Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File:                     NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier:          2SGD8ugNiOP+sNzFuxlEhtbCf5W5TVawVJPm9AkxppE=
Subject key identifier:   6C:BC:1C:9A:A4:24:C3:32:1B:AA:04:71:D5:90:5A:BF:5E:DD:59:9A
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer:       /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number:          74
Signing time:             Wed 02 Sep 2026 16:21:18 +0000
Manifest this update:     Wed 02 Sep 2026 16:21:18 +0000
Manifest next update:     Wed 09 Sep 2026 16:21:18 +0000
Files and hashes:         1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: UC/Aec8nSR1Qk00/GGMGHPxwoKFPZ2EDbvmDc4Yw9Uw=)
                          2: DBFD5AE29AC911F198A92D964911F970.roa (hash: w+n0GytCz1tL+nta12xN55dLplLzBUMuXjHXBaFBmg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 16:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
        Validity
            Not Before: Sep  2 16:21:18 2026 GMT
            Not After : Sep  9 16:21:18 2026 GMT
        Subject: CN=6a984cfe-9d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:a4:15:19:e4:7e:6d:be:bb:61:64:10:e6:
                    de:04:93:f9:8c:35:6f:10:7e:20:ea:c9:51:32:f5:
                    e1:98:02:13:58:2e:dd:18:a2:d9:94:42:6d:be:df:
                    ef:82:80:d2:8e:68:dd:da:3f:bc:a7:2c:29:e8:dd:
                    17:09:11:5e:f3:f7:8e:b4:e8:f1:ea:d9:d3:8e:60:
                    62:32:5d:65:30:ed:43:d8:7d:76:25:bd:8c:88:c3:
                    83:fc:a2:d7:02:11:dc:32:f2:1f:1a:0d:68:cd:8b:
                    fe:81:54:31:42:73:12:0b:97:9a:21:d5:58:71:82:
                    73:76:3f:00:0d:b1:b7:bf:55:ec:fd:01:40:3c:28:
                    1f:b3:45:af:cc:0f:72:22:7e:be:a4:45:33:b3:2f:
                    8c:d0:e8:12:02:4a:b1:40:ca:f7:35:84:ed:7b:91:
                    b7:a9:88:bd:45:1f:31:81:1c:e5:79:89:70:c8:71:
                    ad:98:4c:be:8f:82:2e:2b:ce:1b:2c:7a:04:6f:10:
                    f0:43:43:06:69:0e:ea:3d:52:74:2c:58:78:52:4f:
                    d2:74:d5:e6:73:d8:cb:bf:58:dc:b8:15:d1:22:6e:
                    89:72:e1:d6:ad:04:dd:77:e6:83:d6:46:9c:ea:09:
                    07:bb:e2:fe:64:14:06:7f:d2:04:1b:56:7c:cd:6f:
                    d9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:1C:9A:A4:24:C3:32:1B:AA:04:71:D5:90:5A:BF:5E:DD:59:9A
            X509v3 Authority Key Identifier:
                keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:00:14:56:2e:72:cb:44:f8:9a:32:e1:54:29:6f:b2:03:ec:
         d6:e0:9d:59:c1:32:bf:9c:70:29:f1:02:fe:38:ba:3a:7a:d3:
         06:f7:d4:c0:36:e1:21:41:e2:57:37:57:39:a2:55:c9:9c:d4:
         73:38:fd:68:78:03:0b:50:e2:2a:e8:5e:53:3f:37:5e:69:63:
         18:01:ca:50:ba:72:9c:7b:09:76:7a:61:b1:80:48:b5:15:e1:
         90:ec:19:1d:82:77:a9:b7:18:3b:62:d0:bb:10:93:9b:2c:ed:
         09:82:3a:36:a5:1d:19:cc:25:6d:64:38:d9:01:15:50:22:9d:
         c4:e2:f6:53:72:f6:8a:96:9b:61:56:8b:06:cb:74:b6:ca:e4:
         06:31:cf:20:1f:c5:75:57:1b:7f:e7:1c:4d:aa:c7:8a:a6:b1:
         ab:14:31:35:a0:65:b9:a4:f7:49:f0:9c:a3:fc:fd:b9:97:b5:
         26:6f:a0:5c:26:21:cb:d5:f7:6b:3a:0e:43:16:c6:36:59:9d:
         7e:7d:03:17:57:8a:b2:eb:fc:72:c4:6c:4a:6d:8e:e0:e0:f6:
         64:02:13:1b:06:43:14:8c:2f:9e:05:73:c6:07:06:84:aa:01:
         cd:7d:51:d4:08:dd:c1:b9:f6:13:c8:bc:d7:15:00:62:16:3b:
         a2:df:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:17 2026 by rpki-client