Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
File:                     60Y5e044RmfgPE26UHVUDwA30bg.mft (raw, json)
Hash identifier:          nivtbZBKhE1kOgqWYQ0FhWtn9mfJ/IKoUIalxPQ6QLg=
Subject key identifier:   BC:D9:FC:2D:2C:23:65:F3:51:2B:6B:5D:0C:C2:CA:BD:81:2D:0A:36
Authority key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Certificate issuer:       /CN=A9176DA8/serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
Manifest number:          1C
Signing time:             Mon 11 May 2026 09:09:14 +0000
Manifest this update:     Mon 11 May 2026 09:09:14 +0000
Manifest next update:     Mon 18 May 2026 09:09:14 +0000
Files and hashes:         1: 60Y5e044RmfgPE26UHVUDwA30bg.crl (hash: vvNPY4QFeTASx8yFyOYsDv/nu8cv3deUJzW6fTXbZd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
                          rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
        Validity
            Not Before: May 11 09:09:14 2026 GMT
            Not After : May 18 09:09:14 2026 GMT
        Subject: CN=6a019cba-2b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:0b:32:d8:ed:71:9f:44:42:c8:10:3b:57:
                    c7:7b:c4:81:1a:18:3b:be:34:ac:7c:92:01:6f:ba:
                    3c:f2:ad:51:87:40:9b:66:8c:1f:0a:23:5c:12:cf:
                    fb:aa:ba:aa:8d:4b:77:2a:60:18:c9:06:7a:16:b4:
                    3a:85:25:a2:0a:2d:02:0e:28:37:37:46:b5:40:e5:
                    22:d0:d0:58:60:f4:9b:c4:5c:ff:7f:6d:31:ee:84:
                    27:0e:2c:03:93:51:3e:0b:29:42:18:94:35:9d:09:
                    7e:ea:2f:46:74:7a:49:76:64:b8:cc:88:46:2b:0a:
                    b5:c4:29:3d:af:f7:5a:e6:e0:bc:40:90:fd:ad:94:
                    81:74:e4:34:c8:4c:af:6c:f5:80:c7:5e:16:60:61:
                    74:b4:29:58:f2:ae:8d:6a:90:25:98:56:e9:dd:52:
                    57:84:98:e6:48:86:b3:07:d1:8e:ef:96:c1:46:2b:
                    4f:dc:84:36:9d:1d:d9:5e:88:ab:f5:7a:1f:77:35:
                    89:d6:16:82:ea:04:d2:cd:9d:16:a3:ac:67:2d:22:
                    8d:44:11:95:9c:d0:57:e3:43:b4:fb:56:52:ab:a4:
                    0c:c2:33:ff:66:a1:b9:5b:21:2e:6a:92:e2:f0:26:
                    59:1b:d9:a1:17:07:46:9c:4e:8d:89:4b:21:1d:a4:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:FC:2D:2C:23:65:F3:51:2B:6B:5D:0C:C2:CA:BD:81:2D:0A:36
            X509v3 Authority Key Identifier:
                keyid:EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:87:c2:3f:c7:9a:b9:e5:db:59:36:46:0e:7f:c3:9a:28:4c:
         62:1d:25:9e:6d:6b:37:76:7d:7d:d3:74:02:c4:b5:e5:44:af:
         82:fe:69:d3:77:09:fa:45:22:f5:f0:d0:bf:5a:3b:8f:97:5b:
         18:d7:c9:04:29:27:07:c3:e7:35:8f:e7:5a:3f:1a:6b:55:a7:
         2e:b6:55:38:06:3b:dd:43:c5:07:0e:b7:64:e6:5a:4a:e9:da:
         6e:cf:d0:c2:34:b1:0d:7e:29:c8:65:7b:53:17:2f:5a:5c:db:
         f6:f7:4e:57:66:8f:6a:be:27:09:50:0c:0a:a1:f8:8a:6b:59:
         5f:36:ca:2f:ec:68:41:cf:e9:61:0a:04:bb:fc:55:92:4a:6a:
         f1:f2:3e:a7:97:30:0b:36:94:fa:bf:a1:12:4f:6f:22:6d:27:
         b9:15:2a:a3:55:aa:7f:ff:ca:3b:2e:23:17:a3:f2:e9:c5:f1:
         49:71:10:93:33:d9:41:48:e2:9a:f4:9a:f4:e0:a4:44:21:94:
         7b:39:05:e7:22:62:2b:f8:e2:6c:d1:5e:f0:e9:96:1f:5e:fd:
         15:ea:50:99:c6:d0:22:3a:4e:ae:20:7b:72:3b:b5:94:a0:7d:
         28:cc:eb:56:3a:04:0f:d1:58:78:bb:dd:4b:a8:2d:c2:a8:a2:
         91:8e:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:50 2026 by rpki-client