Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File:                     NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier:          0NqtI9g8zCENQo5XgJduC/MRHJTTtrIMOeUMlC9Ei5U=
Subject key identifier:   60:ED:F0:C3:93:51:58:7F:20:BF:5C:4C:D6:85:8B:32:5C:FA:9F:DA
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer:       /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial:       064A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number:          0640
Signing time:             Mon 22 Jun 2026 22:47:45 +0000
Manifest this update:     Mon 22 Jun 2026 22:47:45 +0000
Manifest next update:     Mon 29 Jun 2026 22:47:45 +0000
Files and hashes:         1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: p1bJPTOVzV1Q8uRS1cyMdvT1g8BatCNNcSwYjFmbXxA=)
                          2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: DljMvLKa4sQ9wA9+ruYYv4Wx13hc9+MtmACdvX5LCjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
                          rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
        Validity
            Not Before: Jun 22 22:47:45 2026 GMT
            Not After : Jun 29 22:47:45 2026 GMT
        Subject: CN=6a39bb91-fa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:9b:d4:46:19:f5:98:8d:3d:d9:2a:39:8d:
                    12:b3:91:e9:0f:eb:f2:23:dd:2f:57:7a:3b:ab:fd:
                    0b:4c:b3:12:bc:c5:61:95:99:20:5d:ad:ab:d7:40:
                    f1:7f:6e:34:3b:0f:bf:44:93:7a:55:8e:43:b9:e9:
                    dd:d9:6a:77:83:52:4f:af:cf:41:bb:ee:eb:13:1f:
                    9b:04:82:4d:2e:72:bb:a7:60:e6:e1:a3:1c:dc:01:
                    6e:db:6b:ad:2e:a8:b1:46:c7:72:a7:4b:61:68:a1:
                    ac:e3:14:3a:1a:e6:b4:e9:a3:73:ee:ca:78:18:07:
                    c0:66:08:be:1e:39:fe:d2:04:42:06:cd:c0:1a:bd:
                    29:ab:b9:8a:d1:56:70:3a:59:a9:c7:83:7b:0c:69:
                    7b:33:c3:d3:a7:87:fd:23:b4:e3:38:64:1b:ae:5d:
                    ba:82:74:3b:15:e0:7b:d3:fe:2e:24:bd:59:6c:3d:
                    e4:51:6b:a3:36:d9:99:49:21:37:ff:c4:e7:59:6b:
                    9e:40:07:b1:24:41:85:40:76:ab:db:cb:5f:7e:75:
                    f8:60:6f:46:6b:df:42:78:12:78:0a:b6:7d:ad:3c:
                    e7:49:c4:2e:c6:bf:25:28:98:32:31:d5:f2:4f:83:
                    bf:ba:1a:58:0f:9d:88:f0:32:7c:ad:fb:e7:6c:f1:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:F0:C3:93:51:58:7F:20:BF:5C:4C:D6:85:8B:32:5C:FA:9F:DA
            X509v3 Authority Key Identifier:
                keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:52:8a:3a:8b:b7:b1:ef:93:cd:71:21:ee:8f:6b:0a:c3:a4:
         ad:b0:69:fd:fe:9d:24:b7:c2:fe:4f:f2:d1:92:9a:7b:fc:df:
         95:34:52:75:4a:5c:ca:a7:c0:62:d9:7e:93:48:cf:78:05:2a:
         0b:15:df:8a:1f:e1:20:b0:03:be:94:e4:86:20:5f:15:2d:8b:
         bb:76:40:ba:95:5a:c7:f3:e9:0a:df:2d:cf:eb:4b:a4:de:f5:
         38:83:3a:ff:9d:f8:52:11:5a:15:29:f5:ab:86:47:c7:53:0f:
         17:9b:d8:0b:de:cc:75:e3:d8:30:41:f9:73:5b:53:3a:e2:74:
         40:03:5e:93:bb:6e:42:6e:3a:05:1e:9d:c9:c7:0f:2a:f2:7b:
         31:7a:b6:e8:70:a4:72:e7:07:34:d9:a5:27:83:85:6d:f1:7f:
         e6:99:c8:19:3b:86:75:cd:10:dd:91:ee:a2:fd:7a:4a:04:f1:
         b9:0c:df:73:3b:23:88:be:b9:ff:75:76:ad:0e:7a:b5:4a:9c:
         dd:2b:43:1d:71:30:54:61:69:1c:05:8c:d1:92:69:77:fd:e2:
         8a:d3:0d:f4:63:7c:b1:a1:ea:bb:c1:1a:b1:d1:79:c5:1d:2c:
         b3:6c:25:33:1a:e5:d2:c5:48:29:11:cc:bf:55:5e:e3:5b:5b:
         28:25:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:15 2026 by rpki-client