Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
File:                     1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json)
Hash identifier:          4bGxT+OKEVaiIONqCrL15ty3n49NfjFDqX8zF/Fp/zM=
Subject key identifier:   B2:CC:EC:21:32:CF:49:A2:4E:1F:40:C1:4E:0E:17:C8:4F:68:50:53
Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
Certificate issuer:       /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
Manifest number:          21
Signing time:             Thu 03 Sep 2026 09:06:30 +0000
Manifest this update:     Thu 03 Sep 2026 09:06:30 +0000
Manifest next update:     Thu 10 Sep 2026 09:06:30 +0000
Files and hashes:         1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: 6m2dIKDZEwayuBPRI5S6NyWrD486/VRTywA25hObOhk=)
                          2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
                          rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
        Validity
            Not Before: Sep  3 09:06:30 2026 GMT
            Not After : Sep 10 09:06:30 2026 GMT
        Subject: CN=6a993896-1bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:48:5d:69:dc:88:e5:a6:26:9e:3e:90:7b:d1:
                    40:51:cf:69:b9:b9:22:bc:f0:7f:62:1e:e6:ca:99:
                    ec:02:42:10:2f:c6:65:de:7b:24:5d:9c:5a:09:8c:
                    04:2f:ee:72:b8:ca:f1:81:63:4d:7a:97:8d:23:75:
                    bb:53:38:99:33:ad:05:c1:20:f4:9f:d3:88:c0:a4:
                    33:99:11:28:13:19:3b:ca:48:c5:34:85:ad:05:1c:
                    88:f4:11:34:90:19:65:57:55:b5:cc:1c:70:44:f2:
                    ed:0a:fc:8c:80:0e:67:75:5e:61:5e:79:f7:ea:fa:
                    ae:0f:c6:03:3c:f1:24:8c:90:de:f9:98:f0:41:ac:
                    6d:3f:98:40:65:59:d3:08:50:08:83:47:8c:75:68:
                    13:4e:61:2d:7c:ad:70:05:60:ee:0e:7b:04:62:8c:
                    50:32:e7:aa:14:22:f4:bd:2c:f1:7e:f4:13:4c:5a:
                    cd:64:1d:09:c4:11:99:88:ea:fa:47:4e:2a:b4:f1:
                    60:1f:9e:33:49:9c:59:fc:e7:a3:41:91:21:c0:55:
                    02:98:f4:d5:04:ee:dc:e3:45:7d:ce:b0:b7:77:fd:
                    80:5e:34:4e:be:4d:e3:b7:c8:e7:ad:73:29:7f:20:
                    16:a8:78:b4:b0:e4:b6:11:c4:4d:06:4e:66:9e:58:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:EC:21:32:CF:49:A2:4E:1F:40:C1:4E:0E:17:C8:4F:68:50:53
            X509v3 Authority Key Identifier:
                keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:bf:a3:a2:e8:4c:26:4c:b2:4c:bd:08:cf:88:3d:f0:48:
         b6:1b:7e:c2:59:18:64:ae:56:6e:96:5e:b3:1c:42:40:53:be:
         10:d1:66:f4:c1:e0:9d:80:d5:04:c4:36:f6:21:9e:96:4f:e2:
         3c:28:56:1e:68:be:11:b4:3a:5c:7b:b1:a5:08:19:7b:55:8b:
         d2:b8:66:4c:af:92:99:4a:9a:71:8a:04:b9:7f:68:ec:53:fc:
         8e:56:71:92:ae:39:f5:e7:4c:10:eb:ed:93:7f:54:a4:d9:46:
         e8:77:b2:f6:d6:b7:4c:d1:50:64:3c:c5:e8:c4:07:e4:6d:34:
         69:69:b0:3d:ce:a4:0c:9e:03:4d:21:de:ff:b0:a3:3a:77:cb:
         c7:b1:f4:94:42:86:3c:f2:6f:35:e2:fc:06:da:e3:61:6f:45:
         84:f3:5e:18:01:37:f7:eb:09:5f:49:1c:f3:36:2d:ef:ac:d1:
         af:7c:91:b8:a2:32:12:a3:8c:26:7a:1b:2f:0a:52:9b:4c:a0:
         5a:8a:86:e0:c7:e5:10:31:2d:a6:98:74:2c:e8:59:b5:45:68:
         6b:cc:52:2e:a1:71:fd:4f:a5:a9:26:69:2d:76:cc:94:aa:ad:
         26:f9:cb:bb:3b:2a:f0:e4:8a:93:79:49:73:99:e7:92:72:f5:
         a4:2e:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:41 2026 by rpki-client