Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File:                     NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier:          dA5wcqfugOHyrn5w5Edstcv8Cj/nNulzGyPs4F4Cwi4=
Subject key identifier:   3E:FB:B5:DB:EC:85:F2:E4:27:D8:2E:92:9A:5D:61:CF:03:50:5A:05
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer:       /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number:          01A1
Signing time:             Sun 05 Apr 2026 03:37:58 +0000
Manifest this update:     Sun 05 Apr 2026 03:37:57 +0000
Manifest next update:     Sun 12 Apr 2026 03:37:57 +0000
Files and hashes:         1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: Kz8bl+7eFH3/N18qVJT/1m1woYLW9B1OY+pFRUu0uS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
                          rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
        Validity
            Not Before: Apr  5 03:37:57 2026 GMT
            Not After : Apr 12 03:37:57 2026 GMT
        Subject: CN=69d1d916-71b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:b1:89:b8:18:4e:6b:aa:41:ba:c6:7b:c3:
                    24:4a:bb:87:0f:2f:8e:23:21:c0:dc:e5:b1:67:53:
                    33:3c:65:68:c4:6a:29:a1:a9:fc:69:06:b6:7d:6a:
                    11:cf:30:1c:f1:d3:eb:f9:7e:4f:10:15:39:d3:ce:
                    48:51:dd:c4:4b:20:4d:0f:27:1d:cb:be:ed:48:dd:
                    fa:f2:df:ef:f0:54:3f:02:b5:7d:ee:ea:2b:14:79:
                    f8:cf:99:d0:ca:bc:51:1f:58:4f:0e:bf:db:8d:48:
                    8c:8d:97:ec:b5:47:ed:8e:c3:78:d3:f7:de:37:0e:
                    3f:1c:05:be:82:55:94:9c:7c:35:3d:f4:bf:82:47:
                    c7:fa:0c:b8:54:ad:94:67:cd:1d:ae:9e:55:d3:69:
                    0d:84:bf:b9:bf:d1:58:56:f3:99:b9:1b:89:96:a6:
                    95:29:0c:79:66:6e:2c:44:31:ee:cf:36:2f:bc:30:
                    32:e7:1f:5a:ae:7e:b4:70:98:16:c5:40:3d:66:b8:
                    42:40:98:99:c8:f7:91:02:5e:03:f2:50:74:d6:77:
                    0a:e8:a5:15:55:83:48:61:e2:5a:50:a3:14:f7:29:
                    09:f1:d3:59:c7:b3:5b:a9:32:ac:bb:1c:4b:c7:3e:
                    9a:5f:00:3e:6a:d9:41:f9:81:13:56:33:9c:32:78:
                    45:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:B5:DB:EC:85:F2:E4:27:D8:2E:92:9A:5D:61:CF:03:50:5A:05
            X509v3 Authority Key Identifier:
                keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:57:c1:60:12:c2:a1:b4:fa:d7:a7:6e:66:2d:e1:a7:e0:ae:
         05:f5:96:7d:f5:a6:21:e4:ff:3a:53:fe:1d:b1:3a:27:4b:d2:
         f2:cf:cb:97:e9:18:b5:91:d8:92:7f:fe:77:35:0a:bd:0f:a2:
         18:17:33:2b:5d:a7:59:49:9f:73:c4:90:64:35:16:e1:89:d9:
         2e:8d:93:3f:85:f3:f1:b5:9c:83:33:dc:12:89:9e:c3:1f:4a:
         ba:b9:c9:a4:33:48:9c:58:48:f8:d7:79:b1:73:e1:d4:b6:df:
         c6:8b:34:68:10:dc:85:b9:ed:cb:fd:33:3c:ae:41:bb:aa:35:
         25:c9:1a:ee:f3:9a:3d:c1:ac:83:6b:8d:00:06:bc:f5:14:ae:
         8c:da:22:c1:71:2e:42:0e:2a:c4:6f:ee:a0:ec:2e:fa:39:8d:
         e1:46:ee:63:81:9e:86:0c:f8:69:c8:5b:ae:d9:ad:d4:2a:ab:
         84:2e:85:9a:72:b0:d5:eb:4c:b2:de:09:1f:ae:d8:5c:3f:9d:
         52:8c:8f:b2:5d:0b:3f:65:f1:22:32:00:56:6f:8f:c4:72:c0:
         2c:48:83:a2:20:e2:57:32:e1:3a:9a:7f:3f:11:83:be:5b:d4:
         03:e0:70:df:65:3f:f5:67:0a:53:39:82:7f:66:6d:ca:cf:4f:
         ac:19:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:17 2026 by rpki-client