Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
File:                     nb0ycj1x0bhWzIRJBDf78NpVJWo.mft (raw, json)
Hash identifier:          nx1Le4UQEfnqCF/jKIOrnPjYTYZPgjVl/PAL775Pwu4=
Subject key identifier:   DC:18:F7:6F:34:A9:93:99:72:2C:72:EE:6D:FA:E0:98:A9:43:1D:6A
Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A
Certificate issuer:       /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
Certificate serial:       100B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
Manifest number:          1002
Signing time:             Mon 22 Jun 2026 17:26:10 +0000
Manifest this update:     Mon 22 Jun 2026 17:26:10 +0000
Manifest next update:     Mon 29 Jun 2026 17:26:10 +0000
Files and hashes:         1: nb0ycj1x0bhWzIRJBDf78NpVJWo.crl (hash: LKSAswAmdwqHG5XCSLkOhctmCaDYZpWo5bd5LLiSCpI=)
                          2: B0DA9FC46FDD11E9BC194664C4F9AE02.roa (hash: DqcO1uKyGorzFQae1aCUq8/bsyuYfHY7JCuuxkGqdBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl
                          rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4107 (0x100b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
        Validity
            Not Before: Jun 22 17:26:10 2026 GMT
            Not After : Jun 29 17:26:10 2026 GMT
        Subject: CN=6a397032-f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:5c:2a:dc:ed:a1:e2:72:ca:0a:e1:9f:62:
                    b1:2c:aa:2a:fb:ba:09:94:e0:95:9f:03:c4:48:f1:
                    31:c0:87:f6:65:b1:f9:a8:23:a0:4e:a5:bc:30:e5:
                    7f:30:c5:c7:ca:53:f5:c4:ea:98:d1:74:f2:51:d9:
                    80:5f:2b:00:cc:32:c4:79:a9:2b:7e:fb:7f:11:40:
                    88:46:72:5e:1e:ee:3a:ec:ec:92:e9:59:f9:d6:98:
                    dd:73:cd:90:b0:8b:06:4e:a8:7d:2d:2a:54:ef:c6:
                    3a:eb:91:4d:0e:48:82:43:13:c8:c7:40:cf:f5:2a:
                    a3:7b:93:c4:9c:b0:9e:95:2c:4d:9e:f0:af:90:66:
                    ee:30:78:a4:10:b2:11:d7:a6:16:32:0c:05:b7:a5:
                    38:e7:67:64:d5:b1:b4:af:a5:a5:dc:f4:85:46:37:
                    2b:20:b8:bc:86:70:80:69:ef:97:d6:14:96:62:8b:
                    2c:df:c9:7c:c7:09:2a:99:e7:68:78:83:93:3a:98:
                    e1:bb:a2:ed:06:f7:64:9d:24:00:7e:19:aa:7f:99:
                    41:f8:b1:f6:ff:ba:66:83:14:f7:26:4f:08:c8:92:
                    c7:ec:7c:59:3d:3f:6b:d1:e3:9c:0a:0f:e2:ce:4e:
                    2e:98:ef:cd:f2:0c:52:ab:3b:98:53:c7:27:7e:b0:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:F7:6F:34:A9:93:99:72:2C:72:EE:6D:FA:E0:98:A9:43:1D:6A
            X509v3 Authority Key Identifier:
                keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:af:03:48:26:6b:73:f7:26:cf:7c:62:70:bb:c7:30:54:
         76:69:10:0f:1b:bc:30:e3:7b:02:15:0e:95:74:e6:7a:bf:ed:
         e2:da:57:50:a7:8a:a6:5d:15:a8:da:69:c5:7e:7e:51:f7:a6:
         15:bc:d6:e0:7f:40:33:ac:d5:61:88:d0:78:a2:32:a5:0b:e8:
         ba:b5:4f:d4:3d:2b:83:b9:6b:43:99:2f:67:79:31:52:c4:e6:
         bb:63:81:a4:da:a0:a3:88:a5:e8:9b:90:2c:7f:57:7a:a4:06:
         aa:3f:ae:0d:58:8c:e0:a5:b9:ea:7d:3b:d6:fc:08:30:46:6c:
         3d:b0:68:d2:7c:71:cf:d3:0b:15:8a:fa:80:b5:7c:59:d9:8e:
         a6:b4:ad:99:aa:1f:e0:e5:b9:6f:34:f4:61:9a:0d:57:17:13:
         04:28:a6:ae:7c:6c:eb:4e:c6:2e:b3:4a:4b:42:ce:40:c6:85:
         86:c7:47:47:ea:ba:53:c8:40:69:4f:be:08:32:d1:6c:b5:3c:
         49:58:31:65:81:f2:b5:11:c3:24:07:ff:ef:9c:5f:6c:e1:80:
         5f:53:8c:9f:de:a5:5a:30:c3:58:e9:00:53:88:84:a7:28:87:
         2d:29:1e:cf:80:e1:78:59:9d:03:0d:71:b7:d8:ca:e3:ec:38:
         75:03:04:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:38 2026 by rpki-client