Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File:                     nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier:          n7Ng+lbm+MRP7JggnsLXEgBLKEhxnXssmxBixadWj2E=
Subject key identifier:   ED:FB:3D:A7:23:B6:12:A6:3D:73:C8:FC:57:48:9B:21:1F:15:0E:52
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer:       /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number:          37
Signing time:             Fri 17 Apr 2026 08:17:15 +0000
Manifest this update:     Fri 17 Apr 2026 08:17:14 +0000
Manifest next update:     Fri 24 Apr 2026 08:17:14 +0000
Files and hashes:         1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: 29KQ0bUVAHVZlVIUAjTR4Dkb0EHIwbAJBWHkABpyAsA=)
                          2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
        Validity
            Not Before: Apr 17 08:17:14 2026 GMT
            Not After : Apr 24 08:17:14 2026 GMT
        Subject: CN=69e1ec8b-1d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:52:16:2b:27:4a:5d:af:9b:14:db:9f:2f:
                    ff:c7:80:1f:94:c9:6b:7b:bc:f5:e1:62:0b:4c:71:
                    12:7f:d9:b3:f9:c8:90:b7:02:ab:aa:5b:d2:a2:de:
                    b0:82:d0:da:27:d9:b2:31:d8:9a:99:9e:3b:d7:c4:
                    d1:41:50:b1:f6:10:50:f6:67:eb:06:26:25:d9:b7:
                    49:5b:89:f2:9b:0d:eb:56:02:38:39:65:b4:44:c7:
                    14:52:d5:8a:95:85:37:60:0d:34:10:2c:a9:39:a4:
                    c5:67:80:14:f4:34:f7:61:12:4e:13:3b:18:da:b9:
                    77:41:4a:1f:eb:15:0c:d7:c0:18:f6:a0:6d:15:e5:
                    38:38:fa:d2:44:3a:62:78:c4:b5:5a:ad:21:43:1a:
                    ed:34:fb:07:d6:93:95:a0:14:86:72:36:32:20:90:
                    20:79:54:70:f2:c0:fa:c2:0c:be:b4:de:6e:4b:c6:
                    b5:38:02:17:d2:26:70:20:6d:06:6d:19:bf:eb:63:
                    84:6e:38:e9:d8:6a:c9:0f:57:dc:e6:29:14:cc:d8:
                    01:5a:0a:fb:da:a3:57:c8:b5:36:0a:59:30:0d:a3:
                    0b:90:6b:72:1e:4f:72:b2:8c:c3:97:e8:53:ef:9d:
                    f2:dd:5b:1e:5d:0f:29:49:46:fb:eb:20:48:aa:23:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FB:3D:A7:23:B6:12:A6:3D:73:C8:FC:57:48:9B:21:1F:15:0E:52
            X509v3 Authority Key Identifier:
                keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:88:b6:c0:7a:8c:80:85:b0:01:a9:9a:45:55:5d:a5:1d:
         21:0b:99:d1:e0:ef:bf:7d:ca:95:cd:79:ec:73:bc:26:7d:61:
         9b:71:b4:8c:d3:d7:b7:49:c9:07:74:80:55:be:c9:a3:c9:6f:
         29:4e:12:9b:94:0b:9c:a7:d4:28:f1:0f:ce:b0:dd:25:0a:d9:
         da:b2:56:db:d1:13:e3:93:39:4d:29:df:36:55:e6:e1:85:93:
         75:28:e7:6c:db:44:5e:46:26:67:c4:55:91:ba:9e:cc:c3:31:
         f2:d1:d2:fe:60:fd:12:83:73:2b:03:d4:4c:28:ba:9a:81:57:
         94:10:92:a9:5f:37:f9:42:b9:e7:d2:d0:7b:ab:24:44:ce:27:
         75:44:cb:77:3b:3b:b4:dd:b5:80:ea:92:d1:cb:ab:b1:ed:11:
         8a:78:f3:ce:70:31:b2:00:92:8a:33:f9:0e:e0:91:16:17:64:
         ec:5f:5d:67:4e:11:7b:55:b8:40:63:37:af:de:ce:af:ae:3e:
         c8:64:73:d3:ad:c8:e7:ed:86:40:91:77:c9:b0:c9:a1:b0:3d:
         d3:67:1a:de:37:7c:8f:78:cd:95:18:02:4c:da:df:10:6c:c4:
         73:eb:12:7c:be:a7:ff:3f:73:5c:28:e6:92:f3:2a:5a:46:cb:
         c1:47:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:43 2026 by rpki-client