Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
File:                     NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json)
Hash identifier:          tRPnq/e6arQVuXRBzxRhXIWGj35cH2dQa/wEMGub264=
Subject key identifier:   1C:A9:E2:F2:3F:52:37:85:4F:EA:20:57:AA:E1:F8:37:DA:DB:C5:E4
Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D
Certificate issuer:       /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D
Certificate serial:       05EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
Manifest number:          05E5
Signing time:             Wed 20 May 2026 23:02:24 +0000
Manifest this update:     Wed 20 May 2026 23:02:24 +0000
Manifest next update:     Wed 27 May 2026 23:02:24 +0000
Files and hashes:         1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: V2DLODjzfSDrK+2LNobAbS/uHYLUDZm0+nOesfJsHro=)
                          2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: fOkqVihCu1L5Ia3iPQWWnGFlmmkL41U8TtXyOcg3l2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl
                          rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D
        Validity
            Not Before: May 20 23:02:24 2026 GMT
            Not After : May 27 23:02:24 2026 GMT
        Subject: CN=6a0e3d80-beb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:03:db:15:82:6e:f9:6c:ce:a6:42:8d:12:
                    29:c6:f8:b0:7c:28:9e:6c:1d:93:7b:f8:dc:96:64:
                    a0:12:6d:07:78:f1:8e:b2:10:7b:af:d1:c6:2d:ea:
                    45:5f:a0:ee:a5:e7:97:4b:da:d6:64:70:93:d2:93:
                    7e:b2:8b:7f:53:d9:89:4f:b3:00:10:88:23:f4:5e:
                    9e:3f:8b:f6:f1:6f:c4:13:9f:ac:fe:27:50:65:f5:
                    69:01:36:1f:0b:c4:36:42:33:94:f7:63:95:cc:90:
                    e9:d5:4e:78:e2:5a:31:e4:cd:21:16:a1:52:71:65:
                    9c:38:38:05:a2:02:30:8f:14:b1:5d:6f:c8:33:6b:
                    b6:30:ed:7c:21:ee:ac:36:ff:40:be:e1:2b:ea:71:
                    11:75:f1:b2:fe:40:e9:b3:43:70:10:99:0d:5a:04:
                    22:bc:dc:5b:bb:90:79:50:72:fe:c7:33:8e:c5:7d:
                    dc:b0:fa:8e:00:fc:ef:80:dd:d3:1c:de:4b:33:42:
                    db:43:07:30:8e:b9:03:48:c0:1f:00:90:bd:0b:31:
                    ae:6f:14:f4:de:2a:de:bc:cc:e9:a4:40:45:ab:b1:
                    1c:65:f9:15:38:46:dd:33:e5:48:e5:95:3c:43:64:
                    e7:70:73:61:09:04:95:49:57:92:c5:e1:a5:a6:66:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:E2:F2:3F:52:37:85:4F:EA:20:57:AA:E1:F8:37:DA:DB:C5:E4
            X509v3 Authority Key Identifier:
                keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:39:9d:26:59:d2:56:80:56:8b:50:9a:f8:ef:eb:d1:cf:fc:
         4b:b7:ba:6a:95:98:12:71:56:b0:95:37:b0:7f:e3:74:6f:d2:
         93:63:ba:36:df:ec:67:5c:a7:92:30:ec:d1:f1:6b:1f:60:a0:
         dd:b3:97:5f:3b:f0:1f:77:db:eb:e7:4e:8f:44:3b:8f:e0:d2:
         89:b1:29:3a:d9:36:0d:c4:ee:8a:bb:52:93:41:6f:41:29:35:
         e2:d6:c1:e4:28:bb:32:bb:74:a1:54:36:55:e9:70:b8:3e:37:
         7c:3f:f2:44:c1:ec:3a:3b:09:fb:7b:92:5f:42:c6:c5:df:13:
         35:e1:c8:ba:fb:60:e4:54:e4:7f:a1:90:6a:5d:61:9e:3d:8a:
         9d:50:d8:14:4a:f5:65:40:37:6d:6d:74:7b:da:81:8b:e6:72:
         0c:53:e4:3c:af:8e:8d:8f:2c:ac:fe:2b:70:c2:86:84:1c:9b:
         85:df:ea:cd:5f:f2:d0:b3:41:d4:a4:cf:19:8f:fa:4f:ed:d8:
         76:e2:23:c9:7d:bb:2b:a9:2f:ee:7e:57:dc:0e:13:83:cd:71:
         50:0b:5e:56:85:c4:b6:8c:78:70:c2:7f:bf:7f:9f:eb:d6:c9:
         6e:05:d8:36:c4:c5:90:ff:7e:b4:b0:91:97:85:31:3a:63:ae:
         a5:53:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:07 2026 by rpki-client