Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
File:                     N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json)
Hash identifier:          n+VXqfWobuBRLD09TTGchUIH5iKQUBPzuDdJlTyebYs=
Subject key identifier:   0A:A9:C6:83:74:C1:F2:65:A0:90:D6:FF:D5:C9:AD:51:4C:64:37:55
Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
Certificate issuer:       /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
Manifest number:          38
Signing time:             Mon 01 Jun 2026 09:26:45 +0000
Manifest this update:     Mon 01 Jun 2026 09:26:44 +0000
Manifest next update:     Mon 08 Jun 2026 09:26:44 +0000
Files and hashes:         1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: Uc3l21wAtMHuPxKbwoqDlAyiQuuosG+nigbPWV5PJd8=)
                          2: CD7290AA136F11F1982A4804323D8C67.roa (hash: CCP9/OeftiKfulV8qYHt+suPF/2fOVKP+J3q0O5BU9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
                          rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
        Validity
            Not Before: Jun  1 09:26:44 2026 GMT
            Not After : Jun  8 09:26:44 2026 GMT
        Subject: CN=6a1d5055-a0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:4e:ac:a9:c7:aa:4c:8f:cb:b2:5d:e7:1b:
                    2c:2c:78:20:1d:01:58:a6:2d:61:67:8f:e1:9f:50:
                    88:b8:c5:b4:ce:4b:7f:47:4e:e1:97:25:a4:a5:59:
                    22:f7:f0:10:8a:e5:f2:b5:ec:4d:cc:84:26:96:9f:
                    a1:19:b3:44:3d:81:ad:52:4f:4b:be:03:da:bb:ad:
                    24:22:62:b7:f5:ac:5e:40:dc:49:03:e8:99:c7:ff:
                    c0:64:72:54:ca:db:91:f6:47:22:2d:e4:35:6c:4f:
                    10:c3:be:31:3e:fb:79:5d:c7:bb:e3:e2:76:4a:24:
                    e2:58:47:97:ed:ef:12:78:e0:83:16:e6:fa:00:c2:
                    f8:20:3f:fb:3d:5a:63:2c:62:15:e3:f8:6f:0f:dc:
                    32:bc:7f:ad:b4:d1:af:f7:c6:5b:df:21:77:6a:56:
                    8e:95:c0:bc:73:3f:ad:ef:7d:1b:ba:05:58:66:f7:
                    9f:08:c6:09:19:df:6f:be:f6:48:73:43:46:5b:b5:
                    84:15:89:27:64:14:67:82:9d:de:15:6a:00:fd:e7:
                    2f:da:31:fe:09:db:80:6f:54:a3:45:5c:12:94:0f:
                    04:8f:46:f9:66:58:6a:4a:dc:a3:b3:55:19:03:49:
                    fa:37:b2:56:6c:7f:35:f3:5f:9b:a7:61:8e:60:59:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:C6:83:74:C1:F2:65:A0:90:D6:FF:D5:C9:AD:51:4C:64:37:55
            X509v3 Authority Key Identifier:
                keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:58:77:b8:fe:50:19:5f:e8:17:5d:10:4a:96:a3:1e:1d:
         fa:1f:7c:7d:7f:b6:8e:16:62:c1:e7:80:b2:b5:1f:74:1a:5f:
         7b:92:57:6c:38:00:ee:06:a9:98:9e:8b:af:ae:7c:9a:20:7c:
         45:fc:1c:0c:c8:32:c1:dd:31:94:35:b8:0f:4a:1a:0f:74:3c:
         4c:1b:93:3a:ae:d5:b6:68:7b:1d:de:d2:b2:80:db:23:88:f7:
         9c:e3:24:47:23:61:85:c7:10:2a:a2:db:72:98:9d:03:5f:18:
         02:b1:f5:0b:3a:8b:90:8b:08:67:a9:19:a8:11:b0:dd:40:9d:
         ff:17:f9:23:bb:b3:63:b5:7d:d3:dd:ee:a9:92:9b:95:67:9b:
         b3:7c:7d:bd:41:71:09:4a:d5:d8:da:e4:e0:9c:2b:6b:ad:46:
         3d:57:98:b7:5f:8a:ba:17:33:97:ca:80:ce:3d:a9:99:a4:b4:
         13:2e:8c:91:2e:be:a9:39:54:9a:68:5e:59:ba:a0:93:64:d5:
         38:66:6b:94:b2:fa:03:69:11:3d:fc:6f:d9:7a:bf:57:c5:04:
         f8:4f:f7:89:a7:3d:8a:8b:9f:4c:07:c5:25:e8:34:08:fb:dc:
         32:a4:63:94:87:bd:fa:da:8e:12:c8:91:07:ce:05:ab:d5:cb:
         6d:a4:ed:1d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjU4NzExMC8GA1UEBRMoMzdCMEYwMTAwRDNCQzNERUU2NUQ5QkVCMEFFQ0M0Q0VF
MUZCMzY1NTAeFw0yNjA2MDEwOTI2NDRaFw0yNjA2MDgwOTI2NDRaMBgxFjAUBgNV
BAMTDTZhMWQ1MDU1LWEwZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTl06sqceqTI/Lsl3nGywseCAdAVimLWFnj+GfUIi4xbTOS39HTuGXJaSlWSL3
8BCK5fK17E3MhCaWn6EZs0Q9ga1ST0u+A9q7rSQiYrf1rF5A3EkD6JnH/8BkclTK
25H2RyIt5DVsTxDDvjE++3ldx7vj4nZKJOJYR5ft7xJ44IMW5voAwvggP/s9WmMs
YhXj+G8P3DK8f6200a/3xlvfIXdqVo6VwLxzP63vfRu6BVhm958IxgkZ32++9khz
Q0ZbtYQViSdkFGeCnd4VagD95y/aMf4J24BvVKNFXBKUDwSPRvlmWGpK3KOzVRkD
Sfo3slZsfzXzX5unYY5gWZqzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCqnGg3TB
8mWgkNb/1cmtUUxkN1UwHwYDVR0jBBgwFoAUN7DwEA07w97mXZvrCuzEzuH7NlUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0I4NDBFRDg2MTM2
RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3bVhadnJDdXpFenVIN05s
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTjdEd0VBMDd3OTdtWFp2ckN1ekV6dUg3TmxVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG
NTg3L0I4NDBFRDg2MTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3
bVhadnJDdXpFenVIN05sVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBrXlh3uP5QGV/oF10QSpajHh36H3x9f7aOFmLB54CytR90Gl97kldsOADuBqmY
nouvrnyaIHxF/BwMyDLB3TGUNbgPShoPdDxMG5M6rtW2aHsd3tKygNsjiPec4yRH
I2GFxxAqottymJ0DXxgCsfULOouQiwhnqRmoEbDdQJ3/F/kju7NjtX3T3e6pkpuV
Z5uzfH29QXEJStXY2uTgnCtrrUY9V5i3X4q6FzOXyoDOPamZpLQTLoyRLr6pOVSa
aF5ZuqCTZNU4ZmuUsvoDaRE9/G/Zer9XxQT4T/eJpz2Ki59MB8Ul6DQI+9wypGOU
h7362o4SyJEHzgWr1cttpO0d
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:17 2026 by rpki-client