Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          Ir9z+EHuJ1RqwOGWae/yP7kB+f183z6Ah8smixzLjA0=
Subject key identifier:   D6:FC:3C:89:68:CE:4B:32:4D:70:81:B3:6D:7A:1D:24:02:A2:CA:FF
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       3573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          62EB
Signing time:             Tue 18 Aug 2026 14:15:27 +0000
Manifest this update:     Tue 18 Aug 2026 14:15:26 +0000
Manifest next update:     Tue 25 Aug 2026 14:15:26 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 0LrhFANXYN24TcrpRfxT4Z7yFcDEVRMc8QvbuGkxdUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13683 (0x3573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Aug 18 14:15:26 2026 GMT
            Not After : Aug 25 14:15:26 2026 GMT
        Subject: CN=6a8468ff-80f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:cd:42:11:ad:80:99:6c:44:61:1d:3b:f7:
                    14:a9:d4:ec:bf:8c:f3:26:1d:ae:e5:ba:2b:09:9b:
                    71:bb:63:2e:21:bf:36:e2:fa:39:3f:0c:db:2c:41:
                    72:7d:fa:57:27:1d:66:ac:17:bc:64:a9:24:6a:ce:
                    0f:56:94:92:26:f6:29:16:4f:a3:46:8e:f9:bd:fe:
                    72:9a:16:12:6c:14:e4:96:50:e5:5a:1f:57:77:c8:
                    eb:3e:a2:b0:1f:a1:48:7b:b4:3a:a6:8f:b3:51:83:
                    8a:67:b2:66:0f:54:e3:08:af:68:9a:e8:af:70:5f:
                    a6:da:c2:3d:73:40:8c:f5:e0:b4:3b:45:13:72:12:
                    1b:5d:42:7c:c0:91:a1:89:8c:ae:9e:a2:0c:11:e6:
                    a5:82:3c:f5:be:43:c5:d4:77:9e:75:60:84:dd:e7:
                    ee:4a:13:2d:ed:e9:2c:dc:d4:2d:01:23:9b:4f:0d:
                    d3:64:d9:7b:21:6e:fd:d4:7a:4d:5e:e1:ee:d2:b8:
                    6b:38:5d:2c:ce:aa:0e:9d:4e:23:23:f5:d3:d7:5f:
                    54:66:f5:9a:7a:a2:ba:3a:b0:a6:69:4a:4e:0a:84:
                    b1:e9:f5:b3:6d:86:2f:12:4d:f4:0b:30:30:86:3c:
                    72:2d:8b:50:85:ab:e3:76:67:ff:84:02:5e:16:61:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FC:3C:89:68:CE:4B:32:4D:70:81:B3:6D:7A:1D:24:02:A2:CA:FF
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:45:81:59:b1:82:17:89:76:c8:a2:f6:a4:34:1e:58:ec:
         6c:49:94:ee:41:af:e3:2a:d0:79:87:2d:3c:af:01:c9:a6:68:
         77:17:48:41:ed:23:9f:92:d0:50:31:ca:b1:3e:dd:94:ee:92:
         85:ae:ac:d2:37:b7:65:6d:6e:cb:b0:ee:84:46:cf:65:64:b4:
         19:47:1b:1b:ea:ed:9a:15:9e:40:e8:79:23:e0:f7:4b:ad:f0:
         0d:52:94:fe:72:dc:3d:df:25:32:aa:47:1e:a8:8c:dc:a9:3b:
         34:f6:82:8c:9a:28:0c:3c:03:c2:4e:47:aa:40:6f:de:58:af:
         8d:f9:fe:0d:d7:6a:12:ce:d1:4d:41:34:19:e4:65:da:6d:18:
         0d:fa:4c:3f:e1:1f:b0:59:7c:17:63:e6:49:2e:8a:92:85:0d:
         97:73:65:73:00:de:3c:a6:6d:bc:8a:1f:7f:4e:49:07:02:33:
         c1:b4:e0:d3:1b:2f:42:90:00:36:e5:5d:6c:90:0b:2a:0c:c5:
         78:fe:58:20:65:d4:7d:6f:af:21:59:8a:4b:d9:dd:54:a3:12:
         14:9a:40:4d:0d:79:da:a4:86:5f:e1:c4:e4:22:16:36:1e:87:
         33:81:2a:72:36:d8:cc:35:08:3d:5d:08:46:dd:52:5c:20:c3:
         82:5c:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:05 2026 by rpki-client