Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
File:                     NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json)
Hash identifier:          TLyOTXCjIHKlQ51Lrv6/9Cp0j2WhGzSIXPyM2A1WgoE=
Subject key identifier:   8A:81:F5:31:66:2E:DC:78:31:06:41:FA:1A:DE:B4:5D:98:56:60:13
Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
Certificate issuer:       /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
Manifest number:          026D
Signing time:             Tue 21 Jul 2026 01:57:22 +0000
Manifest this update:     Tue 21 Jul 2026 01:57:22 +0000
Manifest next update:     Tue 28 Jul 2026 01:57:22 +0000
Files and hashes:         1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: YgniQWXITe6TfMIogozJzitk25okfl+FD/Nw3fH1Q1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
        Validity
            Not Before: Jul 21 01:57:22 2026 GMT
            Not After : Jul 28 01:57:22 2026 GMT
        Subject: CN=6a5ed202-e912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:d1:0f:6f:a8:c9:1b:00:bb:08:0d:ee:a7:
                    d7:d2:fc:46:a1:5d:e5:e3:a3:d5:03:83:4d:d3:63:
                    e2:a7:a4:b3:eb:64:7f:e7:74:f7:e5:97:3d:c7:76:
                    b3:c4:9a:68:08:6b:69:56:6c:cb:92:9f:43:f2:ef:
                    fc:12:09:00:2a:79:f5:bd:f1:e3:1e:2f:9c:c4:72:
                    04:bc:d1:20:04:74:74:15:fa:92:3b:44:f7:fb:c9:
                    ab:9b:0d:89:dd:0c:ac:50:79:e5:37:c8:a3:7d:d5:
                    6e:d0:e8:cf:b5:fc:a3:58:4b:60:89:1e:0e:ba:73:
                    24:77:5d:90:e5:cd:8b:f2:0a:33:d0:7f:0d:25:d6:
                    35:a5:a2:27:00:d7:11:00:08:85:67:29:8c:b2:23:
                    ce:52:7e:7d:48:a3:d6:83:dd:bb:a2:4d:57:8e:bd:
                    48:2c:42:60:ba:c5:fb:93:19:de:85:f9:a5:43:93:
                    0a:37:55:22:15:25:69:f8:9c:6d:d2:06:b0:4c:78:
                    96:0c:e8:2a:55:68:ab:81:6e:78:92:cd:31:2f:c3:
                    e9:df:38:df:ad:02:43:eb:dd:c7:35:72:66:48:62:
                    22:c8:fa:92:26:9b:bf:dd:e3:90:17:8d:52:d0:19:
                    9f:00:fd:53:74:89:80:ac:fa:59:07:97:6c:45:cf:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:81:F5:31:66:2E:DC:78:31:06:41:FA:1A:DE:B4:5D:98:56:60:13
            X509v3 Authority Key Identifier:
                keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:47:49:60:ed:21:e4:81:a0:e8:2e:51:cf:da:e1:aa:45:
         b2:29:a3:92:99:fe:b8:8e:20:74:a4:e8:f1:f5:7d:04:a0:3a:
         f4:5c:53:d9:a8:88:5e:0e:56:9b:df:cc:b2:5d:d2:d3:5f:15:
         2c:31:99:67:8d:65:8e:3b:e8:1a:35:69:72:98:2b:e6:23:95:
         de:4f:38:e5:90:e0:5c:a1:2c:f0:6e:d9:31:5d:81:c0:a1:56:
         ec:9a:c3:be:d3:48:97:a3:4e:03:9f:b2:6e:5f:22:c3:64:8b:
         c6:98:9e:24:fb:e9:ce:2a:70:27:e1:e7:4d:1e:52:c6:a1:c4:
         08:1e:12:f9:0a:8d:43:9c:86:44:9e:92:97:30:78:1f:6a:ed:
         3f:84:c6:30:ec:12:64:84:09:5e:a1:35:67:96:e5:8c:7d:54:
         3a:ba:3b:46:be:4c:b2:96:df:09:11:81:73:a8:57:82:1d:9b:
         19:b7:2b:1a:17:18:e4:82:d5:2a:45:95:26:e3:72:51:04:a3:
         31:5c:68:1d:45:d3:5b:fe:9d:af:4a:28:b0:c8:8f:9f:fd:86:
         ad:76:85:9e:ab:7f:b4:dc:c0:f5:66:ad:12:8d:22:7b:29:c0:
         80:d4:9d:d7:fe:d3:43:73:16:c4:ee:24:5d:4a:e5:1b:fb:cd:
         3c:f4:35:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5
RjY1NzA1MzYwHhcNMjYwNzIxMDE1NzIyWhcNMjYwNzI4MDE1NzIyWjAYMRYwFAYD
VQQDEw02YTVlZDIwMi1lOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGXRD2+oyRsAuwgN7qfX0vxGoV3l46PVA4NN02Pip6Sz62R/53T35Zc9x3az
xJpoCGtpVmzLkp9D8u/8EgkAKnn1vfHjHi+cxHIEvNEgBHR0FfqSO0T3+8mrmw2J
3QysUHnlN8ijfdVu0OjPtfyjWEtgiR4OunMkd12Q5c2L8goz0H8NJdY1paInANcR
AAiFZymMsiPOUn59SKPWg927ok1Xjr1ILEJgusX7kxnehfmlQ5MKN1UiFSVp+Jxt
0gawTHiWDOgqVWirgW54ks0xL8Pp3zjfrQJD693HNXJmSGIiyPqSJpu/3eOQF41S
0BmfAP1TdImArPpZB5dsRc/rlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqB9TFm
Ltx4MQZB+hretF2YVmATMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG
QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC
VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez
aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmnVHSWDtIeSBoOguUc/a4apFsimjkpn+uI4gdKTo8fV9BKA69FxT2aiIXg5W
m9/Msl3S018VLDGZZ41ljjvoGjVpcpgr5iOV3k845ZDgXKEs8G7ZMV2BwKFW7JrD
vtNIl6NOA5+ybl8iw2SLxpieJPvpzipwJ+HnTR5SxqHECB4S+QqNQ5yGRJ6SlzB4
H2rtP4TGMOwSZIQJXqE1Z5bljH1UOro7Rr5MspbfCRGBc6hXgh2bGbcrGhcY5ILV
KkWVJuNyUQSjMVxoHUXTW/6dr0oosMiPn/2GrXaFnqt/tNzA9WatEo0ieynAgNSd
1/7TQ3MWxO4kXUrlG/vNPPQ1+A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:16:56 2026 by rpki-client