Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
File:                     cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json)
Hash identifier:          aD+GeuI1GLWs9lAmOgwsWqyyKtc58zkNr8prih/DYWQ=
Subject key identifier:   1B:DB:E2:92:CA:D5:CF:7B:06:99:E0:4A:2B:48:79:E3:34:F6:69:34
Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED
Certificate issuer:       /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
Manifest number:          16
Signing time:             Wed 25 Mar 2026 08:12:48 +0000
Manifest this update:     Wed 25 Mar 2026 08:12:48 +0000
Manifest next update:     Wed 01 Apr 2026 08:12:48 +0000
Files and hashes:         1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: cTSKv19KJBVLAd+oZ1OfLVL0ODRrT5e4Xcu5EfNt5gI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED
        Validity
            Not Before: Mar 25 08:12:48 2026 GMT
            Not After : Apr  1 08:12:48 2026 GMT
        Subject: CN=69c39900-87ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:48:d4:a4:9c:e6:78:65:94:fb:75:88:6c:
                    a3:be:91:ff:ed:42:ce:a4:e0:7c:06:ac:7d:87:93:
                    fe:20:13:ec:c7:61:e5:0a:66:a6:d8:00:7e:b3:62:
                    8d:c6:b9:c4:52:b0:19:6f:f6:4e:e0:7b:19:29:67:
                    8c:45:a5:f4:ce:52:02:8a:c8:8e:6b:29:b5:98:d7:
                    72:1b:bc:80:ad:45:6a:e1:d7:e5:9e:a6:e7:5e:1d:
                    e3:d8:d8:43:95:bc:b5:0f:85:3d:ca:a5:34:2b:71:
                    2d:b6:7b:18:2b:60:83:6c:01:19:1a:7b:db:82:cd:
                    ed:18:67:bf:82:b9:8a:95:ba:c1:3d:18:26:33:e1:
                    e0:af:74:82:83:49:ed:4b:70:97:cb:cf:e1:90:95:
                    65:53:ad:ab:6b:84:0d:f3:a5:4b:b9:69:c3:c0:51:
                    5e:52:51:d3:21:47:bc:3a:b1:2f:a0:ef:a2:9d:35:
                    6f:25:d6:75:4e:9a:6a:a9:9d:d3:6a:d4:02:1a:cf:
                    8f:d1:3c:98:68:1c:aa:9a:65:35:6d:f8:20:e7:3d:
                    8d:e2:93:46:5c:80:fb:30:0b:68:47:06:23:9b:0d:
                    0a:78:f3:c7:4f:98:61:85:0a:04:5f:c2:90:ad:95:
                    49:04:10:99:65:a9:3f:ee:9f:9f:0c:2c:aa:78:af:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:E2:92:CA:D5:CF:7B:06:99:E0:4A:2B:48:79:E3:34:F6:69:34
            X509v3 Authority Key Identifier:
                keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fa:7c:e3:91:9c:13:04:d3:89:9a:88:77:f6:1b:36:31:b8:
         7c:b1:1e:35:f5:aa:bc:da:65:e9:15:20:8a:6e:3d:14:3b:bd:
         41:01:2a:38:84:3b:f8:d9:23:4f:0c:44:55:3c:d4:56:c8:01:
         d9:95:b5:98:61:e4:51:3b:ec:b3:a5:90:a3:71:4d:c8:44:51:
         37:64:1f:47:37:ed:85:cf:3f:6b:09:4c:14:32:85:39:39:f9:
         ba:78:a1:d1:a7:0f:f9:93:70:a2:df:37:d2:96:5e:4e:33:d2:
         fe:2c:3d:ad:0f:fe:ad:54:e7:db:2c:7d:4d:e9:1e:c0:94:13:
         51:71:62:0b:a3:2e:65:0a:77:68:8e:12:b6:d7:b6:ee:c3:c6:
         98:ee:c5:4f:d4:6d:e4:05:17:9a:e9:8b:da:f9:b1:a8:d6:8e:
         31:7b:54:bc:14:2d:79:a4:4e:83:2a:18:81:c7:28:36:ad:4c:
         0a:2c:e5:4c:63:a6:fd:3f:4c:e3:55:85:7a:3e:ca:ba:f4:fd:
         27:0c:5c:fd:03:97:4e:22:84:8a:94:78:a8:4d:7d:6d:86:a5:
         62:5b:5a:ff:cd:0e:91:e3:10:4b:87:e4:91:4d:bc:5f:3f:d5:
         e2:e4:99:92:c6:31:85:5c:b3:69:c7:5c:b4:31:28:5f:a4:13:
         2c:1e:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:28 2026 by rpki-client