Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          ZGx64INXIPF6YOYn5ytHT4XvieHOpL8qVpXBEKTpOc4=
Subject key identifier:   72:D1:78:B9:A8:94:6D:BE:CE:BC:D3:40:EF:03:76:BB:E9:17:02:A7
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          54
Signing time:             Mon 27 Jul 2026 10:34:48 +0000
Manifest this update:     Mon 27 Jul 2026 10:34:47 +0000
Manifest next update:     Mon 03 Aug 2026 10:34:47 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: zphYILTwDXVkrd5fEOTitP+7TobrwLbC+0lac+hpQBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Jul 27 10:34:47 2026 GMT
            Not After : Aug  3 10:34:47 2026 GMT
        Subject: CN=6a673447-9507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:70:80:51:9c:10:da:88:70:12:31:93:61:
                    d4:d3:1b:10:8b:77:5d:e6:87:ba:5e:24:0f:5e:a1:
                    75:3f:ff:0a:21:30:c1:0a:14:19:6e:d1:c9:45:d8:
                    77:3d:b9:a9:47:36:1f:f7:32:2d:34:61:21:c5:aa:
                    9d:af:be:5e:27:c8:d9:35:5a:bb:f9:97:54:42:15:
                    63:05:12:40:9b:59:8b:dc:41:17:9f:25:d9:11:96:
                    ca:2d:90:d8:a1:81:df:22:28:59:02:ba:d3:9d:39:
                    7e:63:fa:1d:35:8e:02:80:f5:0a:a1:bc:f9:35:61:
                    b2:09:06:e0:c8:e6:56:e8:e2:5d:ba:3c:d7:c4:67:
                    69:63:ca:d9:a0:da:8c:ea:34:d2:b7:56:6a:7d:8a:
                    32:86:0c:8d:9b:39:9e:6d:7a:52:5d:65:2a:b3:e3:
                    92:a7:24:81:8f:f4:dd:49:bd:8b:0f:8a:36:c9:ce:
                    13:15:fa:6b:8f:cc:34:cd:00:ae:e1:b5:b8:93:3a:
                    05:16:27:72:72:75:da:3f:d0:a0:ed:f0:52:73:e5:
                    88:1a:60:50:88:e7:46:6f:11:21:1a:8e:85:c8:40:
                    9a:80:7e:ed:bf:89:49:ed:34:51:1a:aa:72:5d:7c:
                    d3:f0:2e:92:bf:44:b6:09:b8:b5:f0:3c:68:a0:c0:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:78:B9:A8:94:6D:BE:CE:BC:D3:40:EF:03:76:BB:E9:17:02:A7
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:07:a5:19:28:fe:fd:8c:c1:dd:9d:db:94:55:c7:73:c6:
         2c:d0:84:1d:70:0a:37:fd:33:56:01:ac:9d:13:9c:8a:7c:37:
         2d:15:cc:2e:c7:9b:e7:f2:dd:26:ca:c2:2d:ee:e9:4c:2e:1d:
         35:f0:80:14:de:84:59:ba:e6:3b:13:fd:37:7d:a8:cb:7a:27:
         9a:2a:cd:72:41:a0:79:4a:f4:a0:7b:c2:85:60:73:48:a8:d3:
         c6:9e:b8:8e:c5:35:51:de:fd:3e:fc:c9:07:21:39:49:92:e6:
         5b:e9:8b:f2:21:c6:c5:e3:59:28:8f:3d:23:ac:52:12:34:ac:
         5a:a6:d5:87:a5:e4:fd:3b:d4:1c:86:fb:f1:0e:35:ef:21:04:
         2d:74:83:de:d6:d0:db:4d:22:9f:e6:9c:ba:be:a6:f7:75:9f:
         70:2c:44:10:08:ed:d3:dd:ab:8e:f0:c5:92:26:d7:37:e5:63:
         6e:f5:4c:f4:c6:3d:7a:2f:b8:db:0f:c1:c9:25:69:a4:5d:9a:
         0d:a4:7c:b3:30:17:40:2e:41:51:21:53:ef:a6:87:8f:d9:de:
         38:7a:17:4a:f6:68:d9:4e:ca:27:d1:e0:ab:82:22:be:98:dc:
         90:ef:6a:27:c7:a2:d3:66:6a:b2:92:42:8b:ec:8d:46:84:c3:
         44:22:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:06 2026 by rpki-client