Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File:                     hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier:          ibGttAhiVY7UAmnUB36PwIgAlIReGcOA9UJuvQSsSs0=
Subject key identifier:   46:C0:25:06:55:C1:60:DA:9A:1B:0F:76:A6:7F:43:FF:27:75:12:EE
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer:       /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number:          018C
Signing time:             Tue 23 Jun 2026 04:39:21 +0000
Manifest this update:     Tue 23 Jun 2026 04:39:20 +0000
Manifest next update:     Tue 30 Jun 2026 04:39:20 +0000
Files and hashes:         1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: 1TcKpqYXWRVlOytP3s1+TZlDWtUuzp4m70ag3QmJuRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
        Validity
            Not Before: Jun 23 04:39:20 2026 GMT
            Not After : Jun 30 04:39:20 2026 GMT
        Subject: CN=6a3a0df9-8961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:f7:fe:13:d5:83:02:76:43:db:44:39:d4:
                    fe:6f:49:f4:e4:88:d0:3b:ed:45:87:21:fd:fc:f1:
                    64:17:4a:d0:d9:f7:d2:b2:c3:8b:25:cd:f1:c7:59:
                    20:5e:f5:5d:11:4e:17:8e:3a:0a:60:0b:e8:8b:a6:
                    2b:8e:24:91:f0:42:7e:37:2e:09:64:48:32:ba:8c:
                    12:3a:b0:8a:8a:0f:a4:7e:59:af:88:eb:32:28:6f:
                    3d:79:15:67:83:fa:9e:b8:96:2f:6e:7a:1d:28:0f:
                    1b:f8:f4:9b:5b:b6:30:90:ed:c8:89:f8:df:5e:c4:
                    ff:7f:ca:29:40:2d:17:9d:08:47:6c:56:ed:3a:03:
                    66:03:81:86:80:c8:4a:29:15:f4:47:e6:4e:3f:4c:
                    1e:0a:5a:ad:86:b9:09:95:37:d3:b9:0b:68:96:22:
                    4f:58:e1:5e:9f:fd:73:09:37:cb:12:28:54:ef:ee:
                    3c:25:94:1a:8a:45:8b:5f:3b:a0:99:2a:3f:65:6f:
                    fe:bd:00:be:f5:af:70:44:ed:3c:30:63:fa:2d:cf:
                    a3:bf:7b:36:bf:f4:d7:a2:05:88:f7:a7:8e:35:df:
                    d5:07:a1:66:79:c9:2d:8d:f1:42:ed:61:a9:e2:1a:
                    74:54:c1:86:63:c3:91:b0:18:2d:84:7d:7d:e7:90:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C0:25:06:55:C1:60:DA:9A:1B:0F:76:A6:7F:43:FF:27:75:12:EE
            X509v3 Authority Key Identifier:
                keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:51:0f:e0:bf:27:06:20:21:8a:dc:d5:c1:e3:2c:e2:a2:
         05:e0:ff:d3:ec:cd:33:4c:8d:c2:bb:2e:c8:b8:e3:da:ae:6f:
         ef:51:09:02:0b:38:99:0b:f9:8e:a1:1f:5a:ac:03:87:1d:6c:
         b8:54:db:c6:95:ed:bc:ff:67:e6:7e:ff:69:2e:00:2c:e0:a5:
         dc:9e:66:2a:e2:97:35:45:6d:77:be:8a:9d:85:1a:55:69:78:
         83:22:56:79:10:70:4c:75:09:1e:25:41:d9:57:c4:79:96:7f:
         9a:43:b6:96:1b:af:e9:9e:cf:ee:14:8d:6d:37:40:52:15:c0:
         58:3d:da:70:49:d6:de:2a:8f:a0:5b:f5:ff:c5:8e:ce:cb:9a:
         92:19:eb:d2:31:8e:54:5f:1c:56:45:33:5e:2e:8d:b5:ff:04:
         97:4d:66:a4:5f:7b:18:1d:f7:3d:f2:74:43:33:17:53:a0:f8:
         d4:fa:ac:e2:9c:76:91:d8:f5:54:d5:4f:06:2b:7f:79:d5:0c:
         87:45:04:2b:02:b3:47:76:b3:2d:8a:f0:7f:ed:94:d9:75:af:
         64:f7:a4:05:2d:20:8b:28:ec:aa:00:1d:94:be:45:79:ec:9a:
         a5:89:78:1d:67:15:85:5b:43:00:c2:69:22:10:3a:f3:3d:d7:
         ed:03:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:38 2026 by rpki-client