Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
File:                     NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json)
Hash identifier:          ei2R4dA8YHyPPoU6evcHm45r8oLGypWONfbfhQCK6/8=
Subject key identifier:   DD:CB:DE:C8:B7:4D:7B:F6:66:01:A9:AA:89:1B:D6:8F:73:C6:19:9D
Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Certificate issuer:       /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
Manifest number:          30
Signing time:             Mon 27 Jul 2026 11:01:39 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:39 +0000
Manifest next update:     Mon 03 Aug 2026 11:01:39 +0000
Files and hashes:         1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: HCP88ZuKMMXtFCO2niRgYzISYy5Ym5BzvZbzVbhyI2w=)
                          2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
                          rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
        Validity
            Not Before: Jul 27 11:01:39 2026 GMT
            Not After : Aug  3 11:01:39 2026 GMT
        Subject: CN=6a673a93-7603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:06:0e:49:2d:ea:9b:28:63:d4:ab:cb:9f:
                    76:27:98:c9:62:74:22:f0:89:ab:ea:54:f1:bd:48:
                    d9:a9:5b:5c:d5:cb:cd:99:59:67:bf:5a:0f:af:f9:
                    98:3f:a5:d7:a3:d5:54:ac:30:e3:36:ab:7e:ca:db:
                    da:2f:1c:e6:34:cd:e9:f7:75:2a:a3:35:3a:15:ff:
                    33:e2:29:da:ee:b5:cc:27:48:29:4a:be:42:cc:b8:
                    0c:d3:da:0a:10:01:a3:46:9d:bf:2e:5b:a6:55:9e:
                    c5:9a:18:7f:45:36:fc:f0:b2:a5:ce:05:d3:e3:e5:
                    b2:50:e5:aa:73:47:64:2e:87:bc:40:00:b2:53:36:
                    81:fa:d2:20:61:3c:26:14:0d:4e:be:5e:05:64:ce:
                    eb:e4:8b:c4:fb:c1:4a:a2:ed:be:90:64:f3:ef:a5:
                    69:9d:ca:7e:11:da:e6:ca:b4:03:f7:74:23:4b:ce:
                    74:59:27:e4:f3:b7:63:45:53:1a:b5:cc:a7:16:e2:
                    9f:5d:c9:83:c5:b3:b4:d6:4b:10:f7:92:6a:fa:45:
                    e3:01:c4:7f:0a:d2:a7:32:af:ba:d6:d2:82:92:94:
                    91:a4:98:1a:28:90:ba:f8:c4:45:ff:64:a3:30:31:
                    a0:da:35:b4:89:1b:37:35:75:d2:23:58:72:1c:6d:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CB:DE:C8:B7:4D:7B:F6:66:01:A9:AA:89:1B:D6:8F:73:C6:19:9D
            X509v3 Authority Key Identifier:
                keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:05:c0:9f:10:9a:6a:db:56:73:0a:a8:69:90:f9:21:2f:
         ad:0a:b5:05:e1:68:c2:74:39:c4:d0:b9:8b:0b:37:c5:b2:97:
         ac:1b:d0:78:02:e6:d8:2d:35:9f:63:6b:07:44:87:9b:6e:0e:
         b6:35:16:81:a6:3d:5a:0f:88:3a:36:24:86:6a:87:dd:15:5a:
         fe:a5:f7:9c:62:0a:3f:60:e5:a5:6a:d8:dc:b7:90:d7:f2:ce:
         c7:82:36:09:e7:1b:23:6b:3d:72:97:29:aa:9c:cb:4a:37:6f:
         f5:4e:f3:50:03:a7:75:51:b8:59:2b:cc:5f:4c:b5:fa:a8:c5:
         72:6e:1e:91:4b:cd:a4:c3:92:4d:65:a3:9e:89:e4:8b:4d:38:
         d7:95:d8:f2:00:13:91:ee:47:60:12:49:54:42:49:f5:2c:50:
         9c:e6:3d:e1:ca:a3:91:3d:17:ea:2f:aa:c2:39:42:82:46:09:
         7e:62:14:81:8f:58:34:f4:9e:ce:74:a9:3f:c1:17:71:60:52:
         01:f9:33:f3:20:5c:77:80:a3:e6:ff:63:02:66:b8:e2:f3:b5:
         aa:48:be:39:72:7a:cd:dd:36:de:9a:82:12:b1:dc:a9:27:de:
         ef:ce:35:27:a8:cc:e3:ff:65:f6:8a:15:4c:7a:f8:cc:bb:bb:
         e7:7b:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:36:45 2026 by rpki-client