Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          FBNl5U8YMMOqdAKpqO5rnFQqr3eKQCoMlrro6Cc3C5g=
Subject key identifier:   58:27:72:DF:CF:ED:32:38:21:CC:E2:7A:84:EF:3D:9E:DF:89:AB:FD
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0D72
Signing time:             Wed 10 Jun 2026 18:05:33 +0000
Manifest this update:     Wed 10 Jun 2026 18:05:33 +0000
Manifest next update:     Wed 17 Jun 2026 18:05:33 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: Sr/h4Q0IRbAUZIclAAm0ovPoE0egDBIxPSMvXkpxsnc=)
                          2: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: h8pcOFfHHKAzYno1AnQaMU90IxuRx7WrkR44Fvue/Sg=)
                          3: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: O3t2hIIT2ftD/XMhSLHv6uv1WSk8u/lPKBYC3WyqprQ=)
                          4: 13D5D992979E11F08E996475C4F9AE02.roa (hash: l2h+kLqNSRAA/8kNK3Z7PjdMfsh/1wuCk20+NGCclYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Jun 10 18:05:33 2026 GMT
            Not After : Jun 17 18:05:33 2026 GMT
        Subject: CN=6a29a76d-ecd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:47:db:b6:79:1a:22:da:78:13:e5:05:c8:
                    08:33:d4:0b:bc:6a:1e:4a:29:35:c5:36:c3:d3:37:
                    05:ce:1d:59:9b:9f:be:3b:fc:08:1b:a9:a3:40:a3:
                    b2:89:bb:90:42:6c:9a:1e:f7:73:a8:1a:a6:4c:43:
                    e8:ca:28:96:c2:4f:41:46:7c:29:3b:01:3f:20:f7:
                    1b:b4:77:9b:12:62:5a:5a:4b:23:a3:11:ef:b0:1a:
                    99:8d:29:ee:18:10:2c:fa:6d:66:ed:33:f7:d5:bc:
                    90:43:d3:5a:fc:44:01:1c:3a:a1:9a:2f:8c:2f:db:
                    36:3f:a3:05:70:a5:1d:fe:5e:68:bb:99:31:71:32:
                    6e:e3:d6:f5:07:a3:66:c1:50:30:08:c5:ed:7e:72:
                    f8:d6:d3:50:78:29:5b:54:98:ea:a2:8b:13:8f:14:
                    e8:18:fa:90:e5:e7:87:7c:ce:05:ac:f8:4a:38:ec:
                    2b:0e:84:8f:96:3c:e9:55:fe:b2:b7:7d:1f:d8:3b:
                    0e:65:f1:9c:9c:41:b6:cd:fe:7a:36:3e:38:1e:20:
                    05:c2:1b:ea:44:b8:8f:32:48:e0:7e:1f:ba:eb:95:
                    94:42:5a:ba:42:67:88:41:90:d3:e2:50:f9:e6:16:
                    d0:5a:ca:fe:c8:8a:7b:f4:e5:5e:25:e9:97:04:23:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:72:DF:CF:ED:32:38:21:CC:E2:7A:84:EF:3D:9E:DF:89:AB:FD
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:60:42:6a:aa:4a:8c:2b:5d:dd:9d:3b:7b:b0:2c:ba:1a:
         04:f6:56:59:d0:d1:7f:53:36:d0:65:96:49:50:5c:97:ec:45:
         4f:d4:15:d7:32:41:98:3a:1b:cf:87:93:7a:57:d4:c5:78:00:
         75:34:8d:6d:6e:e0:1c:5f:6e:30:8c:f6:0a:b6:37:74:18:29:
         9e:e1:66:54:31:49:5a:a7:26:d9:28:d9:be:eb:72:ec:92:d4:
         f1:64:6e:20:ed:9a:a1:10:a1:2e:40:93:31:aa:23:7d:6d:97:
         02:c7:ae:c0:41:81:82:3c:5b:6e:eb:8b:2c:76:f5:7a:34:75:
         a2:d2:ab:e4:d9:c9:5e:0a:27:1d:28:c3:77:3f:93:c1:73:62:
         98:f9:c3:8a:92:32:fc:4d:83:a2:fe:4c:63:53:03:bc:bf:71:
         90:50:d2:ff:3b:25:0a:34:c4:85:1c:5a:bb:dc:47:e0:ad:c8:
         d7:6d:28:3a:f7:75:05:13:ad:fd:38:61:7d:55:a2:78:04:13:
         86:55:32:a0:df:64:28:9a:5c:32:fa:19:09:27:e9:5c:35:b2:
         ab:49:69:af:92:13:c8:0d:33:94:04:fc:3c:f6:c2:a6:84:e0:
         eb:f1:f2:e7:5c:72:74:6b:e2:22:b8:8c:c0:5d:56:c5:8a:6e:
         5d:4d:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:58:52 2026 by rpki-client