Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          qFRIAbpya2SB6PWnAdIPJNjJQELSAfh47xKN99sIY+w=
Subject key identifier:   38:58:C4:05:CE:5D:B7:78:37:FF:D3:96:A9:65:00:64:27:7D:88:07
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          1C
Signing time:             Sun 05 Apr 2026 08:17:10 +0000
Manifest this update:     Sun 05 Apr 2026 08:17:09 +0000
Manifest next update:     Sun 12 Apr 2026 08:17:09 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: TTpGMvtmJN3U152JjFHDnV+gmaoYQkPr4qFcKdq3X6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Apr  5 08:17:09 2026 GMT
            Not After : Apr 12 08:17:09 2026 GMT
        Subject: CN=69d21a85-3438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:b0:59:94:5d:16:f7:26:0a:6c:42:08:bb:
                    27:58:72:59:c6:21:43:99:e3:f8:8a:4b:97:6d:23:
                    59:fd:0c:6d:3a:1f:d5:e1:ae:81:c6:21:f4:ac:10:
                    c3:72:28:07:ce:25:84:19:13:d8:cb:20:bb:66:f7:
                    a5:b6:9d:57:9b:59:4b:fe:11:3c:34:af:73:d5:99:
                    83:95:22:4a:1b:44:9f:2b:2d:d5:23:c8:d2:b5:2f:
                    bb:f3:0f:c5:9d:ec:4a:04:42:63:74:28:eb:17:ad:
                    26:d1:06:61:03:bc:1f:29:a3:b7:6d:13:97:fc:64:
                    a9:0b:b8:7f:e0:da:59:56:65:fc:2c:ee:18:67:7e:
                    b3:28:8c:0d:80:2a:39:31:79:2c:d4:43:d4:bf:bf:
                    b7:38:32:1a:19:3a:26:a8:07:32:33:16:da:f3:93:
                    1d:71:60:40:1b:d4:a8:29:f5:2a:a6:2b:52:64:e1:
                    51:4a:63:7d:f6:c1:4e:aa:c0:15:9c:1c:e0:ca:76:
                    3a:28:e4:48:5e:02:d5:b5:d9:2d:33:1b:58:39:45:
                    95:a2:84:72:21:23:7e:29:d9:3f:a1:d9:b2:21:b4:
                    aa:fd:81:05:99:0a:0d:08:c5:f2:37:3b:69:9e:58:
                    68:be:cb:b8:3e:aa:2d:1f:0e:26:89:18:ab:9e:28:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:58:C4:05:CE:5D:B7:78:37:FF:D3:96:A9:65:00:64:27:7D:88:07
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4b:b6:d9:eb:d0:6f:d1:de:ff:ec:f3:5c:26:41:2a:2a:0c:
         27:e2:39:da:d2:d5:cf:22:16:46:8f:f7:ea:f8:0e:4e:8d:03:
         e9:7a:d5:96:94:4f:1e:de:51:62:b5:6c:40:36:eb:39:38:82:
         a9:55:1a:2a:83:12:6f:8a:70:aa:c5:cc:f4:2f:d1:aa:2e:bf:
         d5:c7:0b:6d:d3:01:ac:37:c8:73:2e:6c:3a:ad:75:49:85:37:
         8b:17:83:3a:f7:8d:0b:cf:30:bc:09:b0:a0:4a:f6:2b:62:c6:
         46:22:50:85:8f:c5:72:09:c8:a6:46:9e:ad:47:bd:a0:7b:b6:
         42:49:7d:f0:fd:67:27:54:4b:0e:c6:58:24:0c:6f:79:98:97:
         18:ca:0a:51:df:07:f2:d3:1c:c0:d5:2f:af:30:c1:38:3d:b4:
         80:0c:a8:c9:83:3c:af:e9:03:31:8b:68:23:93:c0:c3:e7:0e:
         0b:15:89:44:5a:5a:fe:7b:2b:7e:d5:b8:56:88:3f:72:a5:40:
         58:06:f5:fb:4b:ac:9d:9d:7a:ff:22:67:98:9f:67:43:6a:d0:
         22:55:1d:53:99:7a:46:2e:95:2c:34:81:ee:22:1d:7a:b6:ca:
         0e:30:a9:ce:d7:4f:47:21:71:ad:32:4d:ff:f4:9b:86:b7:1f:
         6b:86:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:37:21 2026 by rpki-client