflk76gu8oX+wu5szkSPQt8XDVvhWQG8rXStOMoFCvy6j3E
iPBaRGHFplyBiEQ2Z45X1r4gdirDvDQk/+ogpgTwkZ9WE3sf14Q5W8oLHVZGq6/d
bLje1LUvHKYG4Dfb5oVwryjHkzE1MsLG6bcBPe3PDM0A1TFMe78GDl2l12EXiF8p
G3pr35k69YcTQpW8fTmXSDZR
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:00 2026 by rpki-client