Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
File:                     P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json)
Hash identifier:          FNVvMsZl7l+OHFU6al/jFFTA9xbRdry6lHiFNVv72fU=
Subject key identifier:   83:81:C1:CA:6C:B5:97:5F:8A:94:13:A2:FA:3A:91:8B:C5:89:48:56
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Certificate issuer:       /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
Manifest number:          0292
Signing time:             Tue 23 Jun 2026 01:54:51 +0000
Manifest this update:     Tue 23 Jun 2026 01:54:51 +0000
Manifest next update:     Tue 30 Jun 2026 01:54:51 +0000
Files and hashes:         1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: lyLADwuPwM0h3sZSAKZ+lroR8W7VLporQZU6hlZiYeE=)
                          2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: cHa7YclYlDuD3d6uVoFpYSql4Y83b6GnqkLI1omuRXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
        Validity
            Not Before: Jun 23 01:54:51 2026 GMT
            Not After : Jun 30 01:54:51 2026 GMT
        Subject: CN=6a39e76b-a442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:6e:11:87:aa:14:2a:80:c9:4d:c7:eb:10:
                    4b:86:eb:53:e8:68:26:13:3f:78:52:41:5c:01:9f:
                    cb:04:23:8c:ca:95:36:36:e3:0a:61:9b:5f:aa:de:
                    75:74:ac:e8:f3:0c:57:94:db:80:56:c2:13:d1:1e:
                    c6:6c:38:fc:9a:c2:18:2f:f7:35:78:d6:e0:04:53:
                    ae:9e:5d:90:b5:67:fb:8e:48:5b:39:89:ee:92:bd:
                    51:c7:79:b4:41:0d:40:a3:4d:df:98:6b:ce:30:b1:
                    83:39:b1:df:6a:87:a9:09:cd:cf:33:20:55:11:a1:
                    1b:58:96:28:34:b8:53:b6:b1:f7:20:a6:ea:31:ad:
                    d6:3f:b0:37:7c:ff:fd:62:a6:e6:7a:c2:ef:9b:63:
                    de:2d:19:54:a9:e6:88:15:dd:34:9f:63:08:dc:51:
                    80:37:51:3d:e7:12:73:00:d1:bc:d5:a2:a3:bd:00:
                    a6:c3:6f:b4:e8:7f:c8:96:1d:66:25:da:64:45:6a:
                    d1:4c:4c:ee:cf:8f:a9:ad:a2:6a:7b:c8:5c:be:00:
                    18:e7:b7:10:ae:80:05:a4:91:4d:f2:a7:5c:1d:2f:
                    1f:1d:88:b8:0e:f7:7c:67:88:74:b5:b4:9c:da:61:
                    fa:3a:58:2b:6d:fc:4a:c9:a9:ba:fb:f0:cb:10:7c:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:81:C1:CA:6C:B5:97:5F:8A:94:13:A2:FA:3A:91:8B:C5:89:48:56
            X509v3 Authority Key Identifier:
                keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:ec:62:38:75:7e:71:0c:4e:d2:bc:2f:3c:08:33:d0:66:
         d2:18:b3:93:96:f8:51:d1:61:4b:31:d6:30:aa:58:5f:13:ab:
         ca:ac:cb:e7:8f:ce:52:85:ad:d0:a4:fd:fe:4d:30:40:ab:76:
         d6:01:10:5d:0f:a5:9b:00:e2:aa:73:54:84:6b:79:bd:17:89:
         18:2f:43:69:01:94:4d:a9:93:22:7c:e8:2e:06:d9:ec:0d:a2:
         07:b8:28:c6:46:38:8a:69:de:e1:bd:2b:a7:a3:04:82:45:01:
         09:58:13:2f:2f:22:84:85:a0:85:b6:7a:ea:f7:fb:fd:14:0e:
         bb:2f:f2:45:ba:d1:db:0e:b3:9d:af:d9:42:30:da:a1:8b:cd:
         47:16:aa:57:42:03:69:94:ca:10:8b:23:68:58:60:3a:d9:89:
         3c:b9:13:55:b4:9c:3a:1f:88:69:f8:2c:05:95:03:f5:0a:45:
         88:6f:bc:49:5a:b1:ba:65:d9:d4:f1:db:f2:4a:35:95:9e:54:
         e8:a3:20:29:ab:4d:74:9d:22:d0:e6:ef:4f:a9:b4:b3:d8:c4:
         b1:d9:93:0a:44:1d:57:19:a2:3c:2e:da:de:96:1e:f2:d7:2e:
         0f:ba:25:0e:d4:8a:e3:64:73:cc:78:a4:7a:69:5d:cd:7a:13:
         ca:f4:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:30 2026 by rpki-client