Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
File:                     NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json)
Hash identifier:          WOqaBRjMhCKHAHHkRZEVRTPwfVuz7Rvn5QGVf7Rca2s=
Subject key identifier:   C9:A0:C3:0C:8E:F2:6E:F2:33:F6:71:5E:19:73:C8:9C:5A:6E:C1:C6
Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29
Certificate issuer:       /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
Manifest number:          353B
Signing time:             Wed 20 May 2026 15:08:45 +0000
Manifest this update:     Wed 20 May 2026 15:08:44 +0000
Manifest next update:     Wed 27 May 2026 15:08:44 +0000
Files and hashes:         1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: zc6yi2paBzcjDW9KSMxAd40GbS/CIdSN3oQ6VNFxXjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl
                          rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929
        Validity
            Not Before: May 20 15:08:44 2026 GMT
            Not After : May 27 15:08:44 2026 GMT
        Subject: CN=6a0dce7c-1444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:24:7b:9d:4e:0b:c6:7b:c2:21:12:6c:6f:
                    cc:d7:29:aa:9f:cb:a1:44:11:12:71:aa:91:a7:9a:
                    fe:55:96:93:76:6a:3e:2b:89:35:df:b5:5b:1b:c4:
                    6a:10:79:05:da:89:64:73:f3:13:61:b6:f4:c5:33:
                    be:dc:3e:80:15:03:4c:2e:68:b6:0b:41:07:05:69:
                    04:86:3f:e7:d3:dd:ed:a0:80:91:ff:64:f6:2b:10:
                    34:37:ee:8e:4c:53:90:42:aa:a6:db:3e:74:c0:7c:
                    61:76:46:80:a4:ef:ab:f0:e0:1d:09:43:58:7d:69:
                    9f:4f:c9:52:f7:e5:6c:fe:93:ff:eb:85:79:a4:b8:
                    55:44:e4:7e:2f:72:55:78:b5:0a:59:b9:6c:36:aa:
                    06:4a:80:a5:cc:d5:1e:32:43:28:b7:6a:a4:df:d4:
                    f5:70:a3:eb:1b:e8:91:8a:4a:c8:cc:52:52:1f:b1:
                    2e:6b:1f:97:33:48:30:a3:1d:c2:5a:e1:6a:04:0c:
                    94:16:72:72:c6:af:87:38:ed:b0:20:d0:4a:f1:7c:
                    82:ca:0e:6c:65:13:46:65:76:8f:b6:5e:57:5e:a6:
                    fc:59:41:a1:bb:2f:42:6f:0f:e2:73:f9:06:2c:72:
                    b9:34:c7:ca:60:07:7d:85:27:94:26:54:11:ec:6e:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:C3:0C:8E:F2:6E:F2:33:F6:71:5E:19:73:C8:9C:5A:6E:C1:C6
            X509v3 Authority Key Identifier:
                keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:1c:30:7b:2d:e1:f6:ad:fd:04:23:c1:c4:9a:63:2f:0b:
         5f:89:6b:d0:1d:01:85:e1:72:c5:cd:09:67:69:48:fb:3c:e9:
         a9:35:6a:08:ab:7f:c6:f9:03:a1:1c:15:a9:4c:fa:2e:4c:df:
         95:eb:d1:fd:60:e0:78:4b:42:6c:43:dd:74:7d:43:72:4c:39:
         3d:4d:5d:86:b4:8f:6f:f4:32:a6:c2:c2:18:57:af:f8:c1:ed:
         af:a2:8e:03:c9:86:bb:b0:47:47:5f:5d:4f:d5:57:f9:b4:46:
         b7:2f:fd:c8:e7:ac:5f:9f:e5:eb:55:03:96:37:ef:35:98:a8:
         4e:21:f7:5b:f2:eb:d9:0a:96:1f:d9:4e:35:82:cd:61:41:0b:
         8d:c4:9d:5d:6e:78:1b:26:2e:21:d5:e8:09:21:0a:27:b1:29:
         ed:36:af:8d:45:4f:ba:e2:c0:a3:27:bf:93:61:ca:90:13:7c:
         e9:54:80:43:b9:5d:1b:a8:44:4a:04:36:f6:0a:39:22:8c:3c:
         4e:97:63:c6:ce:23:04:5e:3c:8f:50:5b:7c:bd:40:1c:9f:9d:
         97:4e:a5:70:1e:d2:8f:f7:54:c0:4d:38:4b:e0:bf:1d:05:a1:
         53:0e:85:b2:7d:c7:ba:a7:41:ff:8e:32:50:45:26:ca:18:2e:
         ab:2a:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:30 2026 by rpki-client