Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
File:                     cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json)
Hash identifier:          XMsbNGfzvWd/tzqagXiGf/uw9PymMn2O9y98HOcMDnU=
Subject key identifier:   E1:A4:72:64:D2:4E:B3:81:63:D3:70:E2:1B:CF:C2:05:2A:6F:B0:3F
Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4
Certificate issuer:       /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
Manifest number:          BC
Signing time:             Thu 21 May 2026 07:05:29 +0000
Manifest this update:     Thu 21 May 2026 07:05:28 +0000
Manifest next update:     Thu 28 May 2026 07:05:28 +0000
Files and hashes:         1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: hKSvpnVF8jJJRZC6HXQbm5UFoZL6nU4+ajWWKmHR8uY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4
        Validity
            Not Before: May 21 07:05:28 2026 GMT
            Not After : May 28 07:05:28 2026 GMT
        Subject: CN=6a0eaeb9-6e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:ea:aa:e0:dc:c0:ca:03:81:c3:dc:b0:9d:
                    08:87:98:9c:04:1f:72:e9:8e:e0:91:22:e2:e3:b0:
                    d2:5f:5e:e2:be:d8:c0:6a:c8:6d:ad:d4:42:1f:c1:
                    e0:5c:98:0e:2a:01:dd:a4:60:ef:81:33:95:9c:ec:
                    f0:60:ba:17:ce:f6:94:1c:0d:ba:88:1d:fe:90:50:
                    28:83:28:05:5b:61:bc:7a:36:a9:95:8d:69:6d:ab:
                    5b:92:3a:16:f7:bd:7c:b5:6f:ba:ff:79:e7:7d:d2:
                    2c:b6:f4:2a:7b:92:b8:68:4e:43:fd:9a:43:87:9a:
                    26:0c:d9:04:5b:35:2f:c5:92:2f:c8:b3:96:fe:2b:
                    97:01:a2:07:5c:20:43:05:a5:5c:57:af:e9:82:9e:
                    fb:04:c5:c8:dd:59:54:5f:cc:6a:e7:34:d7:fb:2e:
                    6b:ba:e7:1e:1e:d4:b7:de:0a:0c:24:f0:31:1e:49:
                    8b:9f:43:0c:3f:33:3b:aa:32:2e:f9:3a:26:f3:64:
                    38:62:0f:13:7c:80:92:0d:be:05:c0:d3:2c:d3:b5:
                    b5:02:8c:99:c8:a0:61:ca:d3:11:1a:f8:66:7a:c6:
                    c8:37:4f:82:f1:5d:a4:82:52:4d:21:f9:ab:b0:9a:
                    de:3e:42:d4:45:fa:de:92:fb:a8:37:7e:f0:54:77:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A4:72:64:D2:4E:B3:81:63:D3:70:E2:1B:CF:C2:05:2A:6F:B0:3F
            X509v3 Authority Key Identifier:
                keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:29:d1:26:a0:08:80:96:07:64:67:32:d6:49:49:0b:01:07:
         14:af:93:90:b4:67:22:0d:83:d5:80:0d:d8:58:78:72:58:25:
         a3:82:b9:0b:c8:5f:24:c9:ef:b4:30:08:fd:e5:e2:77:1b:49:
         72:17:37:53:23:44:f6:e9:76:50:06:4b:a0:b2:38:3b:5d:4e:
         ac:dc:41:1b:1f:a8:39:eb:86:bf:6d:21:4a:84:1f:b3:42:89:
         48:68:fb:83:da:da:8a:8c:98:de:e3:53:56:85:4d:b2:47:f3:
         1b:bf:b8:b6:96:5d:16:3d:be:10:88:88:d9:ec:b3:2b:12:d6:
         a5:c4:49:7c:26:a6:94:24:44:f2:cf:93:8a:ed:20:5f:95:1c:
         e3:d6:a6:f6:5f:76:83:3f:4f:b1:d8:56:9b:59:a0:23:77:53:
         63:98:08:d5:5a:1b:f0:32:3d:e1:e8:ab:29:17:ab:64:4b:fb:
         00:2e:fb:4a:4d:c9:35:32:5f:88:ab:e6:b9:79:9c:69:20:f0:
         a2:c1:16:fb:87:73:48:64:d8:27:ed:6e:5b:d5:f0:21:d2:f1:
         75:b7:f5:65:6d:ef:f4:39:f4:15:92:3c:ec:15:c4:cc:ab:ca:
         37:4a:16:57:3f:7e:12:5e:6e:96:7e:15:9a:1d:fd:1b:70:44:
         17:6f:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:42 2026 by rpki-client