Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File:                     NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier:          1PxNWnYu5rb3RZHfb9NliKDxgSRu3vnQuh1hSoHGL9E=
Subject key identifier:   80:7D:8C:A4:B7:71:24:CE:D7:24:47:00:C1:AA:2E:2B:A9:53:87:3B
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer:       /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number:          3C
Signing time:             Tue 02 Jun 2026 16:22:25 +0000
Manifest this update:     Tue 02 Jun 2026 16:22:24 +0000
Manifest next update:     Tue 09 Jun 2026 16:22:24 +0000
Files and hashes:         1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: Hg5ELFQJERV6FkeCnW/5S9u1f8TvVUcNgXEcl/xa2to=)
                          2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: BbN77RAFkHR083nGQLeFhiO7qnoHJJbIlHS/xJ/7E5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
        Validity
            Not Before: Jun  2 16:22:24 2026 GMT
            Not After : Jun  9 16:22:24 2026 GMT
        Subject: CN=6a1f0341-0777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:2c:c4:c9:66:ba:71:b3:21:24:5c:9e:2f:
                    7b:5a:2a:6c:52:6b:4b:8f:6c:d9:69:53:76:14:58:
                    5b:4d:26:2f:77:d1:df:11:28:93:1a:d1:18:96:e8:
                    0d:9a:1f:ad:f1:fa:52:4c:f8:10:6f:b1:82:95:2a:
                    84:45:4a:a4:41:96:85:ad:a7:10:5f:64:bc:14:31:
                    4f:ab:2e:5a:06:cb:92:59:8f:23:be:40:10:04:67:
                    c0:a6:93:52:4b:db:15:86:69:fa:8a:fc:ec:9b:ff:
                    49:64:d5:f6:3e:74:39:d5:e0:d9:cd:7d:34:ea:fd:
                    5e:e2:77:f9:68:b1:5d:5f:13:4d:6b:b6:d8:8d:e8:
                    02:27:1b:b0:b8:56:13:01:5b:ae:28:26:f7:d8:63:
                    a9:78:46:18:f0:6a:c6:30:35:9c:80:0e:ee:78:d7:
                    86:7e:67:64:d8:ef:6f:30:7a:05:e7:59:45:18:21:
                    93:00:16:ce:4d:1f:3d:01:e8:44:36:b0:5c:14:80:
                    b8:ca:aa:13:97:1d:63:de:74:41:d6:12:f7:db:3f:
                    9a:fc:fc:cb:9f:2b:cd:4f:06:24:22:d9:6e:39:d3:
                    7f:b2:4f:ad:39:70:4b:08:c4:14:9d:d5:f5:79:96:
                    8b:ad:ec:55:e8:c7:33:73:72:5b:b4:94:c2:7a:96:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7D:8C:A4:B7:71:24:CE:D7:24:47:00:C1:AA:2E:2B:A9:53:87:3B
            X509v3 Authority Key Identifier:
                keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:67:9e:f1:33:7b:1d:39:30:bd:2c:73:44:95:dc:60:8d:
         8e:d8:a8:1c:16:6b:d4:4c:08:10:3e:a7:73:4d:74:c4:61:b7:
         bd:5c:e3:5d:82:a5:66:fe:58:d3:48:d5:7c:d2:1b:e0:1b:5e:
         12:ff:0b:da:33:85:0f:fc:d3:ec:33:d8:3b:fd:47:ad:7e:fa:
         f6:5f:0c:0c:62:1e:2e:79:23:53:df:d9:ca:2b:ee:b6:f0:98:
         da:a3:be:a2:e5:5e:a6:c6:1a:fa:da:eb:09:85:03:99:d5:9f:
         fd:5d:e4:9e:06:23:ca:20:42:eb:5e:9a:d8:b4:ad:55:52:89:
         67:98:fa:33:2e:cc:d3:95:14:df:de:b5:3d:15:80:7d:d9:f1:
         dd:4d:e7:78:e9:11:65:15:a9:d2:41:6e:fb:f8:d4:a5:bf:86:
         ed:c5:86:88:ea:6a:f2:31:57:fd:da:03:c0:63:8b:43:cd:eb:
         7a:fd:9d:15:e2:3d:ef:5b:92:a0:1f:e0:9d:4d:f9:fb:aa:7f:
         11:b5:b3:e2:88:33:45:56:c1:84:61:d8:71:b1:a8:39:15:a7:
         aa:7e:af:d2:ba:38:06:a5:bc:a4:0e:8d:1d:37:4c:b5:6e:aa:
         85:cf:e2:a6:5e:da:8e:a1:23:08:88:80:a5:d0:b8:c1:cf:c3:
         4d:53:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:05 2026 by rpki-client