Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          K6TNfDIaaknRUjk/azxdkcKwaW+HDQ5izLBMsDKAxSY=
Subject key identifier:   37:55:60:19:EB:6B:41:3D:50:DA:F3:B4:71:B2:14:DC:4F:A2:7F:89
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          0243
Signing time:             Wed 22 Jul 2026 15:14:23 +0000
Manifest this update:     Wed 22 Jul 2026 15:14:22 +0000
Manifest next update:     Wed 29 Jul 2026 15:14:22 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: OWS5Xz+sYJep22LzbRC2p/BDokfvYiudUAmC1yX9dDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Jul 22 15:14:22 2026 GMT
            Not After : Jul 29 15:14:22 2026 GMT
        Subject: CN=6a60de4f-074d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:c0:fd:c9:bb:ee:b6:e2:89:88:8e:68:91:
                    d9:ef:31:28:1c:fa:6b:69:a0:f2:b2:3e:11:24:5a:
                    99:0b:94:37:91:80:5e:9f:e2:76:3c:cf:26:78:e4:
                    57:59:7b:79:fd:8d:aa:09:2f:6e:06:e3:0a:19:e7:
                    9f:b9:ef:40:53:76:d1:ad:29:4c:87:1c:ee:d9:9d:
                    33:0c:a2:2e:21:60:b0:cb:91:45:80:e8:f5:1a:93:
                    ec:c3:9a:da:3c:27:78:a1:0e:ee:42:3b:e9:1e:0d:
                    df:a2:80:9a:ae:b4:49:9b:ca:23:f6:4f:9a:fc:84:
                    eb:56:25:94:1b:26:42:14:7a:f2:06:15:49:57:ee:
                    bd:79:b3:2c:3a:16:bb:07:19:67:9b:74:de:db:d6:
                    99:f5:d8:16:95:56:ab:9a:06:b0:4a:7c:c3:98:38:
                    05:d3:93:ab:25:5c:bc:e1:ba:8c:27:cd:ec:51:4a:
                    23:68:0e:67:1d:2b:58:8e:db:18:80:35:d6:b6:2f:
                    6c:3b:90:80:10:f4:b7:33:36:b1:0f:99:b5:79:94:
                    d2:b3:da:41:49:f2:1c:4b:54:0a:e7:83:b3:33:53:
                    c0:ce:10:e5:70:24:71:17:71:cf:e5:d3:c5:88:97:
                    a0:5e:9e:e5:3e:e8:ba:71:a4:80:1d:dd:0f:57:b2:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:60:19:EB:6B:41:3D:50:DA:F3:B4:71:B2:14:DC:4F:A2:7F:89
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:78:d4:d2:3f:ec:5c:8f:b7:80:34:3f:67:37:c8:e7:b2:03:
         cf:1b:64:e9:ec:ee:31:cc:8c:fc:14:1e:70:25:23:30:72:8d:
         bd:eb:e6:22:3c:8e:63:c0:3e:6f:ca:bd:20:06:41:f2:ae:5e:
         ff:59:99:2d:dd:bc:ef:23:57:bf:2c:ec:b6:e3:e6:c7:f9:dc:
         c2:53:71:73:ad:f0:20:04:c8:fc:01:46:2e:35:f5:c9:a6:59:
         00:7b:a5:fb:a3:10:30:ba:d4:df:60:bd:82:50:2e:ba:21:93:
         da:ee:66:39:e7:8d:fb:00:60:ce:81:b3:b7:2b:c3:04:e7:94:
         a6:a0:64:46:e4:5d:d1:d8:84:25:c0:8a:38:e5:1c:55:17:26:
         0f:dd:0d:fa:a0:01:09:dd:3a:33:f2:26:14:05:20:95:c3:30:
         b2:08:b4:28:44:c5:de:7e:d7:2b:9c:ea:8f:a1:70:d9:dc:1e:
         ba:e1:aa:cf:02:6c:94:68:b1:9a:df:82:5f:c9:89:34:2f:c7:
         1a:5a:6e:3c:bc:eb:f6:30:e4:5d:b0:fd:9b:1c:23:c8:e0:f5:
         c3:55:1f:a3:13:5e:3b:a0:56:62:44:1d:5b:ee:4c:bb:d5:c8:
         61:46:7b:dd:4f:2d:b5:5b:ba:42:77:6a:1a:fc:d2:03:a6:9e:
         6f:7f:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:09 2026 by rpki-client