Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          fXtBbHxdNWhvK3alevhbaKM6G2eHmHYRFbHPIQVhQuU=
Subject key identifier:   89:4E:72:68:A3:2F:EF:B8:BD:B0:35:C1:5F:09:02:15:31:A8:F4:BF
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          52
Signing time:             Thu 23 Jul 2026 10:17:16 +0000
Manifest this update:     Thu 23 Jul 2026 10:17:16 +0000
Manifest next update:     Thu 30 Jul 2026 10:17:16 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: Vl+7L/lR5FRnLIUAxLYh3sxU/JJfYCbGn3R4zBtpejs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Jul 23 10:17:16 2026 GMT
            Not After : Jul 30 10:17:16 2026 GMT
        Subject: CN=6a61ea2c-8a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:52:b8:e9:b8:93:f8:40:d5:13:13:1c:7e:76:
                    8b:0b:20:83:e6:2a:bf:f5:65:51:05:70:1b:91:c1:
                    77:5c:ea:ec:49:04:6f:e6:60:3c:a4:7b:92:5a:6f:
                    99:cf:c9:82:26:60:38:1a:f7:cd:10:ca:92:73:da:
                    4a:07:41:e6:d1:cd:04:06:fd:79:a7:54:ed:7b:ee:
                    7e:07:ef:01:f2:d2:ae:fc:1b:ea:be:66:2c:da:ff:
                    af:15:43:10:4d:d1:db:05:5a:96:3d:9b:99:da:10:
                    11:d4:eb:f2:34:72:e1:00:d9:8e:03:18:a9:ea:14:
                    d7:8d:df:93:94:8d:89:9e:1c:d5:4d:8e:39:e9:c4:
                    b0:6e:45:13:f4:b6:b8:ec:3f:7b:e8:df:6f:e0:d2:
                    26:5f:35:20:e3:b7:c9:b3:f2:44:44:ef:0b:76:62:
                    39:be:eb:db:35:eb:27:ef:c5:bd:b4:fb:33:ba:63:
                    e3:c1:fc:87:d3:a3:bf:d6:7f:bc:15:03:00:6d:43:
                    3f:a0:7f:59:b1:67:ae:57:83:ec:99:19:47:d8:f6:
                    f3:06:60:4f:d9:76:00:6e:f9:13:d6:bf:17:d7:e8:
                    59:26:bf:6c:45:82:e1:2b:6d:4e:97:63:ce:28:c9:
                    0e:fb:fa:b8:82:34:7d:09:f2:62:b6:e7:f8:20:d5:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4E:72:68:A3:2F:EF:B8:BD:B0:35:C1:5F:09:02:15:31:A8:F4:BF
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:27:44:f5:68:4f:25:d8:8e:dc:7f:0e:56:2f:84:6a:71:7d:
         10:be:16:b0:ee:3a:6e:d0:d0:4d:a5:35:76:96:26:b7:6b:de:
         f0:7f:fc:36:97:3a:8e:f3:1f:61:c8:d9:2e:8a:e6:84:c1:fa:
         09:7d:31:53:87:72:18:33:0a:fb:56:f6:6c:48:6a:df:4b:70:
         2b:86:4f:41:dc:5e:1d:f4:06:fe:18:04:b9:17:64:00:49:81:
         eb:62:5e:4e:5c:46:77:f0:be:5f:02:86:8c:a5:7c:24:25:5b:
         a0:d5:55:cb:a5:1b:8d:1b:b8:5a:f8:87:8b:68:d9:61:93:10:
         b3:64:87:29:d9:fc:0a:7a:c4:26:2f:c2:8a:e2:7b:fe:0d:44:
         be:d2:c0:01:3e:fd:e5:28:2d:71:da:0f:78:01:ff:cd:d2:03:
         c2:dd:2e:60:47:ad:3c:84:d9:49:52:65:90:5b:b2:9b:40:56:
         cc:94:68:dd:15:17:85:b2:05:e3:89:e2:77:1c:5b:70:37:5d:
         09:79:69:2c:e5:15:a5:b6:b8:6f:71:f6:6a:94:6e:5f:97:45:
         b9:ba:95:75:7a:d0:e2:52:98:ec:91:d7:17:7e:a3:84:4a:bf:
         0e:1c:fa:86:2e:da:2c:d1:a7:2b:48:36:e5:15:fd:c3:f3:2e:
         03:41:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:17 2026 by rpki-client