Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          xfGPu3OE1GkwK01L5oCN3gOpUirqdzB3doe2pbpihA8=
Subject key identifier:   F8:7A:C1:FD:03:37:49:F4:B5:D4:E0:78:B6:56:32:65:FB:73:CE:BA
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          021F
Signing time:             Tue 12 May 2026 15:11:22 +0000
Manifest this update:     Tue 12 May 2026 15:11:22 +0000
Manifest next update:     Tue 19 May 2026 15:11:22 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: mfTJfcS26g7H8fSNUpgqfsoBBxotSqjdvOUfLLigtF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: May 12 15:11:22 2026 GMT
            Not After : May 19 15:11:22 2026 GMT
        Subject: CN=6a03431a-7f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:59:c6:c8:b3:d3:2f:39:52:ec:be:10:7f:
                    75:50:a3:80:4f:66:e6:d8:a0:d5:22:dd:a8:79:be:
                    ec:7c:bd:72:bc:5d:95:da:35:b6:41:7f:16:b2:19:
                    77:a6:c8:4a:9c:56:a4:04:57:cf:29:fb:0a:7e:8d:
                    b0:5e:d7:c6:36:2d:8a:07:32:c3:c4:c0:04:52:90:
                    ae:04:68:dc:1e:b1:be:25:5e:8b:07:4e:50:78:14:
                    7d:ad:7c:bf:a2:a5:27:cb:36:1c:63:7b:58:a8:74:
                    e5:8d:25:4a:2d:f3:46:2c:a6:2e:68:f1:c2:64:cc:
                    d7:60:fa:58:3f:2c:19:14:99:58:66:2c:17:b4:55:
                    65:2a:d8:87:53:ae:11:28:70:8d:c0:ef:e3:35:be:
                    b3:5d:fa:ed:8d:de:25:c2:ac:2a:0d:00:79:07:e7:
                    c8:54:2a:95:e9:5f:1f:a0:50:b4:05:01:37:7e:cc:
                    c9:3d:06:ae:06:c1:88:df:0b:75:5b:84:08:b6:06:
                    1f:26:a7:6a:59:50:ec:9e:59:30:9d:22:b7:4d:78:
                    ce:22:88:32:c3:82:57:c2:92:95:73:11:8e:2b:2a:
                    7d:c2:02:c4:f5:96:b1:85:79:63:42:1b:08:6f:85:
                    55:32:96:fd:0e:57:66:31:e7:29:76:7b:df:ee:e5:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7A:C1:FD:03:37:49:F4:B5:D4:E0:78:B6:56:32:65:FB:73:CE:BA
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2f:30:95:e6:c3:e6:3a:a3:7f:65:05:ac:35:e6:c2:ba:13:
         ef:49:98:7d:92:fc:97:67:14:cb:75:c0:88:43:9f:6a:b5:a3:
         39:87:68:06:97:42:23:3c:7d:95:cd:e8:5d:f6:9f:0b:37:12:
         99:fc:e1:8d:a8:82:40:b3:d1:f0:5b:28:08:44:80:a5:76:e7:
         42:96:2a:b5:c0:94:53:dd:22:f1:f8:05:33:8d:9b:e8:f7:34:
         27:81:12:cd:d1:46:30:b0:83:05:f9:bf:ae:46:07:69:33:f3:
         a1:14:1c:a0:b8:52:bc:36:89:bb:5d:93:d8:08:a5:60:19:16:
         7b:0b:c5:89:86:de:da:cc:4d:2d:65:06:c5:12:66:43:45:56:
         40:54:28:e8:02:95:4d:fb:0e:ae:9b:2c:60:2d:92:81:be:6c:
         67:dd:ea:ae:88:21:0a:c2:30:77:5e:2b:c8:ca:4a:10:73:e1:
         9f:dc:32:e3:90:da:db:98:29:ab:19:60:04:fd:ca:51:7a:af:
         1c:53:aa:7c:38:6d:a2:2f:d7:e0:a8:3f:48:e0:e4:bd:48:d3:
         7c:cb:9f:8f:89:fa:fe:2a:59:db:70:f6:05:00:ce:91:90:fa:
         52:3f:1f:03:b2:a5:98:3d:46:a0:ab:d3:8b:2e:6a:51:2f:f1:
         2f:8d:5c:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx
QTY4RERFMTYwHhcNMjYwNTEyMTUxMTIyWhcNMjYwNTE5MTUxMTIyWjAYMRYwFAYD
VQQDEw02YTAzNDMxYS03ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnepZxsiz0y85Uuy+EH91UKOAT2bm2KDVIt2oeb7sfL1yvF2V2jW2QX8Wshl3
pshKnFakBFfPKfsKfo2wXtfGNi2KBzLDxMAEUpCuBGjcHrG+JV6LB05QeBR9rXy/
oqUnyzYcY3tYqHTljSVKLfNGLKYuaPHCZMzXYPpYPywZFJlYZiwXtFVlKtiHU64R
KHCNwO/jNb6zXfrtjd4lwqwqDQB5B+fIVCqV6V8foFC0BQE3fszJPQauBsGI3wt1
W4QItgYfJqdqWVDsnlkwnSK3TXjOIogyw4JXwpKVcxGOKyp9wgLE9ZaxhXljQhsI
b4VVMpb9DldmMecpdnvf7uW8jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPh6wf0D
N0n0tdTgeLZWMmX7c866MB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB
QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z
aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj
TVZFdEtHaUlRQndhYU4zaFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgy8wlebD5jqjf2UFrDXmwroT70mYfZL8l2cUy3XAiEOfarWjOYdoBpdCIzx9
lc3oXfafCzcSmfzhjaiCQLPR8FsoCESApXbnQpYqtcCUU90i8fgFM42b6Pc0J4ES
zdFGMLCDBfm/rkYHaTPzoRQcoLhSvDaJu12T2AilYBkWewvFiYbe2sxNLWUGxRJm
Q0VWQFQo6AKVTfsOrpssYC2Sgb5sZ93qroghCsIwd14ryMpKEHPhn9wy45Da25gp
qxlgBP3KUXqvHFOqfDhtoi/X4Kg/SODkvUjTfMufj4n6/ipZ23D2BQDOkZD6Uj8f
A7KlmD1GoKvTiy5qUS/xL41cSw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:10:17 2026 by rpki-client