Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
File:                     CIE_b-4hrwS022CvNj9a-H-JonU.mft (raw, json)
Hash identifier:          xv++TniYwpPHtp+ZoVt1EtNT3DMwplXcCIz247E8p9o=
Subject key identifier:   DE:D1:A9:3E:33:35:F7:BF:51:C6:8A:CD:DE:B5:A8:ED:15:86:03:E6
Authority key identifier: 08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75
Certificate issuer:       /CN=A91629F2/serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
Manifest number:          16
Signing time:             Wed 17 Jun 2026 09:14:14 +0000
Manifest this update:     Wed 17 Jun 2026 09:14:14 +0000
Manifest next update:     Wed 24 Jun 2026 09:14:14 +0000
Files and hashes:         1: CIE_b-4hrwS022CvNj9a-H-JonU.crl (hash: L5XJRZyJPvgSEFhfzaGyTuMI4fng8ienYvUlaJvkonM=)
                          2: 9577FE7C4C0B11F1996C5785A4833773.roa (hash: 0qEz6js7PBUojcJH/VQOhbzx5OAA1vw3c9ZuGNzrDdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
        Validity
            Not Before: Jun 17 09:14:14 2026 GMT
            Not After : Jun 24 09:14:14 2026 GMT
        Subject: CN=6a326566-c37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:b4:47:5d:3f:0a:c3:cf:66:0b:68:05:25:
                    77:5d:7d:9b:46:b0:aa:9d:2a:6e:f2:a6:ef:46:76:
                    cb:4b:72:03:e1:e3:d7:02:98:7d:ea:32:00:e8:4a:
                    b6:6a:77:4d:d3:41:d9:f3:8f:73:e7:dd:e1:61:31:
                    93:13:bd:f6:61:98:1d:99:85:23:09:2a:39:03:8b:
                    49:54:a2:35:e7:a5:b1:79:fa:61:0b:20:bb:8a:e8:
                    05:cb:73:d5:b4:ce:41:8c:a3:d0:0b:e3:da:57:fa:
                    ec:d2:fe:f8:63:17:1b:52:13:82:f3:79:28:c7:fa:
                    53:60:e7:f0:5a:20:10:4d:15:13:8c:96:e9:f1:87:
                    21:50:e9:b3:17:fd:f6:7a:03:35:c4:66:37:42:4a:
                    ed:8f:5a:76:2a:e5:ee:b8:aa:dc:33:d0:fa:76:fc:
                    b3:5b:84:47:d9:89:ff:c2:ba:90:b5:20:ed:85:dd:
                    aa:0a:06:da:ae:40:c1:72:46:b2:bd:3d:1e:4d:79:
                    a1:3c:b9:98:b6:8e:cc:e4:f7:de:a5:ca:75:6b:68:
                    2e:4c:9e:94:0c:aa:d6:10:7f:46:de:39:3e:31:3a:
                    2e:47:26:51:62:35:d6:14:78:90:22:44:47:21:55:
                    eb:94:15:3d:b6:aa:36:44:b1:27:5f:65:50:11:b2:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:A9:3E:33:35:F7:BF:51:C6:8A:CD:DE:B5:A8:ED:15:86:03:E6
            X509v3 Authority Key Identifier:
                keyid:08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:01:86:92:a8:a0:35:83:18:72:88:28:a7:02:8f:c7:61:
         2d:41:07:7e:c4:5a:98:76:ae:5c:c4:4a:00:4a:fb:ef:99:60:
         0c:10:be:fa:c6:94:f3:e9:a9:4d:bb:34:b1:df:30:6c:fb:49:
         25:6e:81:9c:33:d3:02:86:59:97:83:3a:74:b0:95:63:ea:42:
         73:cd:5c:61:04:35:bc:c2:e9:0f:af:be:10:47:2c:aa:69:0a:
         be:b0:47:a3:2e:8f:65:8b:a3:db:ae:84:8d:c9:e3:97:ee:49:
         47:75:ad:e9:49:b3:f8:49:40:0b:1d:a4:d9:b5:d6:c4:91:06:
         0d:65:20:da:5c:cb:b0:72:48:1f:c6:30:98:2f:1c:b9:4c:d3:
         89:f3:81:b0:af:7a:1f:ad:b4:db:31:1f:66:b7:07:5f:78:5f:
         ec:ea:ac:f5:2d:2e:2b:69:28:46:31:c3:5d:80:be:a9:c9:6a:
         88:c9:33:45:a1:77:fc:b9:b0:6f:58:99:cf:0c:05:c1:d6:a1:
         a1:2e:8f:83:bf:6c:3b:bc:ff:64:db:54:a1:e7:fa:00:4b:59:
         30:71:a7:3d:aa:ef:15:51:14:03:06:26:a3:51:fd:d1:ec:d8:
         64:25:9b:28:d4:07:20:ef:34:c1:a5:f2:70:9d:9e:7e:fd:ac:
         43:2b:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:09:58 2026 by rpki-client