Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
File:                     NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json)
Hash identifier:          H7bQUvVA60YO/V/UWui58+wXZiQCnJYsxcrh4QU10fY=
Subject key identifier:   7E:E9:D3:3A:9C:65:A7:65:9C:5D:F3:FB:C3:F9:BA:0C:24:AF:75:A1
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Certificate issuer:       /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial:       0D65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
Manifest number:          0D40
Signing time:             Tue 18 Aug 2026 18:30:28 +0000
Manifest this update:     Tue 18 Aug 2026 18:30:28 +0000
Manifest next update:     Tue 25 Aug 2026 18:30:28 +0000
Files and hashes:         1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: JqLlz5kH1R8qO4wZntxoIN54902L70vpWzINAf66dTM=)
                          2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
                          rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3429 (0xd65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
        Validity
            Not Before: Aug 18 18:30:28 2026 GMT
            Not After : Aug 25 18:30:28 2026 GMT
        Subject: CN=6a84a4c4-455a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:72:9f:3d:61:95:7c:de:e4:67:ff:58:d1:
                    46:3a:4d:d9:a9:ac:ba:3d:dd:7f:e0:dd:9b:32:b5:
                    14:db:85:60:e8:d0:b7:94:9f:1a:24:5a:74:5b:f6:
                    e6:2f:2b:0f:de:8e:8f:82:9b:32:db:9e:fc:28:e2:
                    1f:e9:4e:55:71:ff:02:d9:aa:e7:c9:30:5a:fb:2f:
                    a5:d5:b0:2e:64:ec:e8:09:1d:c8:14:75:55:f5:f0:
                    93:31:43:d6:79:56:79:c2:43:0b:2f:1b:46:b0:c8:
                    45:ca:ae:b0:af:55:90:9c:0f:c0:0b:9a:4d:cf:9d:
                    4b:f3:f7:bf:1e:6d:55:26:ea:61:e5:73:a3:75:a0:
                    24:73:b9:a2:0e:67:37:0a:38:55:74:bc:15:2b:43:
                    63:55:1e:8b:95:3d:7b:fa:4d:21:b0:36:9d:61:6b:
                    93:76:8e:c6:a8:af:35:26:1a:a9:bd:e0:49:b3:96:
                    ac:3c:15:9f:a9:21:b9:df:2d:57:dd:fd:3c:30:d0:
                    09:6c:ed:5d:e2:81:b2:03:c5:65:ef:b8:73:c9:b5:
                    f6:d0:4d:b5:c4:4f:47:30:a2:25:9c:48:34:3e:de:
                    1e:b2:20:3d:bc:5d:11:02:97:6b:6b:59:1e:5e:da:
                    52:d1:6a:e6:66:94:b2:cc:a2:2b:ee:8e:35:b6:d3:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:D3:3A:9C:65:A7:65:9C:5D:F3:FB:C3:F9:BA:0C:24:AF:75:A1
            X509v3 Authority Key Identifier:
                keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:9e:de:d8:d0:8b:81:ca:42:d2:a9:8d:b6:65:e0:ca:e5:
         e5:f3:dd:1c:01:dd:62:4e:35:e4:ed:68:1c:0b:0b:5e:cf:6d:
         1a:e4:b2:c6:a4:28:65:72:f8:c9:f4:52:f6:68:84:28:25:25:
         f7:bd:6f:74:37:9f:2b:cc:65:cf:62:89:38:be:a5:5e:19:ce:
         81:de:5a:2d:5b:ad:ac:f2:e1:e4:67:60:17:c4:b2:97:b9:27:
         d4:fe:fe:8c:db:0a:f5:43:fb:a5:3c:10:70:14:4e:c5:de:fb:
         d3:b7:54:47:15:e3:6c:e3:a5:11:86:64:3c:db:44:14:94:d3:
         15:e0:65:c4:76:78:82:f9:6d:99:4f:2f:9e:ee:e8:94:bc:13:
         47:e4:09:93:98:46:b9:63:a3:59:97:25:54:6e:70:20:2a:64:
         3e:dd:e5:f5:81:c4:be:df:7d:78:5e:05:57:f4:83:92:34:1d:
         4c:aa:ea:f5:4f:a5:9b:93:50:21:49:2b:37:ca:63:36:ff:83:
         f9:d7:3b:70:3e:35:72:6b:75:d4:ba:2a:97:f2:b9:aa:79:1b:
         a2:7d:6f:c5:95:ee:f3:76:fe:b3:2a:a2:d9:51:ef:e7:87:d7:
         53:37:36:19:bf:34:6c:50:49:52:7e:94:a8:64:24:31:a0:15:
         5d:46:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:55 2026 by rpki-client