Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          llAyDxwLMgp3F4RY1RzfVPe+/dINhEnUSGlLWOP+RoI=
Subject key identifier:   90:06:13:23:29:58:25:11:15:B8:E5:DB:60:D0:B8:B0:B6:71:F6:4D
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       06E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          06DC
Signing time:             Sat 04 Apr 2026 21:59:54 +0000
Manifest this update:     Sat 04 Apr 2026 21:59:53 +0000
Manifest next update:     Sat 11 Apr 2026 21:59:53 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: 4gFmOT9jqzec+a5G7/LRpnBhU5fHHNjMrIY9NoIol5s=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Apr  4 21:59:53 2026 GMT
            Not After : Apr 11 21:59:53 2026 GMT
        Subject: CN=69d189d9-fc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:33:4a:eb:85:c7:ed:d9:5c:62:6c:3f:ba:
                    7f:1c:1b:2e:5f:80:a9:90:fe:62:50:2f:ca:7a:7d:
                    96:0f:23:91:1c:c0:81:09:6f:65:9c:ff:31:d6:8a:
                    1b:ad:2c:89:fc:d1:bc:73:54:50:5b:4d:52:aa:14:
                    53:98:b6:08:3d:49:ee:01:e0:ea:60:a5:d7:0b:cb:
                    41:c8:83:74:f6:54:07:25:b7:bc:1f:58:b8:52:8e:
                    73:25:4a:2e:e4:d6:e8:38:f8:58:65:86:03:f7:37:
                    29:f8:eb:b0:43:27:19:b1:6d:c1:3c:c4:52:5b:7f:
                    4c:17:a1:f4:fc:ba:f5:11:70:b1:a6:0e:66:83:af:
                    6a:89:2f:39:35:bd:11:41:59:00:91:bb:3f:a6:c5:
                    c6:ed:5f:e7:a6:c3:91:c0:7e:b1:91:e4:04:fb:d2:
                    08:7d:e6:e3:90:d8:2c:70:bc:7c:97:4f:79:1a:78:
                    b0:99:09:6f:b3:48:61:bb:e0:33:f1:35:9a:5f:d6:
                    12:ae:f1:71:6b:f6:76:98:be:2f:0b:28:7a:0b:f8:
                    4c:d0:dc:07:91:13:1b:c8:b1:fd:e5:88:79:9d:98:
                    30:2a:8a:cc:e1:79:90:ab:84:43:13:86:2c:36:28:
                    6b:7a:3f:91:ec:34:ae:48:7f:90:30:bc:d9:54:43:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:06:13:23:29:58:25:11:15:B8:E5:DB:60:D0:B8:B0:B6:71:F6:4D
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:1c:ef:0c:bd:56:e1:cf:a0:b8:23:cb:30:c9:4b:1a:13:
         a6:b8:62:73:25:d9:5c:d2:e6:fe:6f:bc:5d:09:73:31:87:94:
         c0:65:71:b0:00:28:f0:40:a4:a9:ad:2c:8c:3e:95:35:a2:87:
         7e:65:6d:a0:14:b8:0e:0b:27:80:d8:52:1f:ea:a4:18:45:f7:
         06:64:31:42:2a:2c:0c:70:65:c0:87:56:bf:27:a8:04:21:18:
         b4:5b:c7:4b:82:42:68:e8:31:23:56:db:29:12:17:2a:d7:d0:
         1b:03:5a:42:8e:ae:ee:dc:be:ce:79:92:83:c3:3b:26:00:e6:
         41:97:ef:23:25:5c:9e:48:bb:1f:3f:6a:8a:7b:6a:4a:af:d1:
         90:71:74:b6:48:a1:ae:ab:43:25:88:02:aa:51:c7:43:7b:13:
         99:65:55:3c:cb:32:3c:7e:6f:1c:f4:d2:09:4a:96:4d:ed:ec:
         34:92:5c:d8:5d:b5:44:1a:3d:ce:2b:8c:9f:da:09:94:1d:c7:
         bf:85:48:f0:98:d3:db:d8:68:23:02:09:98:07:55:29:b3:d3:
         1c:9f:64:7a:ff:d2:e8:bc:74:9b:2d:1e:f5:84:76:30:ad:da:
         ff:e0:b0:65:a0:6d:0c:3a:ae:6e:d2:37:d1:f4:79:65:8c:87:
         9d:36:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:04 2026 by rpki-client