Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
File:                     CIE_b-4hrwS022CvNj9a-H-JonU.mft (raw, json)
Hash identifier:          P6RHPh1dczK9luZibk7dF/FJugWb5zmsjLcowW8vkaQ=
Subject key identifier:   22:79:73:74:25:C5:46:EB:DD:AD:62:6D:D9:C2:23:9C:1A:63:A7:37
Authority key identifier: 08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75
Certificate issuer:       /CN=A91629F2/serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
Manifest number:          24
Signing time:             Fri 17 Jul 2026 10:11:25 +0000
Manifest this update:     Fri 17 Jul 2026 10:11:25 +0000
Manifest next update:     Fri 24 Jul 2026 10:11:25 +0000
Files and hashes:         1: CIE_b-4hrwS022CvNj9a-H-JonU.crl (hash: gBJywbqI4NKxTbP0AznQfKESYgaxYolKKza4Xt6PEww=)
                          2: 9577FE7C4C0B11F1996C5785A4833773.roa (hash: 0qEz6js7PBUojcJH/VQOhbzx5OAA1vw3c9ZuGNzrDdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
        Validity
            Not Before: Jul 17 10:11:25 2026 GMT
            Not After : Jul 24 10:11:25 2026 GMT
        Subject: CN=6a59ffcd-f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:87:f4:0d:90:48:99:da:42:f9:44:af:81:
                    ca:68:2a:b2:80:d1:4f:08:c0:92:ec:a5:c2:f3:a0:
                    9c:a9:20:f0:1d:72:47:85:e8:0a:59:28:4c:aa:c1:
                    79:80:de:94:da:1b:95:5a:8c:04:63:72:2e:27:e6:
                    c0:05:35:62:f8:3f:4b:90:d5:b6:78:fa:7d:df:4b:
                    eb:75:27:24:45:b4:61:14:90:b6:15:98:2b:86:47:
                    ff:ff:f6:7a:c6:02:c3:61:aa:ca:dc:28:e2:54:d7:
                    57:09:0c:11:cd:8b:38:9e:a9:a0:bf:f2:2b:c1:db:
                    c9:6a:25:63:33:93:f7:7f:4a:b4:cd:2b:23:f8:6f:
                    92:b6:9b:ab:7d:f8:b2:93:93:70:05:9f:b0:f2:9b:
                    ae:dc:c3:b5:57:bd:13:83:af:79:d2:85:06:fc:03:
                    81:44:ff:71:65:db:66:c1:e7:dd:c7:d6:7d:5b:6d:
                    2f:fc:70:fc:1b:8e:4b:7f:ee:d4:c2:2a:27:a0:76:
                    56:35:85:1c:3d:9a:6d:0b:71:6c:86:c0:a1:a8:ec:
                    6f:ca:69:9b:15:08:84:90:ff:a9:8d:7f:f6:a2:3d:
                    52:50:59:5d:e3:1d:1d:4a:e7:75:37:a1:62:76:b5:
                    ea:33:86:ae:20:4a:9e:c8:d2:7b:22:b4:1d:86:7f:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:79:73:74:25:C5:46:EB:DD:AD:62:6D:D9:C2:23:9C:1A:63:A7:37
            X509v3 Authority Key Identifier:
                keyid:08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:55:d8:df:5d:45:7e:34:06:5e:6b:77:78:6a:fe:bb:fc:
         75:3d:c9:3f:f3:88:d0:d8:21:cb:b4:03:27:20:ff:bd:36:f7:
         af:03:8d:bf:01:97:02:ba:5d:00:86:54:4e:b3:55:df:7f:48:
         3c:c7:ac:eb:6e:26:f5:db:c5:59:9a:37:1f:4d:e9:b8:87:e8:
         a9:98:5b:21:6d:7a:f0:b0:3e:18:db:0e:44:e1:ba:52:bc:74:
         94:84:3b:b4:be:1b:ad:3e:3b:1c:43:9c:28:35:f8:c0:a3:91:
         0c:6d:ef:da:3f:03:b0:40:cb:97:c1:4f:2c:96:2d:ab:a1:9d:
         72:fa:73:1d:58:d8:b8:5e:ea:ae:f6:d0:06:7e:8a:ba:b3:22:
         bf:7e:33:c5:00:0d:d3:e0:2e:5a:f4:5c:63:7d:15:49:60:9b:
         69:16:51:f6:7a:1f:1c:e5:31:22:ed:45:1c:9e:87:35:54:8d:
         e0:83:4c:25:96:4a:80:e4:d7:7f:95:fb:2d:e0:2d:a2:aa:cd:
         11:8b:18:87:de:0b:6d:03:65:89:36:a3:70:e6:ca:09:53:e6:
         62:4e:51:70:a3:f2:57:0c:24:41:d2:aa:18:51:1a:2a:1f:a7:
         5f:4e:1a:e8:5b:82:ea:bc:02:c6:60:27:3c:10:27:92:fb:34:
         49:68:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:11:47 2026 by rpki-client