Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
File:                     n7vSMFYWjRpRfpltxW9mSm7lLqU.mft (raw, json)
Hash identifier:          6zQnt+ESWSHbc7dJziAirdGwl0OPPwGnuIny8/syFmc=
Subject key identifier:   E3:49:0C:2C:E5:B4:A7:01:ED:D2:D9:7A:81:A7:98:CB:92:63:85:3B
Authority key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Certificate issuer:       /CN=A9189D79/serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
Manifest number:          24
Signing time:             Thu 21 May 2026 09:00:42 +0000
Manifest this update:     Thu 21 May 2026 09:00:41 +0000
Manifest next update:     Thu 28 May 2026 09:00:41 +0000
Files and hashes:         1: n7vSMFYWjRpRfpltxW9mSm7lLqU.crl (hash: mR1uVpOu8FeddBDAiP/A8Ggi/T9RPdga9r0qJNZfZfc=)
                          2: FBC7C3BC24DB11F18E6B9B14AD833773.roa (hash: HaSFcTdyVltIF7SeiiWh8O/2wgEJqq3VXl8LlDRKgjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
        Validity
            Not Before: May 21 09:00:41 2026 GMT
            Not After : May 28 09:00:41 2026 GMT
        Subject: CN=6a0ec9ba-ad48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:d3:7c:14:32:13:08:d4:3b:a9:e5:63:44:
                    3b:f1:96:46:a4:46:61:0f:41:1b:99:6d:12:6c:22:
                    30:73:e7:58:01:dc:e4:8a:7f:e3:50:80:30:63:c6:
                    4f:e5:ce:12:7b:d0:8d:be:3d:af:0d:3d:a4:30:ed:
                    e9:25:16:bf:aa:07:97:87:e3:17:d3:ac:6f:d1:80:
                    b4:a3:13:c6:56:39:61:55:75:ff:20:fb:b9:ec:64:
                    fd:ac:d1:0c:ed:05:b1:d8:6d:83:2c:5c:53:ba:81:
                    25:08:f7:1f:37:ba:80:67:f0:3a:8a:26:04:84:98:
                    7e:52:5f:f1:fb:b7:9a:d6:a4:d7:e7:99:04:d1:c0:
                    71:e3:9a:64:25:61:39:e5:b0:cf:51:75:7f:71:17:
                    94:1f:63:3d:b8:e0:26:bd:5b:6a:f4:8f:9e:f7:62:
                    07:3a:cb:b2:ee:42:d9:2b:03:71:db:de:b0:e6:24:
                    e3:c5:a4:e0:f2:13:99:35:70:3b:34:75:37:81:f5:
                    50:a8:ef:51:c9:51:b6:6c:47:45:91:cf:f1:53:73:
                    3b:bc:af:4b:c2:4d:15:bd:d1:00:0b:ed:dd:a9:a3:
                    eb:65:ef:44:4e:a7:b1:46:93:36:36:88:27:2f:88:
                    0c:4f:26:68:98:ab:e8:d3:69:75:74:f0:01:81:7d:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:49:0C:2C:E5:B4:A7:01:ED:D2:D9:7A:81:A7:98:CB:92:63:85:3B
            X509v3 Authority Key Identifier:
                keyid:9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:b8:8b:70:fa:b7:36:68:df:eb:24:c0:36:d3:1b:57:5a:
         60:4f:02:a8:96:f6:f2:e2:7c:53:10:00:18:3a:ae:a0:fb:47:
         c5:4e:be:d6:f4:8f:2f:bf:fb:44:4e:1f:1f:25:b7:4d:50:98:
         54:ef:59:81:9f:4b:00:00:e3:ca:e7:47:bc:32:14:8f:66:d6:
         f3:8d:e8:d2:c8:ff:a0:fe:eb:4d:e9:2f:45:90:82:36:a8:b6:
         f2:6c:73:d5:18:a9:a9:36:f9:cb:0e:96:cb:e9:21:34:41:06:
         99:b8:9a:6b:6c:c2:80:9c:d4:8d:4b:e8:77:5d:b4:98:3e:6d:
         f7:30:6a:c9:22:e1:c1:e2:42:63:20:37:ed:16:f7:d5:5d:2f:
         16:bd:1e:50:3f:0b:38:61:e3:33:2d:10:0c:a5:3a:85:a3:21:
         f1:d1:2f:f5:1b:53:c4:51:ed:4e:02:89:04:2f:92:29:09:91:
         08:21:eb:30:3e:81:d0:1f:b2:e6:37:79:28:f3:2c:d8:29:59:
         a9:8c:4b:2d:4c:f4:4c:76:a9:e6:a7:18:52:37:1a:89:0f:47:
         6b:9b:27:2d:c1:b5:7d:38:87:65:e6:7c:ad:14:8d:af:cf:e3:
         38:3b:11:44:9e:41:0f:39:85:cf:97:09:b3:43:ea:7e:96:ab:
         c6:cd:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:22:07 2026 by rpki-client