Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
File:                     nxMMOdAwdvSok0-jNJXO2TfiMKs.mft (raw, json)
Hash identifier:          c2p7X2enKynC2c6chLS7MqsU6WbaRF2dI6UrH0mYPdI=
Subject key identifier:   EC:E1:DC:DE:CB:76:20:BD:80:E5:05:D4:B1:0B:A5:69:4F:C7:31:0B
Authority key identifier: 9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB
Certificate issuer:       /CN=A91430D6/serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
Manifest number:          8E
Signing time:             Sun 05 Apr 2026 06:56:21 +0000
Manifest this update:     Sun 05 Apr 2026 06:56:21 +0000
Manifest next update:     Sun 12 Apr 2026 06:56:21 +0000
Files and hashes:         1: nxMMOdAwdvSok0-jNJXO2TfiMKs.crl (hash: sjoovAv0yb6su9EyZB8pfaJFcRDu2iz3OIpL4wM/0PU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl
                          rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91430D6, serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB
        Validity
            Not Before: Apr  5 06:56:21 2026 GMT
            Not After : Apr 12 06:56:21 2026 GMT
        Subject: CN=69d20795-5371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:89:70:29:09:43:e3:d5:cb:9f:e9:97:ac:
                    be:bd:4a:9f:21:74:a5:d4:9f:a7:a7:87:68:1f:32:
                    08:97:ae:8a:3d:e7:02:53:09:fb:12:5c:be:e5:2c:
                    b3:89:b7:e6:c6:cf:1c:fe:f5:f1:84:c8:07:99:21:
                    7f:5b:c2:b6:14:93:33:af:60:17:cb:bc:8a:fc:e9:
                    cd:51:0d:71:41:99:67:b0:26:cc:51:61:ea:3e:b3:
                    d2:ee:7e:75:a2:e6:80:65:89:52:95:e6:93:93:80:
                    f8:fc:c6:a0:2e:56:5a:17:02:27:ea:f4:4f:04:88:
                    bd:8e:23:0d:fa:7c:24:78:09:0b:d0:a0:29:15:fe:
                    b6:1b:ee:36:d7:21:1c:00:d3:64:b3:53:97:44:0c:
                    0e:76:60:04:8c:c3:d3:11:b1:24:cc:73:91:d3:8f:
                    62:ed:28:28:dd:0f:46:55:a5:a4:b2:10:d8:b9:44:
                    6a:91:09:86:ce:b7:fc:5c:83:3a:0f:99:e0:c7:fb:
                    3a:5e:f2:4e:93:69:45:cd:17:74:a2:dc:fe:06:db:
                    eb:4d:10:20:6b:a6:2f:ad:9e:79:4d:d8:47:78:fd:
                    d2:5d:0b:db:68:f0:a3:77:8a:13:43:15:65:37:b6:
                    90:d6:1b:4a:6d:38:ea:64:be:cc:2a:49:e2:06:81:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E1:DC:DE:CB:76:20:BD:80:E5:05:D4:B1:0B:A5:69:4F:C7:31:0B
            X509v3 Authority Key Identifier:
                keyid:9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:99:8c:27:de:01:58:18:57:34:bf:e9:08:85:c1:df:29:25:
         db:44:b7:8f:f2:f6:e2:cc:7c:df:97:f2:75:46:34:53:4f:d2:
         db:4e:d5:cd:ed:6b:6e:db:a8:ed:78:7d:9b:67:d8:4c:bc:05:
         42:76:1c:df:60:58:67:31:c3:17:2b:a7:84:2a:2a:87:c9:63:
         70:a9:0b:d4:be:82:b0:f7:cf:28:74:ae:4b:8b:a7:09:12:39:
         73:62:0a:f2:84:f6:bd:46:e2:b7:5f:7c:81:01:65:9e:59:7f:
         c7:35:30:44:d5:be:1b:f1:28:ae:7d:a3:7f:18:8e:a0:ff:d4:
         fb:5e:16:96:15:a7:7d:c9:29:d6:b7:04:5b:aa:e2:8e:13:d1:
         25:93:db:44:fd:37:57:52:97:d9:fb:51:e4:4c:41:c4:59:e7:
         b1:68:5a:93:54:79:20:84:af:e0:85:37:b7:3a:54:0f:cd:fc:
         6e:b3:9e:30:db:0d:f4:64:27:97:a3:de:08:8c:20:f0:49:6c:
         e3:60:e3:a8:7e:16:be:85:65:a8:98:23:b7:63:8b:73:be:d3:
         51:02:23:27:27:ba:a7:72:39:e0:8f:5e:12:e4:25:d1:c1:08:
         f3:84:62:01:e1:18:9d:33:fe:5c:37:f1:c8:f3:56:ca:25:a2:
         96:b8:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:08 2026 by rpki-client