Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
File:                     NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json)
Hash identifier:          8EENoK/X1UqGdtUC97lJSeyQqo2v7mFw4yeQdFUrYiQ=
Subject key identifier:   92:09:A8:49:28:E2:BC:A8:63:14:0F:51:DF:BA:75:D9:BE:90:E9:0F
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Certificate issuer:       /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial:       0B50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
Manifest number:          0B46
Signing time:             Tue 18 Aug 2026 19:30:42 +0000
Manifest this update:     Tue 18 Aug 2026 19:30:42 +0000
Manifest next update:     Tue 25 Aug 2026 19:30:42 +0000
Files and hashes:         1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: 9NkaLIDFCekEKAPKgUY2aTCbkJVuTlhBP9bgIxUlr04=)
                          2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: Dk339imNFOip5Ywpt/0EfK35LYjSFKAUXhrmv8n0CpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
                          rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2896 (0xb50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
        Validity
            Not Before: Aug 18 19:30:42 2026 GMT
            Not After : Aug 25 19:30:42 2026 GMT
        Subject: CN=6a84b2e2-c62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:a3:62:b8:0c:3e:d3:58:54:53:93:a2:9d:
                    5a:07:aa:3c:d6:a9:58:ab:5e:3d:37:36:b9:69:7e:
                    db:d6:d8:d2:fb:3b:7b:c2:5c:06:45:ad:1e:cd:99:
                    13:92:b2:8b:4b:b8:84:0b:dc:cf:e1:6a:d3:0d:82:
                    57:01:5c:d9:cc:9c:7b:bb:1e:1d:d4:41:ca:48:41:
                    60:26:fd:dd:d7:cb:f4:95:88:0b:fb:02:bd:3f:2d:
                    63:a8:89:a3:e8:89:b8:97:b0:ec:8d:ce:9c:84:d6:
                    e9:ac:2a:7b:6a:81:e4:85:da:21:65:87:98:a3:3d:
                    d9:3b:2b:07:d1:60:c2:78:78:af:6b:91:7b:9e:80:
                    8a:48:a5:51:e6:0d:ca:ab:a0:65:24:22:4d:12:3b:
                    86:14:bd:40:1e:7e:78:c6:ff:91:d3:35:0b:37:3d:
                    96:aa:0f:31:91:b7:98:22:a0:c4:7c:e7:5f:95:a8:
                    8a:1a:64:8e:5f:15:10:26:42:05:13:f6:1a:5a:de:
                    5a:53:51:b4:1b:11:40:77:96:47:eb:8d:bb:3c:3f:
                    25:8f:8f:b1:aa:35:fe:76:35:79:32:cf:14:b8:2f:
                    32:4d:d4:db:1f:21:9e:92:dd:79:8f:78:fa:26:09:
                    61:36:5f:b5:fd:6c:64:18:4f:48:b8:50:2c:ca:2f:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:09:A8:49:28:E2:BC:A8:63:14:0F:51:DF:BA:75:D9:BE:90:E9:0F
            X509v3 Authority Key Identifier:
                keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c5:0c:73:73:40:c1:b0:37:03:d7:4c:a4:00:23:06:07:82:
         93:aa:c4:76:ed:42:8e:48:5c:50:da:d4:4a:11:98:02:47:e8:
         cf:fd:49:63:25:36:e1:4f:dd:21:9d:5e:f6:12:fb:03:9e:94:
         62:a4:34:b0:15:16:f4:26:f8:53:7b:93:c9:53:9b:cc:ac:45:
         0c:f9:6e:48:c1:ea:f6:40:12:1f:c0:9f:86:e3:94:0b:14:aa:
         eb:29:1f:99:55:5d:93:a9:30:ad:e4:38:39:45:f9:b7:7b:02:
         6e:01:af:ec:87:6b:f1:e8:7c:c4:6f:f4:f4:b6:db:ef:fb:5b:
         e4:24:6e:ef:83:5f:74:c8:4d:47:7d:ef:66:7b:a0:88:57:f3:
         1b:ec:c7:bc:ca:03:68:f4:02:1c:fe:ba:af:e7:dc:85:f1:9e:
         6b:da:99:2f:e1:0c:40:00:83:b1:89:df:cf:5c:24:d4:29:2b:
         8e:e9:b3:dd:f6:63:9b:eb:36:49:e9:56:05:34:d8:f0:fc:1a:
         f5:17:a6:4b:24:71:b7:40:18:3c:19:34:62:54:4d:83:40:6a:
         c7:72:3d:0d:66:4b:7c:2a:d6:7c:d7:e4:ea:5e:8c:b6:3b:42:
         15:17:15:40:1b:75:d6:f8:b7:5a:df:0b:6b:38:df:e4:70:2d:
         5a:f6:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:39 2026 by rpki-client