Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
File:                     CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json)
Hash identifier:          etdN/x8RzKDx+WQMuqE00j04kklSbtWqM7xtp/YLysQ=
Subject key identifier:   50:B8:0E:2D:F3:9F:03:48:F9:2D:55:92:A3:D1:91:31:20:D8:F2:EB
Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
Certificate issuer:       /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
Manifest number:          70
Signing time:             Mon 11 May 2026 07:58:58 +0000
Manifest this update:     Mon 11 May 2026 07:58:58 +0000
Manifest next update:     Mon 18 May 2026 07:58:58 +0000
Files and hashes:         1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: FI6G7qBX2ANCxgN/ZVJjYWxUOUVjhcP63ABymMGYM5s=)
                          2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: bPau6Z6P+AYKpvnSxKbqaqw77/l2J2Yx/cJ0pxXB/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
                          rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
        Validity
            Not Before: May 11 07:58:58 2026 GMT
            Not After : May 18 07:58:58 2026 GMT
        Subject: CN=6a018c42-e555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:8c:50:12:86:80:9f:58:ca:fc:6d:77:20:
                    ef:2b:ea:34:f0:d6:97:c2:5f:7f:fd:d4:cc:a8:c0:
                    82:31:ac:c2:17:e5:d6:79:5d:29:2d:fa:ab:89:e5:
                    3f:0f:f8:df:37:95:3f:2d:09:c3:6e:ca:95:0c:f7:
                    29:bb:e2:c5:e9:da:e5:43:64:09:0c:47:14:06:15:
                    f7:d3:50:14:39:31:a3:44:3a:b5:f7:26:85:a2:af:
                    f6:01:9c:62:27:62:6c:0b:cf:8e:2e:5f:66:3d:c5:
                    32:96:2f:ef:f4:ae:16:71:d7:9b:2f:7f:fc:9f:29:
                    24:0b:31:f4:9c:2e:f6:6b:38:8e:01:78:10:46:75:
                    35:eb:f2:b3:78:59:47:1f:a8:63:79:a3:2f:49:78:
                    74:04:fb:3d:3a:43:db:75:0b:f0:98:ec:c7:b0:d2:
                    63:27:47:30:08:34:ad:59:96:21:1f:0a:aa:7e:6d:
                    1c:b8:b9:6a:83:30:00:d9:10:30:85:43:55:d5:85:
                    7a:7e:2c:9a:a0:b2:2b:99:1f:8e:fd:f5:b2:76:d9:
                    f7:bd:5f:3e:5d:31:6b:e8:07:6d:83:34:be:3b:bb:
                    ce:84:30:b4:cf:5c:0e:7b:b1:fa:b5:65:13:a8:a8:
                    2a:84:4d:3b:f2:fe:e0:e3:b8:4a:f3:26:33:42:ed:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:0E:2D:F3:9F:03:48:F9:2D:55:92:A3:D1:91:31:20:D8:F2:EB
            X509v3 Authority Key Identifier:
                keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:6c:57:dc:76:77:74:a6:35:68:80:a9:66:6f:95:91:c3:
         69:55:29:79:71:2f:f2:cf:ef:e9:d3:70:de:bd:e4:9d:8b:88:
         5c:89:00:a1:b5:ea:57:f1:da:c2:c0:36:0e:58:4b:8c:ad:cc:
         ee:d5:ab:f7:22:c6:9f:21:b7:13:43:aa:85:0d:8f:3e:a3:91:
         78:8d:7b:ce:ee:55:ef:b1:b7:9b:6e:aa:85:a7:ca:ba:36:5b:
         73:34:65:f0:23:71:d8:60:9b:20:0b:14:47:36:b9:3f:ce:55:
         52:c5:e9:cb:99:45:fc:e2:b2:21:a1:d6:ed:0a:97:ff:77:11:
         da:20:6b:3f:50:bd:ca:3a:52:bf:f5:8b:64:da:21:39:38:67:
         e0:9c:a8:f5:c5:c0:c4:97:be:75:c5:a4:3a:26:12:99:19:e6:
         ac:5b:53:e0:f4:54:77:9b:8c:c1:19:d1:eb:78:a5:11:c8:f8:
         27:6e:01:d0:82:7c:e8:f0:71:83:21:1b:c2:25:85:2f:1f:7c:
         ec:c2:52:7a:96:a1:a8:f6:62:9e:25:31:f3:87:23:ae:68:46:
         eb:ec:2a:03:8c:e6:ef:fb:d4:21:15:0c:4a:2e:0f:15:31:4f:
         dd:49:aa:7b:1f:32:69:da:42:96:3f:4c:cd:be:3c:83:5a:5a:
         19:95:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:40 2026 by rpki-client