Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          uRRCPUgjyYbUSI93K8hCg2Y3A5KcNbq2xQiu1AvHvbI=
Subject key identifier:   62:F0:75:24:F9:85:BB:00:55:01:C2:6B:BE:9E:E0:E4:5B:ED:30:00
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          72
Signing time:             Wed 23 Sep 2026 07:40:10 +0000
Manifest this update:     Wed 23 Sep 2026 07:40:10 +0000
Manifest next update:     Wed 30 Sep 2026 07:40:10 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: wEM7RoCS+neIQXc+tTbzKjuzcU6tHFDNLLlE04G9Ho0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Sep 23 07:40:10 2026 GMT
            Not After : Sep 30 07:40:10 2026 GMT
        Subject: CN=6ab3825a-26e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3f:fe:23:99:f2:9a:9b:f6:50:b5:50:7a:4d:
                    18:d9:81:12:24:d9:79:1c:34:cf:59:09:75:8f:58:
                    18:7e:f5:a1:c9:0b:3e:f5:92:03:14:33:6b:69:ff:
                    9f:9e:13:99:19:a2:c8:49:48:cc:f2:86:56:72:ce:
                    6e:8e:22:a6:bf:86:fa:a6:4b:cd:58:27:4d:b3:c4:
                    81:9b:b3:fb:45:67:3e:59:ca:b1:9e:ef:ea:1d:8a:
                    72:d5:da:c0:80:0d:70:44:11:b8:86:c8:bb:1d:25:
                    15:45:28:e6:ab:9c:5e:f1:d4:bc:c7:49:02:69:4a:
                    08:86:44:bb:78:3b:a0:bc:da:23:52:0f:7f:17:cd:
                    5a:6b:dd:de:1f:1f:35:f0:64:9d:6c:f8:e5:f7:f9:
                    09:97:5e:b4:8a:6d:9a:05:5c:00:49:41:d6:57:8f:
                    58:1b:2b:c6:dd:cb:c3:5a:83:d3:20:40:65:60:0b:
                    55:de:c7:1a:d9:13:fa:94:05:11:4a:7d:17:51:d7:
                    c6:06:87:c3:f7:86:ae:df:77:7e:68:5e:e9:34:de:
                    c7:f4:0d:48:e6:ff:f5:45:1b:12:c3:7e:78:e0:5a:
                    a1:a0:35:87:df:f7:dc:80:1e:52:ca:67:72:66:17:
                    1e:10:6b:7d:c8:c0:ab:cf:0d:70:7f:41:83:27:66:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:75:24:F9:85:BB:00:55:01:C2:6B:BE:9E:E0:E4:5B:ED:30:00
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:87:bb:31:40:84:0e:ec:35:1a:ca:a8:2a:f2:f7:f3:f5:6b:
         bf:54:ff:cb:f9:f5:27:86:29:c8:1e:e8:16:6c:4d:64:9b:19:
         b8:f0:cb:ae:9a:4d:a9:58:ea:65:ed:0f:4f:53:8f:4a:a6:ee:
         9d:ce:ac:fa:36:49:62:e9:31:26:db:7f:bc:0d:df:fb:7e:15:
         3a:b9:c3:7c:0a:c0:e8:5f:25:d3:83:60:8c:18:08:d3:0a:ec:
         6a:c5:9e:50:b3:b5:e6:ba:fa:d4:52:d0:37:ce:36:f4:ab:b7:
         92:79:20:76:ee:39:a2:9c:21:d1:7e:97:fa:0e:72:7e:a4:62:
         17:77:13:0d:8e:6a:ec:6c:e9:ab:ab:d1:99:22:02:7f:7b:3d:
         33:8e:5b:9d:a3:a8:6f:5b:87:e0:21:dc:91:13:20:a3:16:a3:
         ef:31:ca:76:26:64:4a:03:3c:fe:2b:27:f1:4c:0e:89:2f:d2:
         0f:8d:1a:33:0f:c0:b7:04:2c:04:b2:17:58:f6:c1:7c:b9:09:
         d2:92:71:42:12:3d:1d:93:74:d8:0e:9c:6d:d9:f7:09:cc:ad:
         4f:1f:ae:af:90:a2:0d:1e:54:da:5f:d1:39:0a:4a:97:24:4d:
         ba:1c:96:b1:68:38:3c:67:ca:83:e2:e2:d9:e3:fb:df:af:77:
         26:37:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:19:08 2026 by rpki-client