Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File:                     Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier:          5OyUdDuYsOxpAyJbSt5Q7kEWix7DyXChzG56k6COXjU=
Subject key identifier:   7A:90:C5:E3:D0:73:D1:B3:FD:93:09:30:D4:3D:AA:A2:6A:1C:C5:75
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       120F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number:          1080
Signing time:             Mon 20 Apr 2026 17:29:57 +0000
Manifest this update:     Mon 20 Apr 2026 17:29:57 +0000
Manifest next update:     Mon 27 Apr 2026 17:29:57 +0000
Files and hashes:         1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: qzSIvQp7CLkMScpVTrCUET0GawuGAwrDthMajMxDA4g=)
                          2: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=)
                          3: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=)
                          4: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=)
                          5: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=)
                          6: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=)
                          7: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=)
                          8: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=)
                          9: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=)
                          10: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=)
                          11: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=)
                          12: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=)
                          13: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=)
                          14: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=)
                          15: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 17:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4623 (0x120f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Apr 20 17:29:57 2026 GMT
            Not After : Apr 27 17:29:57 2026 GMT
        Subject: CN=69e66295-b450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:42:a5:92:9d:18:1e:3d:0f:46:63:33:da:
                    2c:a9:10:8b:94:36:61:a5:b8:01:de:f2:6d:61:6f:
                    1d:43:59:aa:c5:83:ec:87:9d:85:6f:bd:87:5e:41:
                    f0:09:15:25:9a:23:69:61:31:ba:3d:c5:98:5d:50:
                    71:39:5d:e6:13:4d:99:b2:41:8f:67:f9:6f:f1:2a:
                    a4:20:3e:cb:1e:2e:37:44:45:72:ec:14:c9:16:92:
                    f1:03:f6:3c:26:6f:be:a8:73:d7:98:8a:0c:fb:e9:
                    4e:0a:65:e3:bb:06:e0:dd:3f:0c:b3:48:13:a6:53:
                    b9:41:f6:46:d7:39:0c:06:1a:a5:cb:1f:58:2a:fa:
                    0b:43:6c:f5:ac:b6:c3:e0:f6:c6:81:5d:64:30:cf:
                    17:6e:f3:b9:e5:22:76:90:ca:05:2d:18:fb:0c:1d:
                    b4:bb:2c:94:9b:aa:d0:5f:8d:7b:e6:a8:36:77:ec:
                    f7:56:75:01:cf:20:3f:e7:92:15:ee:bf:8d:53:f1:
                    c4:e9:61:9f:20:6c:d6:36:ee:6b:22:b8:7a:44:3b:
                    9c:47:0f:93:8d:37:42:67:86:70:74:34:c5:0c:b9:
                    77:62:d4:bd:56:e3:85:c7:01:df:5e:e3:17:9d:df:
                    5a:26:98:b6:a9:ab:f8:66:ab:21:8c:b5:e8:d1:0a:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:C5:E3:D0:73:D1:B3:FD:93:09:30:D4:3D:AA:A2:6A:1C:C5:75
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:fd:67:54:63:66:c3:8c:c0:4c:da:82:b9:c7:82:66:06:
         b7:f9:2a:fd:fe:1e:63:94:6c:be:99:14:34:e8:fc:0c:83:20:
         fc:23:18:c1:6c:55:60:4a:38:01:ae:84:db:8b:63:55:60:cf:
         26:a7:e7:6e:95:10:df:5d:14:84:33:d3:9f:69:13:66:5a:be:
         5f:a1:e7:e7:ca:f9:fd:ce:a9:a9:3b:be:d2:e9:99:1e:5f:96:
         df:92:5f:f6:7e:d8:83:34:5c:cd:0a:b6:7e:85:a9:2c:be:61:
         15:35:04:9b:4b:47:c9:8e:df:e0:b3:09:bd:51:ce:07:ca:31:
         84:cc:ea:ed:0d:00:5e:96:67:85:72:a0:95:eb:22:f4:aa:50:
         86:f7:85:1e:ed:23:e5:c8:ae:af:f2:21:d1:b1:bc:00:04:98:
         a1:7c:c6:a0:7e:d0:1c:5f:5a:09:87:aa:08:e6:98:c5:fd:56:
         4e:27:f4:fa:0a:0b:cc:86:98:50:e6:ba:cf:01:29:d4:37:93:
         63:6f:3e:3d:9b:a2:f0:cc:20:a6:c7:aa:da:3b:ee:ed:75:46:
         76:db:31:71:b2:4e:4b:cc:e8:ad:67:79:c2:81:96:12:8d:d3:
         bd:a9:2c:61:ef:66:7d:7b:19:c6:6a:03:7c:29:7e:c9:0a:0f:
         ce:1e:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 18:34:48 2026 by rpki-client