Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File:                     9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier:          JFaRQUcrAaA/bM10jDblorr/4wVPr6eSBFaW6FWO1KM=
Subject key identifier:   50:14:5D:CB:E6:F6:D3:E2:80:7F:E2:36:B7:92:D0:6D:81:A1:EB:8F
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer:       /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number:          EA
Signing time:             Mon 11 May 2026 06:30:40 +0000
Manifest this update:     Mon 11 May 2026 06:30:40 +0000
Manifest next update:     Mon 18 May 2026 06:30:40 +0000
Files and hashes:         1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: 7ge6Kd4esEoOlG2IXHvBlnbLdDuCxcNDlO0q4X5S1Uc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
                          rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
        Validity
            Not Before: May 11 06:30:40 2026 GMT
            Not After : May 18 06:30:40 2026 GMT
        Subject: CN=6a017790-8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:ed:23:cf:76:77:59:37:98:d8:ff:63:01:
                    3e:04:a5:19:f3:ab:f9:18:27:29:fd:b1:a3:40:cb:
                    cb:b6:d3:8e:b5:5d:35:33:0f:a5:29:91:47:fb:b3:
                    47:81:c1:b7:bb:5e:46:b1:17:49:76:e4:d5:10:84:
                    5e:62:35:a8:f9:83:36:d2:eb:4c:f1:97:5c:07:8c:
                    08:15:a8:a4:cd:74:80:ac:92:5d:e6:58:e8:f2:9b:
                    c2:e8:b0:a8:b9:fd:df:e3:b2:d9:f6:aa:19:3c:d8:
                    fc:c0:8d:86:bb:78:41:bc:b3:2b:b4:b3:fa:82:8c:
                    d6:dc:96:6e:d9:43:cd:d1:f2:33:74:05:5e:1b:3d:
                    2c:f0:fd:b1:09:49:86:aa:e2:4d:61:d0:73:e8:ea:
                    a3:61:a7:ac:44:f0:57:ed:34:5d:50:ea:7b:6a:fd:
                    cf:2e:ca:22:64:38:aa:19:a3:6a:14:62:65:3e:c1:
                    af:a9:8d:64:0d:6d:f9:28:c6:db:6e:6b:aa:8b:e6:
                    43:80:ae:3d:ff:06:1b:ba:45:60:03:f3:a9:e4:5d:
                    22:32:5c:9d:be:7a:34:97:86:bb:34:7b:d5:58:c2:
                    d6:3f:d3:2b:98:c1:f4:d5:7a:64:e2:47:92:84:93:
                    7f:0b:bd:9b:fd:c6:26:c8:7c:9b:f7:ef:a1:93:33:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:5D:CB:E6:F6:D3:E2:80:7F:E2:36:B7:92:D0:6D:81:A1:EB:8F
            X509v3 Authority Key Identifier:
                keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:47:d7:0e:94:01:fe:85:30:67:53:48:02:73:96:6f:5c:7d:
         25:fe:14:5e:ee:09:cd:20:2d:4d:11:b7:49:6b:f0:ce:7c:4f:
         50:16:f2:29:eb:1b:33:51:07:68:32:98:5f:ff:b4:97:2a:2d:
         0f:44:18:f7:e0:54:d8:9b:e0:08:3d:91:ca:b0:66:71:f5:ea:
         94:0d:d7:a2:29:bc:9c:6d:18:a9:98:af:87:c1:82:1b:bb:8f:
         82:ca:b7:be:f7:1a:e2:84:d8:fc:c4:ea:fd:89:c8:72:b0:5f:
         c6:37:fd:f3:ff:96:3f:6f:13:46:38:20:56:10:32:df:d6:bd:
         64:78:44:54:0c:97:fb:65:ee:9a:fe:4c:ee:c0:9a:9a:35:bc:
         19:49:c3:47:eb:47:72:c8:af:fd:7e:ae:56:3a:34:8a:33:4f:
         48:ea:5d:bf:3a:61:69:b3:1c:1f:57:f4:b2:74:96:30:1e:9b:
         99:1e:bf:08:80:8e:e2:c6:3f:c7:e9:3a:4d:b3:21:19:88:f0:
         1a:48:30:3b:06:8f:10:67:73:2f:ad:13:fb:fc:27:a3:2e:dd:
         b7:cf:31:cd:7e:de:80:11:b2:58:8b:e7:18:25:ea:35:09:80:
         f1:c4:7e:e0:c0:f0:f5:18:cc:e6:12:ba:31:3f:5a:b4:05:fa:
         0c:92:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:02 2026 by rpki-client