Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
File:                     cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json)
Hash identifier:          PBYAWshjtPb/N95WYUT/qD7RmE673QQlFutqC5bXyK8=
Subject key identifier:   41:CF:9A:3E:8C:9F:C9:00:AF:E0:DC:FE:81:02:B6:12:46:CC:84:FA
Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01
Certificate issuer:       /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
Manifest number:          32
Signing time:             Fri 05 Jun 2026 09:02:57 +0000
Manifest this update:     Fri 05 Jun 2026 09:02:56 +0000
Manifest next update:     Fri 12 Jun 2026 09:02:56 +0000
Files and hashes:         1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: mhLE/SeB6U+13TaTf3hgS52z2y3UC9col/eE47ka198=)
                          2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl
                          rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
        Validity
            Not Before: Jun  5 09:02:56 2026 GMT
            Not After : Jun 12 09:02:56 2026 GMT
        Subject: CN=6a2290c1-e116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:db:72:6b:3f:cf:35:d9:32:43:ec:49:a5:
                    0b:35:a3:2c:bb:9b:e5:5e:a7:c7:ac:94:58:3b:d1:
                    ab:29:4c:a4:28:fa:f4:0b:51:15:23:5d:4d:d0:06:
                    4b:ae:c1:f1:97:36:db:9d:72:cc:19:f8:5e:5f:dc:
                    a6:72:e5:5b:b8:bc:de:7f:44:26:3c:55:ed:35:55:
                    50:d9:93:87:9d:7a:44:fd:1e:76:db:01:a4:74:c5:
                    94:4e:fb:09:18:85:84:3e:29:c7:d0:86:5b:f8:0e:
                    a1:e7:88:ae:41:72:89:78:12:33:c9:c6:c8:3f:2a:
                    bc:40:24:92:fa:93:46:f0:5d:00:9e:dc:38:68:cf:
                    8f:8c:0a:5c:38:62:9d:2e:0e:de:b7:00:f5:1d:c6:
                    17:c0:61:40:cb:b3:31:27:fd:50:67:ec:cf:1f:dd:
                    41:01:d8:59:7f:b8:a4:60:ac:0e:ce:3d:8d:10:c3:
                    f2:88:b5:7f:27:e5:b4:4c:be:9d:c9:bb:78:94:ee:
                    8d:aa:46:a2:ef:4f:4a:61:0b:f1:8c:b0:b9:9a:3d:
                    47:91:13:21:48:06:e2:a5:80:c9:37:21:a0:8c:50:
                    23:1c:bb:a8:94:b1:47:83:62:37:9a:c9:dd:77:c9:
                    d9:9f:2e:98:29:a6:63:4e:4e:b1:7a:92:c7:1f:4d:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:9A:3E:8C:9F:C9:00:AF:E0:DC:FE:81:02:B6:12:46:CC:84:FA
            X509v3 Authority Key Identifier:
                keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:35:49:e8:bd:ca:ae:ee:c8:d1:03:63:01:6a:83:d2:00:e4:
         19:43:99:f2:c7:dd:41:f9:a7:48:bb:e5:1d:cc:3c:f7:54:d6:
         6d:8a:5b:23:0a:c9:df:03:47:61:48:96:80:73:ed:37:ad:cd:
         78:a9:f6:fe:3d:15:a0:60:ed:82:2b:bc:12:9a:46:81:2e:a2:
         50:ad:c2:2c:5c:df:46:b9:5c:06:73:6c:04:f6:cf:40:34:49:
         11:4e:9d:11:ee:67:4a:de:78:48:cd:f5:13:ef:82:10:e5:9f:
         f4:b5:62:19:5e:53:28:3e:e4:be:93:df:4e:4b:ed:c5:70:2a:
         4a:6a:b6:6c:e0:fb:c6:78:b2:4e:7e:d1:fc:a1:b1:7a:94:1f:
         d8:10:7a:89:b8:09:68:d5:78:48:cd:f3:fe:71:30:c3:1d:e3:
         93:fb:e5:b1:d1:95:c6:ec:fd:e1:62:81:81:1a:a1:07:28:6a:
         7b:09:91:e7:70:4d:79:3d:76:1c:3d:c4:ce:84:24:37:2b:e9:
         20:04:ee:06:83:cd:5d:15:6a:68:69:a0:ff:79:bd:44:3f:01:
         7f:6d:59:26:89:e8:ce:68:8b:b4:27:99:c6:fb:96:12:61:b9:
         c0:ba:92:b5:7c:ac:77:0e:36:34:00:dc:6c:c8:28:73:fc:d4:
         90:64:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:32 2026 by rpki-client