Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          MVkE5xt1s9S4Kr8rCfcotnKlXCwuhBGLsj7Q0YKr27U=
Subject key identifier:   2A:BF:A1:53:84:69:57:6E:EA:48:E0:EE:E1:9F:BB:EA:42:62:08:83
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          71
Signing time:             Mon 21 Sep 2026 07:55:23 +0000
Manifest this update:     Mon 21 Sep 2026 07:55:22 +0000
Manifest next update:     Mon 28 Sep 2026 07:55:22 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: AIxp9AFjeOyrOpSbnBZFtjXTxvdEmDEEhatuUN9nksA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Sep 21 07:55:22 2026 GMT
            Not After : Sep 28 07:55:22 2026 GMT
        Subject: CN=6ab0e2eb-1192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fe:bf:65:52:73:3f:a3:45:d3:1e:bf:82:3e:
                    e7:d5:29:20:ed:7f:81:b1:15:bf:54:88:93:98:ce:
                    b9:49:8a:54:3c:e0:15:0e:34:fa:f5:e2:b0:db:54:
                    51:f7:23:7a:21:9a:68:4e:7d:1e:25:6e:68:76:83:
                    de:68:b0:e5:e8:6e:b0:29:1b:1c:9b:0e:9a:8e:59:
                    3d:23:c5:3c:8a:00:fe:17:be:09:89:21:87:64:52:
                    c9:16:e2:93:6f:4d:54:81:c0:dd:d7:05:c0:07:c3:
                    ea:50:ae:1f:76:48:8c:29:ec:ac:ec:8c:fa:45:3d:
                    d9:4d:03:c6:d4:4a:40:3c:1c:93:b0:1f:cb:80:48:
                    14:ba:bf:b1:5e:53:b7:68:1d:a4:a1:4e:b3:56:b3:
                    78:e6:6f:56:17:cd:d4:cf:31:f9:ad:9a:6c:db:dc:
                    f1:87:1f:cd:a1:ed:ae:7b:56:56:a6:8d:bb:9c:0b:
                    e4:97:55:58:b9:2d:7f:02:b5:ec:6b:b4:b6:db:b1:
                    22:69:98:51:b1:5d:9e:07:64:b6:ec:aa:8e:57:2f:
                    7e:2c:6e:53:1b:57:36:96:64:78:08:4a:66:2f:25:
                    d1:c8:e7:26:ae:3c:6c:c1:50:25:09:0f:9d:1d:1e:
                    8a:94:56:8c:a1:78:20:ce:8d:78:36:39:05:57:1a:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:A1:53:84:69:57:6E:EA:48:E0:EE:E1:9F:BB:EA:42:62:08:83
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:17:31:5c:aa:48:a7:dd:fe:df:68:81:86:de:bd:0c:a8:26:
         e1:95:88:88:27:85:5d:08:4b:d4:52:b0:9c:ff:1e:a7:2e:97:
         1e:aa:b0:80:d7:75:9a:12:8b:94:06:cd:2e:2f:dc:11:f2:e3:
         48:2a:cb:23:55:89:54:6f:bf:02:40:55:45:2c:53:0b:83:3b:
         89:8a:21:c5:59:c7:3b:53:d7:7b:c7:23:67:d7:a8:82:e6:54:
         96:56:6d:1e:44:c5:67:1e:66:69:bb:dc:11:bf:25:f3:33:2d:
         b1:9f:ae:4e:a7:d3:71:55:7e:6e:88:0a:65:ea:d5:a5:89:7a:
         3b:f4:f9:56:22:4e:df:04:fb:4b:17:11:1b:d0:41:68:80:e0:
         54:fa:8c:4b:b2:8b:db:14:6b:35:36:56:50:e0:a5:f6:6d:00:
         ec:0b:08:21:57:34:70:27:19:02:7e:40:67:66:ae:a7:41:88:
         b1:fb:d2:67:63:5f:de:ee:cd:4c:14:67:25:c0:74:5f:3f:fa:
         08:19:89:07:39:4c:7a:3a:14:34:29:c6:60:1b:92:21:d9:90:
         58:73:b2:83:c2:96:2b:66:c1:14:ec:f3:ca:78:fd:65:31:2c:
         ad:f1:75:47:73:5a:6c:35:54:c6:ee:46:1c:08:ed:36:f8:cb:
         c3:66:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:22:05 2026 by rpki-client