Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          CiAx/YKDTVQ2TSdYjmBbwkLz0S4+B8zAWfhVoDrKSXs=
Subject key identifier:   34:62:4E:81:9B:ED:3D:34:B9:70:3B:57:0B:1B:15:79:F1:59:CC:6B
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          6322
Signing time:             Tue 22 Sep 2026 14:15:26 +0000
Manifest this update:     Tue 22 Sep 2026 14:15:25 +0000
Manifest next update:     Tue 29 Sep 2026 14:15:25 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 20tRWjs4lMixvEJDrhkJaiU36IPfLGnlMj/uXfzApDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Sep 22 14:15:25 2026 GMT
            Not After : Sep 29 14:15:25 2026 GMT
        Subject: CN=6ab28d7e-98dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:a9:48:23:60:57:4f:86:49:8c:b4:95:96:
                    c3:91:d1:f3:00:7e:d7:0b:78:e4:22:47:28:64:9e:
                    c6:44:27:5f:98:d0:92:cc:71:b7:af:f0:21:89:9d:
                    ea:af:38:2a:fc:02:79:db:0c:a7:77:8e:15:11:05:
                    57:84:c6:92:69:65:0c:51:4d:df:ff:5b:d4:17:1a:
                    85:5b:d9:17:4e:d5:c7:0b:a6:53:26:78:c6:c7:db:
                    e4:9a:30:16:ed:b0:aa:eb:c6:c1:37:09:10:4c:6f:
                    38:d2:da:70:d4:66:95:c9:69:b3:33:23:51:52:55:
                    47:0d:de:e0:f3:0f:f2:e5:b8:5e:a6:cb:ae:39:f3:
                    b7:59:33:16:bc:ed:88:11:e7:95:f6:4c:2e:1b:be:
                    79:48:c8:d4:c1:61:44:1c:cf:64:13:7d:4b:0f:45:
                    d7:36:17:c6:8d:8e:7a:42:b9:01:54:c9:94:f2:71:
                    73:ec:49:7a:b9:37:c8:69:0c:90:52:2d:8a:ca:f3:
                    95:bf:b6:b8:6c:19:de:f3:c7:96:73:8f:97:a7:7d:
                    74:4a:56:a0:d6:7d:1d:60:83:e2:3d:36:9f:fe:ed:
                    52:58:fb:1e:e1:77:6a:7e:87:2b:8a:61:24:d3:a8:
                    ab:ae:77:29:85:fb:78:67:42:c0:5d:40:c1:77:75:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:62:4E:81:9B:ED:3D:34:B9:70:3B:57:0B:1B:15:79:F1:59:CC:6B
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8f:17:56:38:69:b8:6d:5c:e2:3a:d4:30:48:6b:c1:5a:82:
         c5:aa:b3:fa:31:18:4f:b9:95:64:5a:69:84:90:68:cf:9a:30:
         04:d3:18:42:22:ed:aa:7a:f6:84:23:81:f1:29:b4:d5:4b:78:
         b3:50:8d:17:fe:9c:59:da:e9:f1:9d:8c:05:fa:61:6b:84:76:
         24:9a:c0:1b:59:f1:5d:71:b7:63:46:75:5c:1f:e7:68:89:e9:
         55:f7:ae:27:fc:5d:a3:e1:0f:20:28:cd:dd:90:e7:9c:be:2e:
         76:b0:ba:f3:59:81:c3:20:3f:f3:59:45:81:67:63:01:04:3b:
         4a:5c:71:72:2c:70:94:8c:28:e0:0f:28:3c:78:f1:f4:10:a6:
         eb:10:22:64:4c:eb:b3:b7:26:e8:04:aa:64:62:29:93:d1:79:
         8f:04:3c:c8:a7:de:0c:45:ee:70:8c:73:c3:76:9d:f0:8f:38:
         50:92:56:64:bc:28:ba:3f:75:f2:88:e3:6f:17:e3:d7:5f:b8:
         e4:3d:f7:8d:8e:cb:5d:00:19:57:ae:ea:dc:f0:41:4b:3e:d7:
         94:77:53:4f:54:2f:1b:68:ab:9b:4b:03:f7:78:a3:78:f4:cd:
         8b:d8:21:b0:15:c8:85:38:8a:f7:f7:b0:ce:73:00:bd:1c:55:
         f7:42:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:50:45 2026 by rpki-client