Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          oY2EL6mvNYdrG0ITn10KeT8nh77fTgqYEcX1PVEXNL0=
Subject key identifier:   B9:37:94:83:03:E7:C6:10:75:F0:5E:7B:12:19:C9:73:62:26:0C:FF
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       21B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          21B9
Signing time:             Tue 12 May 2026 15:54:27 +0000
Manifest this update:     Tue 12 May 2026 15:54:27 +0000
Manifest next update:     Tue 19 May 2026 15:54:27 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: czakTCnTDRTBA/w2pneCWC6w4KScZewz74nHo1Nm6Ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8633 (0x21b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
        Validity
            Not Before: May 12 15:54:27 2026 GMT
            Not After : May 19 15:54:27 2026 GMT
        Subject: CN=6a034d33-d188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:bc:47:a6:48:f1:6a:3f:59:cd:63:0a:7a:
                    a1:9e:97:1d:7f:03:2e:02:4f:60:1b:de:4d:5e:f3:
                    59:93:0f:f4:cb:62:6c:3d:b2:e0:4a:50:80:62:b8:
                    2f:c9:ff:ae:ca:f5:c9:89:dc:2d:5b:db:3c:f4:09:
                    33:96:af:9b:27:f9:49:80:21:ec:63:91:de:71:03:
                    d0:93:7e:2c:de:fe:64:c2:57:28:1e:c0:47:00:b7:
                    8b:fa:b5:40:b2:eb:99:ef:f5:8d:93:a5:fb:5e:a5:
                    e8:b6:ad:20:6a:19:c4:41:68:0c:d5:8f:4a:b4:f2:
                    ec:55:e0:ff:7b:d8:b0:19:05:97:bd:c7:7c:e9:df:
                    c7:a1:b7:35:91:5b:77:9f:62:4a:7c:62:aa:46:a2:
                    d6:98:4a:34:15:c8:63:fa:99:fb:98:01:9f:8d:a9:
                    e8:11:a3:e9:02:e0:9d:5d:ed:83:f5:9d:84:3f:a7:
                    fd:85:8e:a7:b1:ca:f2:ed:b4:38:ba:61:74:67:be:
                    38:14:cf:63:8c:11:33:0e:1d:21:ed:c1:53:31:3e:
                    77:53:3e:78:86:90:25:14:98:90:71:32:13:a1:d6:
                    1f:6c:39:ad:2d:7d:ba:dd:86:17:36:78:08:b1:ec:
                    a0:2d:ee:02:dc:86:15:bd:63:fe:5b:b1:f3:05:d6:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:37:94:83:03:E7:C6:10:75:F0:5E:7B:12:19:C9:73:62:26:0C:FF
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:84:9d:ba:c8:54:ca:76:1c:6d:68:37:90:d7:06:f3:1d:68:
         8b:84:db:3b:83:79:f4:64:6d:d7:c5:31:d1:b8:1c:54:bc:3d:
         3d:e5:76:b8:d4:3e:61:25:9d:ef:c6:69:79:ca:dd:50:cb:93:
         c0:1b:c9:6e:9e:a3:89:fb:0b:34:d2:77:d6:44:24:ef:15:9a:
         39:89:63:1f:95:c9:31:f1:dd:d7:34:96:70:ff:63:5a:f0:5e:
         8e:3d:08:41:0a:df:d2:3f:5e:38:5b:1b:7c:14:cd:b5:f2:50:
         81:90:b8:87:39:3c:99:e7:b7:f2:16:46:0c:07:ef:e1:b7:45:
         67:e3:4c:cb:10:de:4e:ff:f7:1d:a6:62:b1:f6:e1:db:0e:a9:
         1d:c4:5d:fa:00:a4:6d:84:95:e1:f2:c3:1a:bf:ca:87:98:66:
         e2:fa:dc:89:09:25:3c:ed:83:41:51:3b:51:d9:ab:cf:59:f0:
         e7:01:ca:d4:8a:df:97:1b:e2:c7:fb:9e:0f:c8:30:53:30:a9:
         f7:81:d6:1f:49:3f:78:31:92:2c:2a:b1:6e:fd:c2:0c:e2:fe:
         ec:48:ab:82:75:76:10:be:c5:58:a5:4c:42:a7:1e:65:a6:7b:
         65:1b:9f:f0:b9:33:ed:ae:bf:65:44:79:3d:8c:df:3c:fb:75:
         f5:d4:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:02 2026 by rpki-client