Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
File:                     NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json)
Hash identifier:          JILsEQeha9BQ6OVAfEsvR3mObDzo3JoodYzPkN6a5eU=
Subject key identifier:   BA:C8:30:33:29:7E:B0:00:28:8B:BA:06:E3:1E:1B:7B:09:81:B8:03
Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
Certificate issuer:       /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
Manifest number:          4E
Signing time:             Tue 19 May 2026 08:09:58 +0000
Manifest this update:     Tue 19 May 2026 08:09:57 +0000
Manifest next update:     Tue 26 May 2026 08:09:57 +0000
Files and hashes:         1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: 95QncjXc7WeUC92Z8yAGa18VAUqxdgC4W53zjg3kgjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
                          rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
        Validity
            Not Before: May 19 08:09:57 2026 GMT
            Not After : May 26 08:09:57 2026 GMT
        Subject: CN=6a0c1ad6-79de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:da:09:5a:5b:fd:96:88:e6:43:7a:2d:ba:
                    18:b7:5c:b9:c2:da:e6:dc:d4:3a:1e:53:8b:24:bb:
                    d8:61:7e:45:d1:f6:d9:25:a0:16:5a:de:9c:07:f6:
                    c1:a8:01:5e:86:27:d1:7d:10:0d:74:04:b4:ef:28:
                    a3:6a:47:b7:ef:e2:65:77:dc:01:30:c3:65:2f:b9:
                    56:bf:4f:2f:29:67:f9:02:79:b5:dd:4b:97:14:3f:
                    b6:fb:33:38:52:de:0b:20:05:0f:5a:83:1b:e9:5b:
                    e9:2c:b9:20:ba:dd:0b:98:d6:5c:2d:6a:0d:15:b8:
                    4e:b6:48:c3:0b:ef:1c:49:e0:fb:19:c4:82:61:42:
                    83:c3:6e:9a:38:5f:dc:54:cd:cb:d9:f8:53:7c:ab:
                    23:9d:0e:d7:ff:27:94:c8:11:c2:bb:f8:bb:a2:36:
                    7f:87:a8:cc:36:91:42:8b:95:47:ff:60:f3:d9:78:
                    99:ec:ae:e0:45:f6:f7:46:60:be:63:3b:15:a8:95:
                    e6:7d:2c:6d:57:3f:da:85:1b:ef:38:e0:4c:56:42:
                    f3:47:42:ae:64:a8:51:f5:3f:b7:cf:56:21:f6:a3:
                    26:ad:00:1d:05:8d:28:53:3e:d3:41:15:6b:ed:f2:
                    c9:2c:57:9d:4f:62:a0:e2:d5:a6:00:30:dc:61:1b:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C8:30:33:29:7E:B0:00:28:8B:BA:06:E3:1E:1B:7B:09:81:B8:03
            X509v3 Authority Key Identifier:
                keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:da:61:9e:66:7c:af:70:21:7d:d2:ae:52:02:26:e2:c5:
         0c:28:33:7f:af:aa:96:76:56:9e:f3:11:77:2e:63:3f:b6:fb:
         c0:5c:9d:a8:a4:34:47:1d:77:d9:55:8e:6f:a2:e8:da:fa:4d:
         87:e4:21:60:cd:a1:f3:09:25:6b:41:8a:f4:14:db:bb:2b:93:
         f1:c9:d6:84:a5:92:6d:10:63:13:33:f0:dc:a7:4d:34:c5:b7:
         8b:87:59:00:67:81:fc:ee:ae:f7:29:a9:7a:ab:10:c7:c5:1a:
         1b:f6:17:eb:03:de:66:f1:cc:f4:4a:8d:ab:9c:40:2f:a9:02:
         95:db:c9:5b:cc:2c:71:3b:b2:a3:93:ae:7c:ea:17:84:c1:97:
         b0:fe:1c:b0:b2:8f:95:97:75:dc:70:0e:7e:ea:09:88:61:f4:
         b1:03:0c:c0:41:2a:94:55:f2:64:72:84:b0:14:3a:bb:15:77:
         6b:93:bf:56:99:12:b3:df:0b:1f:6e:17:3d:d9:af:7b:b4:bb:
         1a:35:8e:e2:62:90:1b:fd:4e:67:c2:46:d7:e2:95:08:b2:03:
         bd:ab:56:9d:9a:41:aa:fb:b2:04:57:5e:fb:08:85:3a:0b:82:
         86:f5:b6:72:26:d9:75:49:38:9a:e9:60:f7:ba:c7:29:a3:6a:
         05:3d:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:46 2026 by rpki-client