Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File:                     9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier:          kezmWMqbb4/WKdWLD90jFbGg/hyG1wCDQzj30aF4x8k=
Subject key identifier:   95:12:52:7C:44:70:92:D2:05:1A:D9:7B:DF:EE:99:D0:FA:F4:D4:FD
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer:       /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number:          EF
Signing time:             Thu 21 May 2026 06:26:27 +0000
Manifest this update:     Thu 21 May 2026 06:26:26 +0000
Manifest next update:     Thu 28 May 2026 06:26:26 +0000
Files and hashes:         1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: q2BUuyb9gYOb9lvBRV4NwuJpT/5vg5XNIgma48NkIxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
                          rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
        Validity
            Not Before: May 21 06:26:26 2026 GMT
            Not After : May 28 06:26:26 2026 GMT
        Subject: CN=6a0ea593-eb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:71:8e:9e:09:95:26:8c:80:96:26:71:d9:
                    f0:f8:dd:46:d4:44:1c:30:31:c3:b0:f2:f7:ea:72:
                    48:1d:1b:df:94:03:4a:d6:51:be:de:6c:fa:8f:27:
                    38:8a:a3:e8:41:f9:ac:5b:8b:85:2e:d7:2a:70:c9:
                    9f:28:13:a0:46:f4:0e:d1:ab:c7:41:d3:5d:a0:87:
                    ae:1e:c4:3d:d8:a6:18:1a:aa:bc:27:52:8a:16:c1:
                    20:b1:30:e6:9f:48:7c:e0:13:80:31:65:75:d3:15:
                    85:ee:66:d7:c7:ee:f2:38:ac:50:71:0f:90:ab:4d:
                    33:bb:7f:33:0f:36:a4:80:ed:d4:5f:34:01:7e:2a:
                    3e:f3:67:09:27:0f:ef:62:d2:4b:e3:02:16:4b:4c:
                    42:43:3d:a5:e5:ea:89:c4:84:89:ab:e7:67:40:1f:
                    93:61:7c:11:7c:5d:dd:24:c4:9f:9f:7a:82:c3:ef:
                    00:0b:c5:64:b9:15:3e:f8:05:34:32:9d:3a:81:9a:
                    0c:f7:95:5a:ab:42:f0:27:6c:d4:57:b7:25:61:0f:
                    ca:2c:35:a8:f3:66:c3:18:5b:a5:00:bb:e8:43:25:
                    a6:93:c6:9f:c8:e3:b4:bc:30:9e:36:06:de:07:bc:
                    0c:7c:b7:b8:90:af:f2:d6:91:76:3a:09:84:31:ca:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:12:52:7C:44:70:92:D2:05:1A:D9:7B:DF:EE:99:D0:FA:F4:D4:FD
            X509v3 Authority Key Identifier:
                keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:4a:55:56:d1:ef:f2:17:0c:71:93:e8:c0:c0:64:39:b9:
         12:b5:fe:20:a7:a6:a7:a5:d9:c2:f3:e7:83:44:6f:db:85:7f:
         2b:0d:19:8e:3a:a5:9c:84:55:ca:9f:cf:30:b0:5f:fc:27:f2:
         99:08:1b:46:90:d2:42:a4:fe:4e:6e:11:1c:3a:da:11:2f:b3:
         95:a9:52:ff:b7:eb:ec:23:97:4a:eb:79:cc:8a:50:73:61:4c:
         53:9f:fa:09:40:ae:c5:1b:7d:3f:3a:9b:ba:a8:b2:5a:ec:8b:
         7a:0f:13:c1:6e:25:11:6c:8f:46:49:64:9c:bd:3a:c3:2d:52:
         ff:a5:fe:9b:70:d5:3e:15:e6:8e:87:f3:11:a4:26:e0:f9:82:
         d6:f3:8b:bb:f9:49:e8:96:16:83:c0:7c:93:71:fd:20:bb:79:
         9e:92:1a:80:c4:67:67:c7:cb:fd:a9:4e:98:8c:ba:04:81:7d:
         94:97:41:a6:68:69:0a:d7:c8:4f:2a:73:ff:b1:b5:3d:6a:74:
         f8:e7:e1:08:db:cb:32:a8:f8:fd:6b:6b:61:d2:3f:58:b2:c6:
         7a:1a:e0:c0:1e:ce:83:3a:b2:45:0f:25:75:1a:f8:9c:61:7f:
         d8:01:42:79:8f:67:16:e5:07:bf:07:35:79:d8:56:b5:4f:bc:
         ab:8f:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:03:14 2026 by rpki-client