Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          fslh15savkMymwzbyPJ1r0Zd+Oh0xDuWywPsyHkHnXs=
Subject key identifier:   0C:AD:C8:0B:68:CE:48:CE:EE:88:86:D5:37:C4:DC:37:92:DA:72:7F
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          011A
Signing time:             Sun 05 Apr 2026 05:14:16 +0000
Manifest this update:     Sun 05 Apr 2026 05:14:15 +0000
Manifest next update:     Sun 12 Apr 2026 05:14:15 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: vOiIEmzh//iE3/R2LXTEoX155ItxouZzDVC1hj16gNo=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: rKOF5G1rRsnbnMYR44k5iX/Epi0JY5GfvCxRXMN0wtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Apr  5 05:14:15 2026 GMT
            Not After : Apr 12 05:14:15 2026 GMT
        Subject: CN=69d1efa7-a1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:a6:28:20:b3:91:b3:ec:6a:b4:aa:a9:d8:
                    ac:c4:7f:ef:43:9d:01:12:b1:17:4f:bd:92:ee:cd:
                    2b:5b:5f:d7:f9:63:a0:ff:57:35:14:21:bd:76:bb:
                    15:7c:ab:8c:28:1d:6f:cc:ee:ac:8e:a4:56:c0:ac:
                    1a:a1:36:a6:a7:76:bf:4f:21:43:d9:23:0d:e6:ae:
                    60:f3:c7:76:66:ef:77:82:64:3d:bb:32:38:66:b6:
                    9d:70:ad:b3:4b:1f:0a:b5:f8:24:28:29:d4:36:da:
                    e1:33:f1:3a:32:2b:a7:ba:49:1f:7a:42:ea:9a:b8:
                    00:36:1f:65:a3:e1:b3:bd:03:74:8a:ef:2e:23:5e:
                    65:7e:1d:d9:7b:3b:3d:9b:7b:40:5b:39:6c:73:4c:
                    8a:07:1c:d1:75:09:4e:6e:fb:c9:99:de:42:e1:f3:
                    f5:e3:8c:f3:b5:9c:92:83:f7:ba:52:e1:bb:51:96:
                    02:3f:88:f0:1c:3a:78:93:8c:c6:47:b6:67:c3:a4:
                    02:78:52:5d:7a:47:e1:f8:65:4e:aa:a4:6e:b3:2f:
                    73:39:6e:ca:ce:07:95:54:59:cf:27:e4:9c:d4:26:
                    42:57:ef:d8:b1:40:90:46:30:ed:c0:b5:2d:a0:50:
                    6b:61:1c:4b:d7:c0:7a:bb:16:f9:e9:ef:3e:98:f9:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AD:C8:0B:68:CE:48:CE:EE:88:86:D5:37:C4:DC:37:92:DA:72:7F
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:ac:26:a6:a9:e9:b0:c1:79:e2:00:1e:6b:21:72:87:86:
         6c:05:e5:a2:cd:83:fd:b9:03:fc:6f:33:7b:5b:1a:9c:24:54:
         75:ee:54:38:bb:50:d7:14:3d:37:20:2e:ba:00:31:2d:a0:a2:
         29:b8:c8:5a:eb:ae:37:9f:db:06:5f:a5:c8:fb:2c:c1:53:70:
         78:cb:ce:33:20:44:81:72:8f:22:f4:d2:71:cb:77:3c:90:95:
         8f:0a:2d:8f:82:d8:69:e8:2d:54:52:11:8d:3c:7e:3b:a3:0b:
         65:c8:8b:77:2c:b0:f1:fe:16:48:26:bd:32:1d:de:ec:56:a5:
         6f:5a:06:96:2e:27:7c:0e:0f:3b:77:86:00:f8:0d:ef:74:1f:
         c0:c8:1e:44:ed:75:77:da:4d:94:7d:a4:1a:17:9a:61:09:cb:
         2c:00:21:5c:ac:b3:68:07:18:4f:21:a9:e7:8e:67:87:e1:86:
         33:eb:49:07:36:51:d8:75:52:24:97:c0:06:11:57:82:81:e9:
         cf:27:1d:8a:5b:5c:d3:76:88:43:9e:8c:64:02:f7:e6:2e:b5:
         cd:ef:9c:f4:44:b8:3a:fb:c7:97:bc:05:74:e9:30:37:2e:66:
         89:a0:24:b4:c1:b6:59:6d:f3:cd:b2:99:68:ce:b6:a1:c8:2d:
         aa:59:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:42 2026 by rpki-client