Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
File:                     nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json)
Hash identifier:          3p2YBNnCGwoyHjPHGFPcD2qmJWUmq/u8/jYb0h5Ycjo=
Subject key identifier:   7A:81:4A:AC:D7:98:B1:B3:63:AF:FF:3F:D2:81:00:DA:C3:1C:69:C2
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Certificate issuer:       /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
Manifest number:          50
Signing time:             Wed 19 Aug 2026 09:04:41 +0000
Manifest this update:     Wed 19 Aug 2026 09:04:41 +0000
Manifest next update:     Wed 26 Aug 2026 09:04:41 +0000
Files and hashes:         1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: 9jUFHtp2dzkdafibkJZa/W8GNK6pwuiSjgeWdj21RE4=)
                          2: B62F5378265811F1B0D864DEA4833773.roa (hash: 7B8gmV6iHverE08GlcTlaq7wwspFdqgeT6UL4102FlM=)
                          3: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: Dxatxl0qTUfSTcpFhvzbVVvCfebatpASoJvF3ceeN4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
        Validity
            Not Before: Aug 19 09:04:41 2026 GMT
            Not After : Aug 26 09:04:41 2026 GMT
        Subject: CN=6a8571a9-fe62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:67:2b:a6:b8:71:8d:da:1c:e8:d6:dd:8a:
                    fb:c9:93:cd:66:67:25:fc:09:cd:f0:e6:38:d2:ef:
                    cb:cf:42:5e:e1:8b:8b:d5:23:20:11:3d:e3:18:9a:
                    f7:3e:dc:d9:3a:62:99:4d:4c:72:0a:b6:5a:51:71:
                    6a:8a:93:ad:d8:4d:ee:3a:a6:e6:9d:b6:84:06:80:
                    c8:a2:15:db:88:36:74:ce:34:60:0b:09:40:a6:ab:
                    38:db:e8:34:93:50:a1:1a:0d:2a:97:62:68:ca:cc:
                    3a:72:cd:83:9e:32:5c:e5:f0:6a:59:22:fb:90:2f:
                    5c:d1:07:b0:bc:31:4b:49:43:62:b2:ef:d4:41:07:
                    2a:20:f9:b6:d8:fd:a9:07:43:ea:5e:d6:d2:a0:1a:
                    9f:bc:37:23:27:02:1f:f2:bc:6c:0c:e9:69:bb:fd:
                    cb:a4:18:6d:3c:1a:58:d9:26:00:64:b1:a7:6e:05:
                    32:ea:98:e6:35:aa:96:14:9c:b9:cb:fe:62:73:a2:
                    15:5e:30:a5:21:5b:22:46:3c:38:cd:ad:b8:64:00:
                    99:18:d2:c6:f5:6d:79:8f:61:cd:61:42:fd:14:64:
                    0a:53:27:49:b8:ce:60:5c:b7:6b:0e:bc:f5:0a:62:
                    40:ad:8c:e8:37:5b:4a:85:c8:d4:07:eb:dd:e1:c9:
                    c8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:81:4A:AC:D7:98:B1:B3:63:AF:FF:3F:D2:81:00:DA:C3:1C:69:C2
            X509v3 Authority Key Identifier:
                keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:5e:b4:e6:57:5c:ed:11:b4:af:39:45:c9:e7:0c:88:a4:
         f3:fc:43:e9:10:06:24:c3:c0:a4:e7:93:c3:fd:1f:33:6f:a0:
         f9:ec:4f:e0:bd:04:f2:e3:b2:0e:c8:39:a7:5a:95:b9:55:b0:
         5c:12:9f:04:40:c0:ae:ef:f4:56:33:c8:3d:67:dd:32:3b:46:
         26:65:b4:a6:1c:14:10:f7:9c:d7:1e:85:13:a1:4d:48:09:4e:
         41:6e:41:8a:54:a2:c7:8e:b6:29:15:7f:e6:5e:d6:8c:4a:d6:
         10:13:fc:d4:bb:2d:ed:85:26:5a:b5:bc:a1:18:da:b7:5d:f4:
         c9:c3:07:de:57:e2:17:99:a7:54:3b:3a:c3:9f:48:82:71:44:
         66:55:4f:c5:07:cd:91:1e:ab:3c:c4:ac:b5:56:4f:99:ac:6f:
         71:e0:22:29:61:9e:1b:ee:32:93:97:10:84:a7:49:4a:c7:0a:
         80:38:d4:3a:93:fa:b6:44:8b:c6:20:6f:0d:d7:27:af:ee:ea:
         4e:71:0c:de:52:77:49:a9:9e:76:8b:b8:a9:c2:48:5a:9f:c0:
         91:26:43:ad:63:2b:ef:44:32:5d:ab:76:b8:0f:36:a4:d6:68:
         3b:a2:3c:27:8f:0e:ab:da:7d:2e:8a:3e:8e:7f:43:b6:84:3f:
         93:82:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:32:00 2026 by rpki-client