Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File:                     N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier:          +D5/esPeujU5FRVCn2XufVY2x5m/HnSXCqbyo9mfDNE=
Subject key identifier:   21:EE:5C:1E:2D:38:BA:A8:B0:E7:F0:B2:1E:25:4B:28:B8:52:96:36
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer:       /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number:          0348
Signing time:             Mon 27 Jul 2026 02:08:20 +0000
Manifest this update:     Mon 27 Jul 2026 02:08:19 +0000
Manifest next update:     Mon 03 Aug 2026 02:08:19 +0000
Files and hashes:         1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: L0mcuRjoosUIkaAZYhRNDYMK8ejHKuFP/aSf+58xkDc=)
                          2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: iOuORY+LnmvKLHgsVsbokwSlIctdoiKuQFeKpaNglE4=)
                          3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: pM24w6vKLtsWmfPCHn0P6r3fycQVCoXTQ9k3lCEASV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
                          rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
        Validity
            Not Before: Jul 27 02:08:19 2026 GMT
            Not After : Aug  3 02:08:19 2026 GMT
        Subject: CN=6a66bd94-06e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:48:b3:c1:b3:bc:60:5b:36:9c:fd:ad:a2:
                    35:0e:fa:01:9a:36:43:16:9e:b4:d4:12:62:84:f6:
                    0a:a4:fa:9a:05:a8:ac:65:06:b9:f0:4c:6f:f1:8a:
                    30:31:88:15:52:a6:50:66:16:d4:29:59:6d:48:41:
                    71:d8:5e:39:a6:48:5e:96:84:29:25:9b:9b:9c:1a:
                    19:43:20:7e:ae:21:01:b4:87:0e:ee:5e:c3:20:f2:
                    f3:07:aa:71:8a:74:5c:63:c9:72:7a:3c:32:ec:bd:
                    ca:1d:65:dc:07:7a:88:c7:1d:47:37:be:4b:57:e6:
                    c8:4d:b0:9a:47:f2:30:67:5f:0b:37:31:7f:17:89:
                    dd:f8:62:dd:70:a8:c3:ff:7d:04:f3:74:c0:c9:9e:
                    da:0b:56:72:94:32:c5:cc:3f:85:a6:b5:7e:51:bf:
                    a5:07:93:ef:f3:45:7f:02:c8:24:cc:73:0b:8f:94:
                    70:03:d3:fb:2e:68:30:59:d0:24:f1:95:a4:71:7f:
                    dd:da:32:e4:1e:7f:06:df:44:f1:c9:8f:96:42:6e:
                    04:ee:67:cb:6f:0e:db:d3:aa:f8:89:3a:4c:b5:78:
                    d2:d1:24:2f:a8:84:e4:ea:31:5f:b8:a2:0d:70:f3:
                    02:ca:a2:21:6a:8f:f2:0a:cd:09:ff:8a:39:15:ef:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:5C:1E:2D:38:BA:A8:B0:E7:F0:B2:1E:25:4B:28:B8:52:96:36
            X509v3 Authority Key Identifier:
                keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:99:5f:71:ed:e5:8a:72:f8:92:45:ef:ce:cc:2b:b8:a9:
         42:3a:8b:8b:d2:64:cc:f6:4e:f0:53:e0:77:ad:39:ae:9e:31:
         eb:77:07:75:33:f7:6c:e9:fb:65:e0:fb:c7:8a:10:83:75:a5:
         f6:90:b9:7a:f1:50:8f:e7:f8:42:ce:4d:e0:41:e5:7d:f3:a6:
         9e:5e:b0:f6:d6:c9:21:91:fd:cd:3f:bb:41:eb:ab:e0:9e:d9:
         b1:a5:5a:b4:9b:4b:e6:5b:dc:1c:29:ac:56:42:30:bf:5f:84:
         34:cd:07:dd:bd:b8:31:d0:3c:ea:3b:5f:38:03:45:30:de:d5:
         4a:61:04:28:e3:55:dc:b8:c2:2a:50:6f:51:89:71:30:8b:d5:
         dd:a9:80:47:6a:b0:0c:f9:c3:e8:1c:2c:49:e2:33:cf:c8:14:
         b1:40:69:55:af:67:5a:97:7d:6e:48:4f:01:1e:14:95:d6:82:
         a5:ac:bd:b8:72:3a:cf:4f:5f:7e:cf:06:54:ed:e4:15:42:98:
         fe:c7:78:fa:e9:a3:71:cc:f4:7e:49:a4:b8:69:dc:d1:52:fb:
         56:4c:77:01:e1:0b:88:76:68:05:bc:40:7a:5b:43:ac:3b:0b:
         ac:81:cd:88:39:29:3e:0b:83:93:85:f6:b3:3a:e4:cb:ee:48:
         07:e4:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:36:59 2026 by rpki-client