Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
File:                     NGwg84nbntxqG_L0AxqaFwO-h-E.mft (raw, json)
Hash identifier:          yqurbZuZAFzfFz/GoiEeZrMRIKr6BH3nt19tV+8sAQ8=
Subject key identifier:   C9:72:88:68:8F:AA:34:90:BF:F2:F3:C7:6B:29:DC:B4:28:48:AF:44
Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1
Certificate issuer:       /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
Manifest number:          72
Signing time:             Tue 19 May 2026 07:58:11 +0000
Manifest this update:     Tue 19 May 2026 07:58:10 +0000
Manifest next update:     Tue 26 May 2026 07:58:10 +0000
Files and hashes:         1: NGwg84nbntxqG_L0AxqaFwO-h-E.crl (hash: UfmApBetqOsFmIpi7+WEEUQ6eaQlKCh+xcFb8YIqBmU=)
                          2: 802A01BE437D11F1AA74D0BFC1833773.roa (hash: zwGzXcWdxzBbO4129cWzndmAx1Ox+bcZUsPSbq4hjBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl
                          rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 07:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1
        Validity
            Not Before: May 19 07:58:10 2026 GMT
            Not After : May 26 07:58:10 2026 GMT
        Subject: CN=6a0c1813-f5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:c3:52:7d:75:02:43:c2:51:c2:92:db:32:
                    66:33:a6:a7:43:25:96:f1:bc:27:ae:69:1a:99:97:
                    63:d8:70:1a:5a:e6:21:10:76:5f:56:ad:7e:be:7b:
                    74:ea:f8:0e:6c:1e:a7:b6:0b:37:a7:54:3d:d5:e9:
                    89:0b:17:04:ca:26:7d:f5:64:92:cb:0f:29:73:e5:
                    f5:11:38:c7:b3:59:15:11:c6:8d:5e:3c:18:c7:a4:
                    a5:19:86:be:e6:db:2b:c3:2d:c1:18:d1:68:99:b0:
                    f3:4f:e2:d7:f3:68:e2:44:ef:b2:84:e6:76:bd:e9:
                    ca:6b:fb:dd:5b:b4:c9:de:94:6d:72:a4:37:3e:eb:
                    cc:c8:4d:1d:b1:44:ea:e5:5c:9a:77:f8:62:3f:9b:
                    7f:dd:6f:56:75:24:43:d2:50:16:e3:33:1a:a1:6a:
                    aa:50:4a:38:98:dc:4d:e9:73:1b:cf:66:e7:9f:c6:
                    0b:91:ba:8e:93:6d:40:7a:6b:32:a0:2a:44:bb:6e:
                    8f:bc:96:7c:32:28:2a:57:d4:af:de:f4:9e:c3:b7:
                    a8:2b:9a:56:2d:fa:c1:11:61:c1:8c:fa:c1:d6:02:
                    e7:3a:1a:75:a6:70:e9:19:38:00:5c:06:a7:92:38:
                    f8:e8:d8:dd:3c:c9:d2:7a:94:fd:a4:f3:55:93:0e:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:88:68:8F:AA:34:90:BF:F2:F3:C7:6B:29:DC:B4:28:48:AF:44
            X509v3 Authority Key Identifier:
                keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:42:a4:2d:ac:08:37:03:7a:8b:fe:cf:40:f8:00:6e:4f:
         fc:94:c2:9c:ba:24:da:6b:9d:a5:16:b0:6e:2e:ec:95:b7:1a:
         e2:b1:27:0b:a2:94:2a:31:b0:a8:74:38:f9:3d:35:11:1b:50:
         08:a6:64:e5:cc:70:63:d2:10:c8:bf:26:05:54:0a:59:84:aa:
         ff:44:52:92:ab:80:31:db:62:f4:07:d5:b5:ee:72:26:7c:5e:
         f1:a4:e2:e4:11:a5:32:91:9b:6d:2d:43:dd:c4:ba:dd:43:35:
         e0:da:7d:e3:20:dd:c6:2f:36:9e:7b:37:74:c3:df:24:56:ff:
         b4:f2:be:56:5a:8e:71:a7:f5:cb:57:3b:ec:6b:95:c7:c3:37:
         ab:86:dd:a6:ff:c1:e3:29:0a:7b:93:9a:9a:07:b7:c3:96:fa:
         10:49:47:f7:b0:94:67:ee:d0:ae:60:c6:bd:53:4f:dd:83:0d:
         d3:f6:e1:53:ca:6f:41:7c:00:9f:05:ce:c3:54:75:32:30:53:
         9a:a6:51:c8:f3:0e:68:69:66:2e:10:ad:0a:73:89:9d:68:2a:
         d6:d0:22:9b:ae:8a:5c:af:3e:b6:93:cd:3b:22:8c:d7:5c:13:
         c5:44:c6:55:bf:bb:3e:5d:e8:0f:7b:f8:7a:98:15:cc:8b:dc:
         66:5d:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:03 2026 by rpki-client