Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          P/A4POhLjr3giXujyba+d5NkaxR/9NVFRAQ9EV36QeM=
Subject key identifier:   9A:E3:75:54:39:D0:3B:E0:DB:A3:76:3E:C9:F8:5D:33:38:B0:31:F9
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          0A
Signing time:             Sun 01 Mar 2026 10:41:17 +0000
Manifest this update:     Sun 01 Mar 2026 10:41:16 +0000
Manifest next update:     Sun 08 Mar 2026 10:41:16 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: iDKRBtaAhBbzMDh5Eav9Nd2dlHoSdoj9B+rPes5J0V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Mar  1 10:41:16 2026 GMT
            Not After : Mar  8 10:41:16 2026 GMT
        Subject: CN=69a417cc-a7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:8c:4e:66:c2:a9:4f:0f:99:3b:fd:c0:1b:
                    e4:8f:b1:a5:6b:9c:7b:20:f3:cc:93:84:0a:26:fb:
                    21:33:a9:5f:27:2a:9b:87:6c:28:1a:ab:d3:40:50:
                    05:61:cf:1f:f4:21:32:10:75:84:fa:53:d3:32:0a:
                    f2:c9:00:3d:5c:f1:52:bc:80:7f:3a:33:ac:87:e6:
                    49:e2:5f:c0:26:56:27:66:4d:e2:46:09:e4:7d:b1:
                    04:e6:ff:84:56:5c:fc:48:58:bc:ec:29:de:ff:ab:
                    63:f9:0c:cf:11:0e:46:1d:65:9e:b1:fc:da:7c:4c:
                    aa:25:c7:66:29:ad:cd:ac:1b:6a:75:4a:47:97:02:
                    d7:a4:c9:36:84:1e:e8:cd:72:10:a4:90:5f:c0:f6:
                    07:fc:30:4d:bd:ff:d9:33:ec:3f:6b:15:4a:03:f1:
                    f3:52:58:aa:a6:4c:e3:85:a1:5e:73:08:19:be:2b:
                    f6:ec:70:b7:37:a1:c9:49:4b:a1:bd:ad:60:fb:3b:
                    ed:26:53:7d:32:d9:47:26:ac:62:07:b1:cd:ca:0c:
                    58:2b:f8:18:5a:17:76:3a:e2:72:a6:62:e2:b1:4c:
                    d6:68:65:c8:8d:58:57:da:9f:ea:3c:18:d3:42:3c:
                    f9:86:69:98:56:ab:f3:ec:ca:53:13:17:e9:94:16:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:75:54:39:D0:3B:E0:DB:A3:76:3E:C9:F8:5D:33:38:B0:31:F9
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:62:88:46:67:bd:15:0f:4e:a5:ae:ab:7d:ad:45:ac:77:74:
         b6:a2:43:9a:48:30:31:40:e9:c9:b2:32:0b:15:7f:2d:1b:33:
         ba:ce:1c:26:75:2d:cc:42:d4:29:eb:f8:b4:13:ae:31:b4:a4:
         60:51:5d:8f:ba:69:01:9d:ee:78:f1:ab:40:a2:08:4f:ab:da:
         e4:f5:12:19:2c:6f:44:e9:89:ce:da:54:2f:66:2c:6c:14:7a:
         78:87:4c:0d:ca:ee:ed:8e:2c:59:d0:4a:57:61:3a:e6:44:c7:
         f4:7b:82:09:2e:01:c7:2d:06:5a:74:15:9a:ca:9d:a3:6f:e2:
         0a:34:50:78:cc:c3:d4:01:d3:4e:71:dd:44:59:0d:ff:c4:76:
         40:b8:a3:8d:8b:f9:d2:84:3c:7d:d0:26:b2:d7:9d:3e:00:2c:
         6e:26:4d:7d:b2:bb:90:1d:10:62:6a:1b:a0:8f:32:1c:4d:8a:
         cb:90:3e:47:47:b4:74:01:11:a2:a3:85:b0:d0:b9:46:f4:ee:
         ab:46:0a:58:81:25:c5:43:1f:08:53:0e:d7:17:7e:4c:6a:0a:
         dc:f0:e5:25:e5:94:6f:7f:bf:9a:10:ee:a7:91:02:7a:2e:da:
         a2:f7:04:90:b7:48:8b:3c:e3:47:25:1a:bd:c1:42:13:c8:55:
         f8:3c:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:43 2026 by rpki-client