Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          /LL8GfkF6rpJ9UwxkNpb1Mj1mqxzNA6/H85s/LXy5ck=
Subject key identifier:   1B:AF:64:AD:AC:B4:9A:A6:D4:53:24:62:C5:2F:7D:2E:AC:41:CC:5D
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          8B
Signing time:             Sun 05 Apr 2026 06:57:15 +0000
Manifest this update:     Sun 05 Apr 2026 06:57:14 +0000
Manifest next update:     Sun 12 Apr 2026 06:57:14 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: 9jUFLa2nJ5ejdrW0HO4whFvJgZOpASz99rr9lfdjIqg=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: cYt+KD2Qk+BlMRrfFar8wLBaPDEtviMRQH8N+k8Q4G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Apr  5 06:57:14 2026 GMT
            Not After : Apr 12 06:57:14 2026 GMT
        Subject: CN=69d207ca-714a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:6f:c0:b4:23:bd:11:08:24:15:d3:47:95:
                    54:16:8c:cf:0b:74:31:37:2e:96:a2:e7:db:90:04:
                    3d:10:28:b6:68:2a:9b:89:7e:22:2f:6c:b2:db:43:
                    9e:ff:47:4d:1d:dd:6e:6b:60:f9:d3:c2:7c:4a:cb:
                    ee:e1:1d:0f:71:23:c9:eb:09:c5:6b:a4:91:81:92:
                    a2:bd:65:1e:11:4b:a0:9e:25:e3:70:81:e3:4c:2c:
                    43:25:52:9e:f3:29:e0:eb:fd:52:b1:13:79:1d:21:
                    ee:83:1d:fc:a8:cd:3a:a9:fd:e3:f5:1d:bf:de:35:
                    38:fb:9d:c9:99:6c:11:ad:49:a5:89:61:31:41:6e:
                    42:07:bb:f7:4e:58:c1:7e:8d:26:b0:93:77:dc:6c:
                    3e:f1:a1:92:b3:cd:4c:1c:f1:62:fb:60:77:f0:1f:
                    fb:a8:2b:0e:9c:5c:f9:1f:f6:25:ca:5c:16:9d:59:
                    57:ef:8c:5c:20:09:71:6b:7a:c5:2f:22:8c:ca:92:
                    49:50:2a:22:85:ea:08:e3:c9:c1:8f:09:14:a4:ce:
                    60:14:73:fd:de:bd:cf:88:5b:82:b4:0a:3d:1d:32:
                    c4:17:b6:9c:b3:a9:a9:c6:34:86:b0:b8:b8:1b:e8:
                    cb:7f:1b:6c:6c:ca:92:02:92:f4:56:c2:e3:39:1d:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AF:64:AD:AC:B4:9A:A6:D4:53:24:62:C5:2F:7D:2E:AC:41:CC:5D
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:56:c3:98:86:a3:f9:da:8f:d0:14:bf:29:ad:ba:b0:e3:
         24:ec:59:87:90:0a:dd:bd:80:60:f8:7e:d7:79:4b:88:90:a8:
         ab:ba:66:d6:44:d7:b2:f9:d7:34:c6:62:af:4f:54:d4:66:d5:
         ab:e7:83:47:2d:56:69:57:86:44:f0:8e:94:6d:76:59:40:84:
         ca:e7:ae:4b:3a:8b:03:cc:b0:21:88:bf:06:49:95:ee:03:99:
         d8:0d:ac:a1:51:d8:91:7d:5a:36:cd:29:dc:19:c5:a6:99:01:
         64:74:30:19:6c:8e:4f:b6:10:6e:3d:8b:cf:c5:eb:c1:e9:ff:
         84:b5:c6:fe:29:9b:de:d8:1d:32:29:12:61:9f:8f:39:2d:d1:
         2b:eb:2f:85:ce:78:da:7d:ff:33:8a:a6:22:2a:4d:d7:ee:7a:
         ea:5a:c3:f5:28:ee:af:6b:df:19:6c:48:30:fc:10:7b:71:48:
         b3:c6:b2:67:89:bb:c3:88:f1:a7:a3:87:1f:e3:62:c5:ab:24:
         20:ca:43:dc:e2:28:0b:14:1b:43:2d:c0:04:17:6c:5d:de:55:
         8b:a2:c2:46:65:83:4c:b5:b4:6f:42:8f:eb:b3:4d:ae:90:d8:
         4b:b0:c9:4b:d8:5b:b4:ff:89:2b:9e:71:cd:6e:c6:d5:33:10:
         b0:79:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:13 2026 by rpki-client