Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
File:                     7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft (raw, json)
Hash identifier:          pv8slr0Wg6dy8vDTyG+8//Xx+THo5ruyEclzqc6pB48=
Subject key identifier:   DD:1F:1A:37:55:40:71:FF:85:C9:C1:6A:09:CB:4D:01:25:03:C9:97
Authority key identifier: EC:68:60:D5:C6:4A:3A:69:10:55:57:B7:80:1F:A8:BD:2F:AC:37:CE
Certificate issuer:       /CN=A9178992/serialNumber=EC6860D5C64A3A69105557B7801FA8BD2FAC37CE
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ghg1cZKOmkQVVe3gB-ovS-sN84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
Manifest number:          46
Signing time:             Tue 19 May 2026 08:15:07 +0000
Manifest this update:     Tue 19 May 2026 08:15:06 +0000
Manifest next update:     Tue 26 May 2026 08:15:06 +0000
Files and hashes:         1: 7Ghg1cZKOmkQVVe3gB-ovS-sN84.crl (hash: etjLfcLyXWUbMDqbJ12DqmOc9torGaP0bFoMwQ81XVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.crl
                          rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ghg1cZKOmkQVVe3gB-ovS-sN84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178992, serialNumber=EC6860D5C64A3A69105557B7801FA8BD2FAC37CE
        Validity
            Not Before: May 19 08:15:06 2026 GMT
            Not After : May 26 08:15:06 2026 GMT
        Subject: CN=6a0c1c0b-176a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:5e:eb:87:b5:d3:3d:c5:04:0c:0b:de:a5:
                    b5:f2:2b:d7:b6:ba:dc:d2:2b:9f:ad:28:3b:41:57:
                    b6:1e:ac:81:fa:06:04:eb:c0:78:42:a2:24:a2:4a:
                    0d:ee:d9:74:ba:dd:66:d1:46:8c:e8:d7:6c:15:91:
                    82:38:58:7d:90:0a:58:de:3f:e4:4a:2f:68:7f:ce:
                    7a:0a:dc:9b:47:53:44:ea:f0:ce:95:b1:86:25:d9:
                    fa:53:58:f0:3d:26:26:eb:9d:c3:6b:8f:39:b5:93:
                    54:c2:37:4b:75:63:59:b9:f6:7d:40:cb:cb:f5:70:
                    bb:a8:d1:5b:2d:79:c3:8d:5e:82:16:be:44:67:b4:
                    87:8b:2a:8a:e9:64:b9:53:10:31:87:c6:8b:31:02:
                    a2:2e:ed:43:bf:3e:f0:a5:10:31:a5:d5:18:ed:17:
                    b7:a6:44:63:f7:c2:86:b7:bd:68:29:09:f2:2b:95:
                    96:6b:e7:2c:fa:a2:b2:73:4e:88:3c:a8:5f:7a:3f:
                    cb:65:b7:66:43:8b:06:52:43:41:e8:be:f3:5f:1f:
                    40:55:83:69:b0:80:dc:2d:cb:d6:03:cb:94:86:a3:
                    8e:44:88:62:53:b8:be:97:c3:d7:34:ed:b4:fa:89:
                    f8:c4:33:70:18:c8:15:a9:08:d6:b3:36:da:50:df:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1F:1A:37:55:40:71:FF:85:C9:C1:6A:09:CB:4D:01:25:03:C9:97
            X509v3 Authority Key Identifier:
                keyid:EC:68:60:D5:C6:4A:3A:69:10:55:57:B7:80:1F:A8:BD:2F:AC:37:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ghg1cZKOmkQVVe3gB-ovS-sN84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0F1308AAED2311F09F54DF18436F56BC/7Ghg1cZKOmkQVVe3gB-ovS-sN84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:9f:03:54:f4:3d:f3:24:3a:6b:9c:d8:7d:f0:c5:f1:33:
         43:af:8d:fa:9a:94:2d:c4:29:d0:e4:12:43:00:06:2c:a5:58:
         13:1e:ad:a8:2c:8d:86:83:21:b7:e7:e8:4d:c6:51:e5:d7:99:
         4f:90:93:dd:1e:64:38:64:ad:39:f1:b9:c8:6a:28:25:bf:4b:
         07:c9:bd:6c:78:d0:2c:80:48:92:7a:a3:be:c3:5f:d7:ea:58:
         3a:04:c0:ba:45:d3:c0:6b:c1:02:27:ee:dd:87:6e:72:b6:9d:
         3c:00:ff:5b:1a:e5:13:fb:5c:3b:bc:fc:98:77:fc:12:d7:0f:
         b5:32:a0:ee:d1:5f:d9:16:e4:18:74:c2:3b:91:a7:cf:78:10:
         09:40:73:35:05:ae:d1:9e:82:3a:53:d2:5b:25:50:7b:12:8a:
         c5:4a:3d:c8:ab:36:a1:3e:95:cc:fe:dc:70:4e:16:80:e2:a3:
         62:8b:1c:08:57:ae:8b:42:8f:30:a0:1d:29:8c:04:2c:5a:ff:
         8d:cf:02:39:39:e8:24:48:49:1c:e0:49:53:fa:af:b0:72:ff:
         4f:df:84:4b:56:51:90:33:d0:7d:2f:bb:ff:47:27:56:69:b6:
         5c:4f:a9:d3:fa:2d:72:d3:69:ec:b8:eb:bb:55:9c:75:46:6d:
         94:b0:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:49 2026 by rpki-client