Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          xOP7JuAcjAjCsVwG52KJiud0D8/6K0pHu/rvU/C/Fzs=
Subject key identifier:   46:83:31:D5:B5:E0:1F:FC:FA:43:36:FE:DB:93:EE:7D:9E:60:EA:31
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          43
Signing time:             Tue 23 Jun 2026 08:43:59 +0000
Manifest this update:     Tue 23 Jun 2026 08:43:58 +0000
Manifest next update:     Tue 30 Jun 2026 08:43:58 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: 5Z16fLcAHgUfDYfNMoyPr/GdSqhYzUzAgd6whB96Jkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Jun 23 08:43:58 2026 GMT
            Not After : Jun 30 08:43:58 2026 GMT
        Subject: CN=6a3a474e-98e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:75:f3:4a:de:70:53:b4:9a:a4:0a:13:92:
                    05:89:35:a4:24:7e:f1:be:78:05:c8:22:8f:1c:b9:
                    51:b3:d6:7c:6c:45:d8:8c:8a:06:41:f9:8d:f7:2b:
                    18:af:7d:ed:a1:58:d5:ec:5e:6a:71:40:f5:16:3d:
                    58:dd:92:8a:51:9b:8d:14:6f:a1:31:c0:be:38:57:
                    51:22:dc:a5:e9:92:6a:90:e5:9d:05:7a:c2:5d:09:
                    ce:e8:cb:fe:72:d0:f0:25:54:1c:bf:56:d8:6d:fb:
                    bf:84:8c:23:2d:7f:71:b6:ef:bb:ee:7d:6f:6c:13:
                    5b:58:4c:fe:8f:00:fb:3a:6b:d2:45:3d:d8:c7:6c:
                    a0:3d:7a:ff:7a:d7:b0:a4:28:25:08:15:74:46:e0:
                    d5:5a:6e:97:01:18:0e:b1:56:1b:0c:63:85:f5:5b:
                    94:bf:ba:01:2e:c1:6c:81:57:4a:65:fd:3e:cd:96:
                    a6:99:15:66:6b:23:72:a3:57:7d:e9:7f:39:7c:cb:
                    55:2b:0e:c6:3a:ad:f0:6d:a3:29:77:0d:e1:64:3d:
                    1b:3d:f7:09:fb:a5:b7:02:b3:34:9a:75:0d:5f:0c:
                    69:46:74:be:4b:58:69:c6:39:71:ca:11:a8:bc:ee:
                    e2:08:ea:6e:c8:f3:75:f8:38:b8:e9:b2:ad:18:9e:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:83:31:D5:B5:E0:1F:FC:FA:43:36:FE:DB:93:EE:7D:9E:60:EA:31
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6c:af:0b:8f:f1:60:a2:bb:a0:4a:11:07:65:36:39:4f:46:
         06:9b:96:a4:1a:d6:13:f2:cf:a2:da:3f:57:93:f9:23:89:6e:
         47:bc:7e:5b:87:8a:7d:01:66:e9:19:ea:27:ba:ed:cd:74:53:
         78:67:f3:6c:cc:31:e8:86:b4:46:99:ec:fd:18:29:b0:e7:a9:
         5e:7c:7b:97:ef:ec:1d:00:76:82:ad:98:05:dd:c1:1c:12:28:
         65:54:96:d7:c1:80:89:26:3f:84:41:27:67:21:a7:e3:f8:10:
         30:bf:7a:cb:3e:2e:33:d3:fb:1e:77:bb:7d:67:4f:39:ef:25:
         e0:48:cd:dc:76:5b:22:88:0f:59:9f:a9:82:7d:4a:db:b8:26:
         6f:bd:96:55:6a:e6:8b:39:61:16:ca:bd:9e:ae:55:c5:11:8a:
         75:b4:86:0c:80:04:66:a1:d5:6d:d9:71:33:d4:34:dc:6a:8a:
         1b:eb:bf:b2:38:27:23:89:ee:69:06:70:53:36:bf:e6:00:e5:
         cb:b5:7b:cf:5d:18:51:37:4b:74:8f:07:01:90:f5:aa:12:bc:
         0d:03:2e:f2:e2:0a:f7:29:bf:1d:d0:a9:96:f1:2d:f5:02:cc:
         3b:34:82:5e:a3:99:25:ef:ac:5a:15:f0:a9:93:03:6c:eb:a5:
         12:e7:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:27 2026 by rpki-client