Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File:                     nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier:          kKceol4DPl/SJ7pdrn63c6D2k51UdZHivTcEwPWp+e4=
Subject key identifier:   7A:40:2B:22:9B:63:31:A2:3A:82:8B:26:F2:C1:EF:9E:DE:19:B1:62
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer:       /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number:          4E
Signing time:             Mon 01 Jun 2026 09:06:32 +0000
Manifest this update:     Mon 01 Jun 2026 09:06:31 +0000
Manifest next update:     Mon 08 Jun 2026 09:06:31 +0000
Files and hashes:         1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: JsLfUdcFSPmtVFa1vqOuFCUbfXu47tITJf1F9vtd/gc=)
                          2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
        Validity
            Not Before: Jun  1 09:06:31 2026 GMT
            Not After : Jun  8 09:06:31 2026 GMT
        Subject: CN=6a1d4b98-b0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:63:23:1c:2f:da:7a:b0:0a:1c:1e:17:c7:
                    95:75:e0:42:6d:59:9e:dd:e7:84:79:e3:6d:1a:b4:
                    62:5f:81:09:43:94:64:10:32:15:8d:b4:9f:cc:6b:
                    5b:14:a9:04:ae:45:88:2b:ba:ea:bb:08:4d:31:78:
                    ab:8d:e2:8e:77:67:7f:99:5f:92:21:f5:88:fb:7b:
                    be:c0:3a:03:07:fe:3d:b9:63:96:fa:dc:d5:ec:bd:
                    bd:dd:63:4c:65:01:3a:f7:da:b3:a0:06:e0:99:72:
                    43:47:04:65:72:70:03:6c:0a:cd:8a:8e:56:00:7b:
                    0e:28:c1:f5:39:5d:6c:bc:d5:a3:22:b0:0d:55:41:
                    57:c7:aa:8e:9f:9d:b5:b9:a3:e2:99:a7:54:4d:22:
                    ed:10:f2:dd:ca:1a:b1:0f:b6:fc:cc:d1:e8:d7:30:
                    45:3e:a1:08:33:3d:d6:19:8a:76:cb:eb:9a:0c:6f:
                    8b:fe:02:de:b0:90:bd:f2:b2:78:9b:04:88:be:73:
                    a6:99:9a:76:9d:39:c5:cb:c6:97:46:2f:79:72:91:
                    5b:b0:26:b5:ad:65:07:09:53:82:73:e9:ac:ab:cd:
                    7b:f1:41:cf:a7:de:3e:03:2b:5a:63:01:54:7e:25:
                    b0:57:d6:fa:dc:1c:d7:8b:5e:91:aa:12:55:59:39:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:2B:22:9B:63:31:A2:3A:82:8B:26:F2:C1:EF:9E:DE:19:B1:62
            X509v3 Authority Key Identifier:
                keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:b8:ae:a7:33:75:c3:41:f2:db:81:b4:cf:c7:fe:4c:4e:
         2b:91:57:e9:ef:51:4a:aa:b1:b9:a0:7a:47:3c:87:da:3c:30:
         e7:d7:6d:0d:cc:7d:10:6b:3a:dc:6d:d1:50:1f:89:cb:05:cf:
         de:01:49:28:44:b3:33:ce:e6:5c:e8:11:92:77:d3:d7:a5:4b:
         78:79:85:77:93:62:2c:94:a2:02:a9:32:98:f8:19:ff:98:26:
         57:6d:58:b4:38:63:5a:f9:d1:8e:68:5a:76:9b:72:23:33:8b:
         6a:af:dd:ce:bf:84:e3:cb:11:2e:be:d9:a7:82:93:68:55:0e:
         8e:bf:73:a4:2a:80:2b:6f:f5:18:aa:9c:9c:b3:7d:6a:1e:ea:
         91:61:b9:34:69:b9:77:fa:f9:3e:bc:e3:bb:ee:62:50:75:8e:
         c6:e5:b6:e0:c6:fe:0b:aa:03:ea:00:7e:95:47:d6:56:79:ab:
         73:6c:55:b0:b7:32:37:fe:60:fb:d8:57:eb:3b:7f:09:84:b1:
         66:96:45:de:1a:f3:cf:3a:ec:70:04:cf:b8:6a:58:57:28:8b:
         e7:ed:10:1a:c8:c1:8c:04:30:9b:6d:e3:ef:47:44:73:d6:bb:
         b6:ce:f1:d9:ca:bf:de:50:02:5f:6f:c9:87:27:30:fa:ee:bd:
         f2:bb:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:57 2026 by rpki-client