Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File:                     7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier:          +dgcDPUtp6904mlL9vNGScfTxELo9PZd593JRkzuucs=
Subject key identifier:   57:53:B9:2F:82:08:C5:9D:56:E4:F5:38:A4:62:C6:CC:BD:20:14:30
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer:       /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number:          0233
Signing time:             Thu 16 Apr 2026 22:44:53 +0000
Manifest this update:     Thu 16 Apr 2026 22:44:53 +0000
Manifest next update:     Thu 23 Apr 2026 22:44:53 +0000
Files and hashes:         1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: Z50STzZ4/nvrz243yBqVvAESY07xK2Xn5mS7Rm+U9T8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
        Validity
            Not Before: Apr 16 22:44:53 2026 GMT
            Not After : Apr 23 22:44:53 2026 GMT
        Subject: CN=69e16665-24a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:92:dd:1d:65:ef:b0:88:3b:fc:81:2e:c8:
                    d7:fe:29:4d:3f:54:2e:32:cb:76:49:a1:b8:ec:6d:
                    85:fe:f0:46:fa:b0:41:24:5d:21:10:6a:6e:6e:2b:
                    8a:cd:70:4a:8d:58:90:64:7b:d2:56:b1:a8:fd:47:
                    65:81:a4:5f:b6:0c:3c:ef:cd:27:1e:e3:9a:b1:eb:
                    41:32:e2:64:d5:60:4a:a0:e5:17:c1:7d:de:64:da:
                    e5:c7:d9:91:1b:a3:8d:37:08:dd:75:13:65:8a:65:
                    48:33:39:d6:4c:9a:47:2c:e4:30:7a:1c:32:0e:e2:
                    b0:d2:24:83:c2:01:9f:72:b6:4d:f0:c7:21:cf:7e:
                    5b:9d:3f:a8:50:81:a3:31:0c:ee:70:79:76:4a:f3:
                    1e:44:28:29:f8:e7:ee:95:66:ff:8a:3f:b0:01:cc:
                    11:f1:e1:e2:52:6f:62:be:23:64:e1:a1:51:71:70:
                    fc:5a:ad:2c:15:89:aa:49:4c:83:2a:e0:7b:ec:41:
                    a2:42:9f:b8:8b:94:2a:72:16:49:f1:11:1c:7d:a7:
                    9e:5d:f8:50:91:49:a5:1f:86:ed:1c:35:ec:48:dc:
                    a3:bb:34:20:91:a5:d0:a7:2a:f6:07:8e:72:ca:12:
                    26:be:12:00:b2:9e:b1:76:02:ad:5a:16:db:f0:bd:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:B9:2F:82:08:C5:9D:56:E4:F5:38:A4:62:C6:CC:BD:20:14:30
            X509v3 Authority Key Identifier:
                keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:e2:c4:26:17:9c:2d:47:a3:c1:5b:6a:a5:21:51:75:c6:76:
         4f:3c:9f:20:f0:37:f0:16:3e:6a:a7:48:04:83:9e:7c:1e:86:
         f0:78:33:17:fb:4c:cb:00:a9:63:3a:01:52:66:6d:61:ad:d4:
         b5:1f:ad:68:0c:b3:2e:61:e9:f8:32:a5:a2:53:70:94:72:39:
         68:25:fe:0e:8c:78:fa:1a:36:26:7c:79:cb:5b:8c:d1:19:18:
         dd:27:6a:aa:eb:e6:fb:76:4b:c8:54:7e:cd:54:ff:16:40:bc:
         88:51:a2:25:96:2f:70:50:e0:97:42:e9:76:a3:51:c9:7f:99:
         c5:68:86:46:c0:2c:df:0a:73:f2:67:f9:ca:de:57:87:0b:90:
         bb:b2:ac:75:61:88:82:cc:f9:75:3a:b2:33:37:bd:af:a5:bd:
         ac:4c:ed:a1:79:96:88:3f:d5:94:60:91:20:34:3c:ff:ab:69:
         d0:e7:3f:fb:f0:a5:d5:96:97:71:c4:1e:36:78:81:46:52:f0:
         d2:a7:73:a8:86:09:d9:e6:f8:a1:0f:d7:fc:8b:95:49:69:82:
         b1:3f:2d:4c:23:3d:b2:dc:c8:58:a1:5e:e1:fe:ed:0c:f1:5a:
         90:5e:2b:37:21:75:98:db:40:c5:64:37:b9:f5:4f:35:71:73:
         43:8a:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:06 2026 by rpki-client