Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File:                     NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier:          /jiiRbGX8CdjS3PlY9Y8p3+KmdF5bf/wm2RhZRzQ89s=
Subject key identifier:   13:9A:1B:28:EE:E7:B8:D2:B6:A4:DD:5E:5F:4F:28:A3:64:09:B0:B8
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer:       /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial:       0B9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number:          1314
Signing time:             Sat 04 Apr 2026 18:53:07 +0000
Manifest this update:     Sat 04 Apr 2026 18:53:06 +0000
Manifest next update:     Sat 11 Apr 2026 18:53:06 +0000
Files and hashes:         1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: zknc04k1anW16wNmOVZdPGRHXJYLlCdUG6I4+7mLYlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
        Validity
            Not Before: Apr  4 18:53:06 2026 GMT
            Not After : Apr 11 18:53:06 2026 GMT
        Subject: CN=69d15e13-caec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:09:d4:93:6c:cf:ab:0a:24:2c:e3:96:1c:
                    d6:91:16:09:cf:93:61:14:cc:84:92:4b:4f:35:66:
                    59:88:22:6f:39:b9:73:f4:ea:21:a9:04:55:6b:c5:
                    0b:b9:de:f9:91:a8:ef:ef:bc:c8:b3:56:38:c0:a2:
                    bb:a2:f7:77:22:0c:e3:4b:ef:1f:bd:54:10:67:ea:
                    d7:d8:7a:37:5d:e8:d8:b7:aa:02:2b:cc:d1:d9:05:
                    44:0c:2d:2d:4b:06:72:dc:3a:02:6d:96:19:4e:e5:
                    25:a9:ea:84:33:a2:1a:a9:54:aa:c6:8b:f5:81:c9:
                    99:80:f7:68:b1:fb:b5:88:3b:4f:15:64:30:25:45:
                    b0:ed:c0:e7:d0:e6:b5:0b:dd:17:35:83:cb:b9:12:
                    33:84:6a:ea:19:c4:c9:de:cd:f6:22:23:fd:1f:8e:
                    25:b8:0e:71:6c:27:0e:d3:0d:23:ab:f5:13:d1:1a:
                    d8:67:48:af:bf:e7:9d:0e:2f:3b:fd:27:bd:a5:4a:
                    69:8b:05:6f:2d:c1:a7:e4:b3:88:23:d6:a1:91:67:
                    8e:61:df:b5:53:38:3e:7a:87:b3:d2:2c:3e:a9:a7:
                    75:25:94:cc:31:36:89:46:76:52:db:4a:8a:2d:3c:
                    ed:99:48:e0:36:2f:22:91:4f:c3:16:d2:8e:dd:a1:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:1B:28:EE:E7:B8:D2:B6:A4:DD:5E:5F:4F:28:A3:64:09:B0:B8
            X509v3 Authority Key Identifier:
                keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:b2:b3:68:23:4b:9b:af:d6:09:02:3d:57:9b:e7:25:a1:
         de:b9:79:65:18:d3:d4:1e:9d:03:99:a2:80:99:8e:be:a6:f8:
         78:72:98:1e:63:ee:37:57:5a:ce:07:5d:f3:a3:68:85:9a:5f:
         66:ab:cd:69:9c:42:60:ce:bb:d3:de:f7:bc:40:5d:ba:0b:fc:
         19:6f:d9:d2:05:f2:0f:76:12:33:53:72:f9:26:5b:fe:76:90:
         45:ee:73:48:e1:12:2e:67:0f:9f:ab:0a:55:0d:a2:23:fc:e4:
         9b:39:38:e1:c1:74:a5:ef:51:7e:a1:49:8c:c6:e1:e4:11:39:
         ca:3f:ee:a5:4f:1e:80:e7:ef:12:f3:65:1e:44:d2:73:48:4c:
         cd:41:cb:ce:5c:3f:f2:b9:4d:29:cc:34:59:cf:ae:0a:2a:6a:
         99:04:30:20:7d:18:ac:9d:03:0f:e1:b5:e1:46:02:ba:05:2b:
         21:23:c5:76:14:ca:a3:99:76:24:ff:ed:9e:c5:a6:f4:cf:54:
         45:33:78:47:0e:05:a8:5d:e1:ef:9b:7e:2f:51:b1:ce:18:f1:
         4c:4c:95:36:e4:4e:cb:d5:17:f2:f4:38:6e:23:a8:90:2b:79:
         43:27:5c:c6:41:20:e5:68:67:24:f3:cf:8e:d1:99:27:fa:20:
         4f:4e:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:59 2026 by rpki-client