Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
File:                     CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json)
Hash identifier:          0+Kxs4sm5M2+0c1A1m8R+phDqO3dv5hLJf6Tk6mMUvA=
Subject key identifier:   EA:CA:4A:57:E4:E2:6C:CE:0F:BF:A7:06:FE:B0:9A:C8:09:FC:52:EA
Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
Certificate issuer:       /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
Manifest number:          80
Signing time:             Sat 13 Jun 2026 07:42:35 +0000
Manifest this update:     Sat 13 Jun 2026 07:42:34 +0000
Manifest next update:     Sat 20 Jun 2026 07:42:34 +0000
Files and hashes:         1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: XlMvbT+yXP4nnj4jSYui1UeRVpm5cu3aY5mzD/THdOM=)
                          2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: bPau6Z6P+AYKpvnSxKbqaqw77/l2J2Yx/cJ0pxXB/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
                          rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
        Validity
            Not Before: Jun 13 07:42:34 2026 GMT
            Not After : Jun 20 07:42:34 2026 GMT
        Subject: CN=6a2d09eb-ac02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:08:27:09:fe:53:4c:b9:f8:ed:6f:05:eb:
                    96:94:a1:6c:d3:21:0a:73:cf:e2:62:16:ec:f4:e0:
                    22:a8:a5:46:33:04:63:e9:ea:d2:fc:db:d8:72:a5:
                    83:2f:df:e6:cc:02:8b:e7:ff:8c:b3:44:b9:88:8c:
                    51:0b:3f:e1:8d:16:10:23:e8:cc:28:d5:69:a9:ef:
                    3c:0e:34:80:60:18:e7:8c:40:ec:74:b9:1e:d6:81:
                    84:36:c5:bd:a3:02:03:ab:1a:b2:02:79:ff:e8:a0:
                    f2:c5:de:63:2d:c0:6a:55:d7:e5:14:33:e3:93:ff:
                    25:d7:be:50:d3:b7:86:06:39:1e:8e:b9:4b:21:04:
                    07:b3:4a:1c:bc:a0:c1:03:9c:02:b2:0b:9b:5f:07:
                    a8:8b:95:96:11:36:85:1e:30:7c:ec:51:72:b8:8c:
                    85:a0:da:27:fe:a8:d1:af:32:57:36:0c:ff:e7:c0:
                    b3:1e:40:69:9f:03:d7:60:fe:d4:ca:9e:9c:9b:75:
                    34:a7:ef:9d:6e:d1:7f:4c:f8:2d:ab:e0:0b:81:0a:
                    54:c4:87:3b:8c:8c:34:2c:0f:fe:3c:0f:be:61:c5:
                    a6:ce:53:53:80:65:eb:f7:3c:4a:f0:10:54:de:58:
                    a8:b0:98:97:f1:15:f4:4f:9e:79:d5:e4:56:76:5e:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:4A:57:E4:E2:6C:CE:0F:BF:A7:06:FE:B0:9A:C8:09:FC:52:EA
            X509v3 Authority Key Identifier:
                keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:af:95:7c:39:aa:94:a2:c9:a4:db:e5:4e:01:b0:4e:16:
         69:9f:4d:77:ae:aa:a8:c3:b3:ac:d1:15:dc:05:ac:a7:5e:85:
         bb:4e:9f:48:01:33:22:ea:f7:fa:a8:d2:55:eb:80:bd:c6:99:
         8c:85:c8:32:72:1f:e1:9a:70:76:f1:d5:e1:02:03:43:82:3c:
         c9:98:3e:64:58:13:18:e9:66:b7:61:aa:2e:0a:88:85:4b:a5:
         73:e8:89:62:95:dd:13:6d:9c:a8:5c:fb:7d:7a:b8:3b:8f:19:
         6e:eb:72:ea:63:35:76:0c:19:3a:9e:cd:c7:5d:94:21:43:f1:
         97:ca:8d:6e:6e:59:c6:1a:cb:96:76:0b:98:3a:75:ad:8d:03:
         5c:18:66:e4:5a:95:16:77:52:96:4e:0c:0e:d3:4f:eb:0f:be:
         b3:ca:96:73:60:32:18:0e:15:5d:e6:df:f8:68:40:8a:f7:57:
         98:93:60:64:93:69:db:67:b4:f5:47:5a:9c:5b:34:8c:b8:22:
         ac:3b:92:ef:1a:68:ac:cc:dc:a4:35:be:81:6c:a9:19:50:d8:
         39:ff:be:c0:c9:24:9f:a9:5c:6c:df:37:2b:9b:89:19:71:c1:
         f2:9a:87:fa:bf:8f:5b:e8:32:af:77:68:cf:c8:62:0b:93:19:
         d8:b8:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:02 2026 by rpki-client