Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File:                     nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier:          CV/wj+taww6qjz49rc5cTCh4iP4dEAL0LjtLuJ2Difc=
Subject key identifier:   26:1C:CE:7A:56:20:CD:52:00:90:C2:B6:7D:21:BE:F2:4C:E6:E2:4A
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer:       /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial:       1F17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number:          1EF7
Signing time:             Tue 18 Aug 2026 16:08:54 +0000
Manifest this update:     Tue 18 Aug 2026 16:08:54 +0000
Manifest next update:     Tue 25 Aug 2026 16:08:54 +0000
Files and hashes:         1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: ksUnmBtma+u7Uia9QM9HSzSk3yxgNwPvHf3nbt8c/0g=)
                          2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: +a6ogOK+k+aSB2Bvkv/yu8h4kqzrcXRyFwUo32R49nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
                          rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7959 (0x1f17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
        Validity
            Not Before: Aug 18 16:08:54 2026 GMT
            Not After : Aug 25 16:08:54 2026 GMT
        Subject: CN=6a848396-595a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:61:94:ce:ad:a5:9e:52:ea:61:a3:6a:80:
                    24:89:5b:43:58:86:77:45:24:43:76:0d:ad:15:cb:
                    45:f8:c0:99:e9:47:7b:32:e4:fa:c8:76:86:44:97:
                    48:d8:0a:f2:a6:82:b0:73:87:f9:4e:dc:03:47:5e:
                    ec:ff:55:16:6c:68:ca:ed:43:31:b1:41:b4:d4:fe:
                    3a:d0:d9:31:f1:41:c1:22:83:31:54:07:fe:ff:c6:
                    91:8b:fb:90:1c:d6:48:61:d4:ae:ce:0f:40:f0:20:
                    db:64:11:dd:73:c5:ba:d3:af:be:2f:04:ad:59:eb:
                    56:90:2a:67:3b:e2:57:10:5f:58:2e:fb:56:96:22:
                    ca:a1:d6:7d:2e:b0:83:ca:af:62:62:fb:57:50:7a:
                    57:73:c8:3a:bc:f3:88:6b:8a:eb:84:c0:a4:d5:e4:
                    17:1a:32:5f:7a:ca:86:84:10:c3:ee:00:ab:46:fc:
                    c6:d4:ad:37:00:16:c6:f5:be:d4:3f:80:63:89:35:
                    d9:1b:4f:b5:1d:0d:04:e8:11:96:ac:a4:dd:73:6e:
                    61:d7:f3:eb:8f:24:b1:62:17:60:b8:e9:64:bb:47:
                    8d:6b:f6:b4:27:04:a1:42:c0:12:38:f0:49:6e:e4:
                    ad:bd:a2:fa:38:02:7e:a7:d8:a2:b2:8a:c8:26:4c:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1C:CE:7A:56:20:CD:52:00:90:C2:B6:7D:21:BE:F2:4C:E6:E2:4A
            X509v3 Authority Key Identifier:
                keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:c6:b3:81:5d:f5:7b:f7:5e:c9:7b:68:04:8c:b0:30:8c:
         f4:82:84:ed:47:ed:5c:88:64:07:16:30:d5:67:c3:aa:a5:ef:
         25:31:92:c1:8d:8b:f5:fa:ef:d8:9f:4d:4c:7a:80:32:33:ba:
         2e:d5:d8:ce:7c:5d:36:f2:bc:f7:2c:b5:33:48:ee:41:91:17:
         86:cb:7b:de:02:04:20:a7:9f:89:98:2c:89:86:60:f0:02:ee:
         9f:55:a5:4a:74:ef:27:a5:fd:b5:64:0c:88:aa:e9:1c:bb:4d:
         e1:79:46:3f:4e:1d:c9:52:47:59:47:d6:9a:21:2a:96:25:6a:
         c2:95:11:60:18:99:7e:bc:e7:3b:c9:23:20:17:bc:c1:75:76:
         40:76:d4:2f:ef:63:a7:1f:8f:9b:34:4d:1b:44:a2:0b:1f:27:
         2f:04:40:b6:4a:35:df:96:3d:40:ff:6e:99:34:5b:a4:4b:b5:
         54:50:3a:99:74:a3:8c:28:8e:6d:a1:98:40:ae:33:f3:ed:e5:
         59:11:b0:e7:b3:0f:4d:23:f2:f8:89:25:e1:6f:02:5e:24:77:
         51:81:4f:38:c6:17:65:c6:90:c2:ce:10:fd:47:8c:e0:6f:fd:
         62:2d:47:30:24:e4:5c:f9:66:e8:dc:d0:78:e0:04:7c:a0:9e:
         50:09:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:01 2026 by rpki-client