Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File:                     nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier:          Qhqao7LVC49vb3gqM6IWUlZBvsVWUhCrJiXhBX0i2+Y=
Subject key identifier:   43:84:06:93:E7:89:5D:5E:7D:94:D4:B1:C3:19:15:EF:1B:8F:C6:15
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer:       /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number:          103F
Signing time:             Wed 20 May 2026 17:29:52 +0000
Manifest this update:     Wed 20 May 2026 17:29:51 +0000
Manifest next update:     Wed 27 May 2026 17:29:51 +0000
Files and hashes:         1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: SbvOfbzHncaf8QEiOelsFioxJUpcTJr0KHT7YfuhD7E=)
                          2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
                          rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
        Validity
            Not Before: May 20 17:29:51 2026 GMT
            Not After : May 27 17:29:51 2026 GMT
        Subject: CN=6a0def8f-9b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:ec:3d:d8:0a:9e:84:c2:86:40:a9:f2:74:
                    39:fc:e4:14:a2:97:1c:cb:a4:ab:30:b5:31:2d:38:
                    98:db:b6:c0:b3:55:79:2f:7a:6e:55:68:99:c6:fc:
                    8e:82:2f:3d:69:b7:97:86:e2:05:bb:36:c6:26:d6:
                    86:95:2a:e7:d0:c7:a9:bf:c8:33:4e:0e:09:6e:1f:
                    16:ce:98:84:8e:6d:0e:23:cf:aa:7a:da:dc:28:08:
                    7c:b3:80:e0:ee:54:62:93:ee:19:70:6e:6d:16:6c:
                    15:b0:ee:1d:c7:31:88:9a:9c:55:02:be:09:50:ca:
                    58:08:83:2f:51:4e:ae:4b:ff:73:7f:a4:47:8d:aa:
                    f4:dd:bd:61:c2:6f:ac:25:d1:15:f6:33:cd:bd:d9:
                    85:72:6f:87:13:b3:4e:54:2d:9a:14:60:6f:7e:3d:
                    21:27:6f:04:db:aa:a4:13:ea:1a:5b:f2:07:58:86:
                    a6:fd:71:8f:f4:06:67:1f:3e:ad:8f:d2:0e:82:77:
                    54:53:e5:ec:1b:f4:de:9b:3f:de:4a:16:f1:88:0d:
                    a4:ce:63:24:a5:ea:e6:db:41:ce:9c:ef:bc:11:cf:
                    2c:c8:5b:5c:95:4a:47:e9:57:2e:39:c2:1e:7c:89:
                    21:a7:0f:57:2e:c5:97:5b:61:d7:80:56:09:0c:c1:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:06:93:E7:89:5D:5E:7D:94:D4:B1:C3:19:15:EF:1B:8F:C6:15
            X509v3 Authority Key Identifier:
                keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:24:ea:36:ba:9e:8a:9e:c1:6b:fd:ab:3c:56:7e:e0:57:
         3e:e3:de:3d:17:fa:44:14:65:03:76:9b:cb:f9:54:6e:f1:f0:
         ff:f9:7b:d6:61:6b:49:d6:2e:98:8d:f6:c4:e8:55:5d:9d:23:
         e9:91:5f:66:93:8a:9f:63:79:c7:7f:64:0e:03:a0:e6:ed:ce:
         0d:f6:83:a5:99:f8:33:f4:cf:fe:59:df:e9:95:e0:ac:b6:93:
         c3:bc:7c:01:ae:34:e8:14:9b:e6:a8:54:5d:af:06:78:48:0e:
         5e:a1:63:4f:f8:9a:92:a4:da:2e:d3:75:5d:da:3d:49:7d:33:
         93:55:fe:6b:d7:c3:5c:98:9d:a6:0f:fe:1a:a9:3e:2b:a4:6a:
         9f:0c:59:ad:59:da:64:57:dc:b1:bd:8a:ce:1d:2b:59:94:e4:
         42:10:ab:50:ee:49:2f:6f:0b:3e:6e:9b:b4:2f:ab:6e:cd:34:
         66:45:5d:8f:d3:26:7b:85:20:3f:e9:5d:9b:8f:42:7f:53:42:
         aa:f4:ac:9c:26:31:76:0e:6a:a1:96:22:6b:56:16:fa:2c:26:
         38:0c:f1:bd:2f:5b:91:41:c1:b2:46:4d:08:20:74:c5:6b:4c:
         d3:4d:9f:f8:69:65:9d:28:94:9b:5f:1c:8c:c4:b0:c5:dd:fe:
         ad:38:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:34 2026 by rpki-client