Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File:                     pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier:          sJ3GyzWhkyyQcw14PGSO3JADVheQhxXucWOlfSPtYdo=
Subject key identifier:   94:E5:54:5A:A8:21:83:81:84:6C:B9:71:54:F0:BF:46:CF:C7:ED:9B
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer:       /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial:       0520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number:          0520
Signing time:             Mon 22 Jun 2026 23:39:10 +0000
Manifest this update:     Mon 22 Jun 2026 23:39:09 +0000
Manifest next update:     Mon 29 Jun 2026 23:39:09 +0000
Files and hashes:         1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: hbDP+OZEhVPnRBRi0dnUAOMfLnF4DCHw4s0xabxzl7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
                          rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
        Validity
            Not Before: Jun 22 23:39:09 2026 GMT
            Not After : Jun 29 23:39:09 2026 GMT
        Subject: CN=6a39c79e-1dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:90:19:9a:af:de:bb:32:f2:31:9e:14:33:
                    30:7e:5e:05:06:8a:b1:f3:24:57:32:df:39:37:bf:
                    89:45:a9:63:a6:3a:8e:55:ab:3b:bd:a5:14:6a:86:
                    c7:fd:f7:d1:a3:24:4d:a0:b1:01:ad:0f:2e:0d:93:
                    76:a0:81:d5:ea:24:da:47:1e:bb:21:d4:46:34:06:
                    5a:21:dd:4c:86:3e:fc:c9:4e:92:c3:d9:b6:09:bf:
                    b0:2b:86:34:89:33:99:49:36:1d:ab:25:69:fb:9d:
                    2f:84:31:10:f5:41:2a:9c:21:89:51:16:3f:4d:bf:
                    2c:67:c6:3c:c3:ab:dd:08:cb:6e:3c:cb:a1:5b:a8:
                    c0:a1:e5:ff:40:97:99:97:b3:b1:32:39:c8:14:e7:
                    a3:fb:ae:00:99:c7:83:95:78:80:b1:cb:e3:30:c4:
                    0b:88:c6:a9:31:50:22:60:20:f7:a1:35:e6:c6:30:
                    30:27:3f:6f:02:84:1d:ac:39:34:14:77:80:42:fb:
                    46:08:e8:30:fa:d6:d8:b0:01:ad:40:77:30:18:07:
                    86:4b:ad:b4:8f:d7:66:64:bc:a8:ad:fb:12:9f:2b:
                    be:d8:54:a9:8d:1f:b5:b4:8b:74:ce:bb:04:98:1b:
                    23:0c:0e:a6:3c:e4:12:51:ba:00:ca:d2:46:1a:9f:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:54:5A:A8:21:83:81:84:6C:B9:71:54:F0:BF:46:CF:C7:ED:9B
            X509v3 Authority Key Identifier:
                keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:58:68:db:a3:18:cf:44:ff:3c:bc:cb:17:5e:52:88:e0:
         6b:fc:96:02:43:4e:d1:e2:b0:95:a1:e4:62:23:36:90:b3:f2:
         d5:bb:8c:37:2c:91:8d:26:0d:df:2f:f4:51:c6:44:b2:ae:13:
         b3:51:a3:ad:70:d4:2f:04:f1:ed:02:bb:f6:12:9c:9e:38:31:
         76:3c:82:5c:09:a3:03:74:63:6d:83:3a:4f:ed:e8:2b:ad:dd:
         49:1c:66:f6:3c:5e:80:5a:8c:a2:16:dd:72:3c:c6:a5:83:2d:
         32:c5:4d:f8:04:c2:78:62:9c:b6:2c:78:ab:b1:a0:6d:a4:89:
         a4:98:76:01:6b:9e:56:51:5c:9b:be:d7:f7:b6:e9:08:14:c1:
         92:a5:99:48:5d:9d:b4:b7:51:6a:25:b7:0d:f5:a9:1a:30:d1:
         f8:e3:fb:a5:91:b8:63:e0:3a:0a:4a:02:5d:12:ba:f5:1e:97:
         36:13:11:e1:d9:b5:72:94:19:ac:28:5f:1f:1c:a4:6c:3f:ae:
         b4:b8:41:ec:5e:2e:a9:b1:f4:04:bc:a7:55:36:59:cb:a3:fc:
         f0:50:8a:ac:9e:d2:f1:56:12:3b:c5:b4:71:64:55:dd:f3:d9:
         af:a9:bd:78:d6:1f:9c:a2:ac:98:eb:75:08:6d:5a:ca:83:57:
         0b:5e:40:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB
NzNDMjFGNEYwHhcNMjYwNjIyMjMzOTA5WhcNMjYwNjI5MjMzOTA5WjAYMRYwFAYD
VQQDEw02YTM5Yzc5ZS0xZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmoWQGZqv3rsy8jGeFDMwfl4FBoqx8yRXMt85N7+JRaljpjqOVas7vaUUaobH
/ffRoyRNoLEBrQ8uDZN2oIHV6iTaRx67IdRGNAZaId1Mhj78yU6Sw9m2Cb+wK4Y0
iTOZSTYdqyVp+50vhDEQ9UEqnCGJURY/Tb8sZ8Y8w6vdCMtuPMuhW6jAoeX/QJeZ
l7OxMjnIFOej+64AmceDlXiAscvjMMQLiMapMVAiYCD3oTXmxjAwJz9vAoQdrDk0
FHeAQvtGCOgw+tbYsAGtQHcwGAeGS620j9dmZLyorfsSnyu+2FSpjR+1tIt0zrsE
mBsjDA6mPOQSUboAytJGGp+PYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTlVFqo
IYOBhGy5cVTwv0bPx+2bMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz
MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS
YmdzZVFUcnc4TWluUENIMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXwlYaNujGM9E/zy8yxdeUojga/yWAkNO0eKwlaHkYiM2kLPy1buMNyyRjSYN
3y/0UcZEsq4Ts1GjrXDULwTx7QK79hKcnjgxdjyCXAmjA3RjbYM6T+3oK63dSRxm
9jxegFqMohbdcjzGpYMtMsVN+ATCeGKctix4q7GgbaSJpJh2AWueVlFcm77X97bp
CBTBkqWZSF2dtLdRaiW3DfWpGjDR+OP7pZG4Y+A6CkoCXRK69R6XNhMR4dm1cpQZ
rChfHxykbD+utLhB7F4uqbH0BLynVTZZy6P88FCKrJ7S8VYSO8W0cWRV3fPZr6m9
eNYfnKKsmOt1CG1ayoNXC15ADQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:06 2026 by rpki-client