Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File:                     hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier:          b0GEQygHPtnYbRw51WJMSVa6bky3eItwNmYdnU4Knrg=
Subject key identifier:   2F:EF:BC:51:CD:91:5E:0C:0E:66:E8:47:90:E9:F4:BC:1E:CE:40:F4
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer:       /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number:          4D
Signing time:             Tue 23 Jun 2026 08:34:09 +0000
Manifest this update:     Tue 23 Jun 2026 08:34:09 +0000
Manifest next update:     Tue 30 Jun 2026 08:34:09 +0000
Files and hashes:         1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: 5TMLJkWIVNh+s1e+uEzAHPYgi9eSQWTzK52dy2uL6ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
        Validity
            Not Before: Jun 23 08:34:09 2026 GMT
            Not After : Jun 30 08:34:09 2026 GMT
        Subject: CN=6a3a4501-3efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:4e:0e:cb:c6:b2:68:15:07:54:89:79:f4:
                    23:f5:d6:2f:95:e7:e2:ef:b8:31:4d:32:35:a4:6f:
                    21:90:a8:30:76:da:45:f0:ce:33:19:c8:58:0b:0f:
                    af:a5:44:72:f3:97:31:73:4f:d1:5d:6e:c8:5b:05:
                    e9:ac:fc:5e:8c:b6:c1:e7:71:83:76:80:20:d0:4f:
                    47:8a:0a:c5:7a:d6:53:b1:f7:63:1f:4a:9f:e3:b4:
                    2f:2e:78:09:1a:96:75:cb:36:1b:f1:2d:94:fc:da:
                    04:2b:11:f0:ec:6c:dd:6c:97:42:07:10:00:14:de:
                    7a:07:f2:32:6c:05:80:12:38:2c:f5:39:87:4b:de:
                    e0:30:fa:89:98:0f:36:4f:43:e7:14:7c:1a:11:1c:
                    51:fc:e5:bd:fd:08:cc:2e:4f:9c:dc:2d:cc:ba:bc:
                    fe:1a:de:20:fe:39:2d:a7:ef:df:c0:68:c9:e9:fd:
                    ef:5d:21:cc:58:f5:0a:18:cb:b7:5a:7a:3a:0f:2c:
                    62:22:b7:7a:7f:50:7a:b4:42:ba:e0:71:80:c7:87:
                    13:43:89:d7:e5:72:24:15:6e:4e:87:1d:41:d2:0c:
                    26:55:66:13:e7:fd:cb:8b:6a:71:b4:12:74:1d:13:
                    f5:13:3d:f1:79:49:3f:13:5b:3d:97:cd:48:52:18:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EF:BC:51:CD:91:5E:0C:0E:66:E8:47:90:E9:F4:BC:1E:CE:40:F4
            X509v3 Authority Key Identifier:
                keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:3a:c8:1d:20:af:e9:6d:7b:74:4b:01:1d:89:95:90:06:
         76:1d:db:cf:f1:3e:98:29:44:09:49:92:ac:1d:8e:3b:2a:d8:
         9c:44:c3:d2:26:4e:8c:af:3b:db:02:d3:94:3a:e3:7b:b5:d3:
         9b:f2:4a:74:9d:3f:ff:98:a5:89:a7:45:b3:97:66:c0:be:36:
         65:85:54:ad:3a:cc:44:ec:68:a0:1b:2e:9f:14:4b:d1:4d:ae:
         be:20:2e:d5:7d:a5:1b:89:73:29:50:11:3a:2b:a3:3b:96:33:
         dd:1d:5c:a7:46:12:38:15:b5:74:ef:ba:99:52:43:b9:55:e1:
         2e:34:a9:3e:19:fb:e0:de:32:23:91:c7:ce:8f:f0:35:05:12:
         d2:08:57:e2:bb:0a:29:dc:11:fb:3c:72:a4:2c:28:37:64:9d:
         74:3f:fd:d9:bf:02:a6:5a:0d:d4:0b:08:a6:b8:72:d9:83:c5:
         0f:87:88:8a:77:d1:ad:3c:78:48:67:80:ef:16:92:ad:b9:35:
         4b:d0:57:12:2b:22:dc:4b:56:4d:3b:a7:c3:d8:48:75:8c:cd:
         cc:ba:1a:fa:8f:57:ad:85:3a:62:9c:67:99:b6:44:05:0b:82:
         c2:b6:4a:c2:af:0d:f9:24:6d:1f:28:e1:2a:3f:05:9a:2f:ec:
         e2:59:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:29 2026 by rpki-client