Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File:                     NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier:          c2n1us8ei1jjO5zQv/P9tS/rnhSwhfPaohJ9rxs5/q8=
Subject key identifier:   F9:F0:0D:0C:EF:44:D3:3C:9E:8B:F2:F3:B0:0C:79:7D:4C:DA:44:20
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer:       /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number:          012C
Signing time:             Sun 05 Jul 2026 06:20:23 +0000
Manifest this update:     Sun 05 Jul 2026 06:20:23 +0000
Manifest next update:     Sun 12 Jul 2026 06:20:23 +0000
Files and hashes:         1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: kk4iKDgKVWD2Jhb6HDAQhdRo2XWESXBczjO0Ja+/vic=)
                          2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
                          rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
        Validity
            Not Before: Jul  5 06:20:23 2026 GMT
            Not After : Jul 12 06:20:23 2026 GMT
        Subject: CN=6a49f7a7-9322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:b2:31:50:e0:9a:af:08:7d:f6:3d:8d:04:
                    99:0a:ed:d5:18:a7:5b:9c:e4:f8:d6:a9:1f:19:bc:
                    6a:27:0b:76:83:34:ef:84:90:0b:2e:3a:06:eb:ab:
                    58:cc:3d:4a:16:a7:75:d4:8c:09:6f:30:2d:0e:ba:
                    c0:8b:d1:9c:47:12:d9:7a:a6:27:84:4e:c4:3c:01:
                    8e:7e:90:d0:46:2e:92:f4:4e:77:86:58:f3:d5:89:
                    a6:7c:35:6d:60:53:2d:79:24:72:3c:53:cf:6e:bd:
                    1c:3f:94:83:39:35:76:71:09:07:6c:e3:89:a7:ed:
                    9a:06:60:70:f3:64:d4:38:46:4b:70:34:6c:4e:15:
                    c1:2c:23:9f:f8:e5:4e:ad:bd:63:ce:98:41:6f:d8:
                    c1:92:74:a0:4c:b3:89:84:59:d4:2b:ec:67:41:62:
                    c2:6c:27:5b:06:14:a0:b6:4d:2a:9a:06:0a:8b:4a:
                    f2:b0:77:8e:6c:4a:0b:ab:37:30:09:41:bd:92:5d:
                    20:3b:a1:55:9d:32:f8:38:9f:ff:ec:39:09:63:5d:
                    5b:97:4c:c9:ac:f0:82:78:2e:6f:26:75:39:2a:11:
                    cf:ff:20:80:1f:9d:29:02:53:82:89:b7:aa:d9:c0:
                    20:1b:09:ed:cf:2c:9a:2a:38:29:1b:d2:a4:52:3c:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:0D:0C:EF:44:D3:3C:9E:8B:F2:F3:B0:0C:79:7D:4C:DA:44:20
            X509v3 Authority Key Identifier:
                keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:4e:6e:21:f6:24:b6:45:6d:6b:b7:75:79:89:93:91:c6:
         f3:ff:6d:12:1a:a5:1d:8b:1a:f9:a3:d4:cd:8d:bf:59:23:77:
         bb:d9:d3:67:e6:4c:e4:a2:b7:05:0b:d3:0b:1c:02:da:e8:11:
         cf:48:6e:c2:7f:90:33:7d:09:ca:e4:e7:00:cb:d8:7d:2b:54:
         9b:51:ab:d5:96:f3:b1:7f:5f:f0:b1:7b:99:b5:fa:b2:88:a2:
         55:ba:53:45:f1:47:05:3e:33:91:ff:61:90:cb:4c:c7:a6:8d:
         81:51:5d:0d:67:7b:fb:d5:ee:fc:4f:8e:53:9d:2f:39:57:93:
         a3:28:2f:8e:6b:a4:83:c4:ca:cb:f8:db:47:22:e6:5c:63:7c:
         bb:cf:c9:07:de:9a:b1:46:39:3c:0c:59:fd:79:c6:50:6f:f4:
         73:ab:10:5c:7e:b2:68:8a:bd:56:1f:18:27:55:ae:ac:89:36:
         82:d6:2a:77:69:70:3f:db:64:3d:62:d7:77:cf:a7:a5:5b:fa:
         28:9d:20:e6:1c:9f:64:fb:aa:3c:bf:e5:69:e0:c9:57:7b:62:
         68:b0:fe:c9:80:01:62:18:aa:d2:c1:02:12:4c:ca:07:06:d2:
         86:ad:02:51:29:50:55:76:7d:b8:a3:54:5e:36:8f:08:6a:5c:
         f3:ef:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:41:05 2026 by rpki-client