Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
File:                     NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json)
Hash identifier:          JdJpGhGw8bEKNp25Kl4OkE2qU7ok2lCPTyRJtchZP34=
Subject key identifier:   3E:F9:AA:0A:F2:1F:BF:D6:0F:75:E4:C1:E8:6A:0E:50:65:91:D4:89
Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B
Certificate issuer:       /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
Manifest number:          0117
Signing time:             Wed 19 Aug 2026 06:34:28 +0000
Manifest this update:     Wed 19 Aug 2026 06:34:27 +0000
Manifest next update:     Wed 26 Aug 2026 06:34:27 +0000
Files and hashes:         1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: lMGSqdEyFGAR9xSCuygG1eHonxsN6y4begoP7X2Ib/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl
                          rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
        Validity
            Not Before: Aug 19 06:34:27 2026 GMT
            Not After : Aug 26 06:34:27 2026 GMT
        Subject: CN=6a854e74-411d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:bf:c5:9e:19:f3:d4:86:85:9b:0f:0b:29:
                    25:d8:25:d5:53:f6:9c:1a:1e:0a:4a:cf:92:8e:8e:
                    84:fb:88:86:4c:cc:e9:ec:39:d6:61:c1:fc:fb:cb:
                    4d:11:da:01:ba:f7:94:11:28:26:cb:70:77:c4:e2:
                    2f:b2:64:6a:bb:ec:c6:52:76:61:21:e8:21:0e:21:
                    55:bb:20:15:b0:db:fd:95:92:25:8e:0c:6e:27:69:
                    69:30:09:21:0b:da:c9:ac:4f:77:69:d5:b1:10:1a:
                    5a:4a:00:e5:43:a5:af:64:55:19:68:a2:c2:6c:df:
                    0e:1c:17:94:ce:d1:c9:02:91:12:83:97:3b:11:20:
                    39:8f:3e:15:d6:dc:d5:05:41:25:9d:6a:4b:8f:fc:
                    85:4e:1c:b8:de:cf:19:9d:f9:30:45:e4:f4:99:bc:
                    a0:5c:b6:e4:f3:bb:f4:c5:df:d0:43:90:15:bf:fb:
                    5b:e0:74:b8:20:76:73:01:25:dd:3e:3e:4b:31:ec:
                    18:3b:8d:6b:37:cc:e3:7a:24:6c:90:60:97:b1:2d:
                    fe:b8:13:54:25:3d:e1:cf:cd:cd:28:e5:73:a0:ae:
                    59:eb:ae:48:4a:12:fc:a3:ab:01:16:79:a9:a1:5b:
                    e8:76:03:c1:db:2d:a6:69:09:e4:6d:61:4d:b3:52:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F9:AA:0A:F2:1F:BF:D6:0F:75:E4:C1:E8:6A:0E:50:65:91:D4:89
            X509v3 Authority Key Identifier:
                keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bd:f1:9d:60:63:4f:6f:72:d5:07:ab:d9:ce:ee:99:70:b3:
         be:ba:a2:21:b4:63:77:fe:26:11:19:dd:bf:06:2d:01:ff:2b:
         83:0c:8a:07:62:ea:10:cd:91:c8:ba:9e:bf:13:ff:4c:c9:f7:
         b7:8d:b6:0b:0c:ef:4f:65:03:ad:3b:5b:8a:12:0a:2f:71:59:
         c5:b9:6b:8d:d0:0f:cb:f3:ce:89:be:e1:6f:bd:cf:85:3b:2b:
         53:ae:ee:67:20:90:18:8b:3d:58:0f:f1:5f:e5:da:0d:00:f6:
         12:e8:fd:76:72:d5:43:b0:8c:e0:63:ba:a5:8c:b2:fb:93:83:
         de:c2:c7:b9:65:40:6f:50:5e:a2:b8:5d:fe:0a:94:87:05:23:
         7f:ff:4f:ce:c3:6a:04:ca:52:8f:30:8d:3b:16:4f:d2:55:10:
         1f:98:ec:0e:74:92:ef:31:33:27:e6:55:8e:29:0e:b5:b9:33:
         bf:3d:00:f4:df:2f:ad:f8:45:3a:3b:ef:cb:de:fb:18:f8:7f:
         e5:1a:c9:da:df:4c:5c:b5:b2:96:94:c8:89:4b:87:6d:75:89:
         83:6d:fa:59:d4:2f:2a:fe:1e:64:bc:fe:03:6b:f7:85:63:84:
         4d:02:1e:cc:52:9b:eb:d5:fa:ba:c2:b2:7b:72:28:09:bb:04:
         e1:c2:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:35 2026 by rpki-client