Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
File:                     _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json)
Hash identifier:          CzhoGs0WoSr+ey6slWHCxG+ZbaML2b4qFhAX53ZrB2c=
Subject key identifier:   7B:3B:39:EA:D8:B9:56:94:49:27:77:67:11:B6:9F:96:48:C0:E6:BB
Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
Certificate issuer:       /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
Manifest number:          0593
Signing time:             Sat 04 Apr 2026 23:38:17 +0000
Manifest this update:     Sat 04 Apr 2026 23:38:17 +0000
Manifest next update:     Sat 11 Apr 2026 23:38:17 +0000
Files and hashes:         1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: c69cdKANOsTTZeLDZBZ2RRys5+jjbYnBcCKsDk2SbzM=)
                          2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hn5wjT8ITTfEO0dB+XWYbfRy24k/V8B+n7+WTsoECyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl
                          rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
        Validity
            Not Before: Apr  4 23:38:17 2026 GMT
            Not After : Apr 11 23:38:17 2026 GMT
        Subject: CN=69d1a0e9-6c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:1d:e8:d0:d1:53:97:c4:56:76:0b:bb:85:
                    a2:75:33:0e:9b:9c:a6:04:c7:ca:47:5f:68:3e:b1:
                    ba:87:f9:53:c1:c6:be:0d:6d:99:e5:ae:44:26:d6:
                    fc:c5:1d:d6:45:7e:25:bb:75:46:e5:31:e3:65:02:
                    d8:8c:bd:2c:54:96:1e:0c:be:14:45:7c:b4:f5:2b:
                    4b:af:c1:a2:97:7f:1e:ed:ba:1d:ea:47:6b:36:cd:
                    2c:73:70:3b:4a:8b:c4:e4:54:d3:da:11:c6:54:e8:
                    c8:3e:4c:16:13:e3:80:24:91:91:ec:0f:d3:83:97:
                    4f:ae:0f:f8:06:4d:20:65:17:c2:f4:5d:41:56:49:
                    89:64:d9:de:15:25:bc:e8:c8:d6:b8:80:34:77:df:
                    3f:f7:ae:10:1e:2e:66:07:bf:50:b0:86:1f:8d:ed:
                    da:94:74:9c:25:65:5a:7c:f8:74:c0:a2:fc:3b:e9:
                    1f:32:1b:aa:a2:d5:f7:e3:26:b4:08:96:93:0c:68:
                    80:96:1b:c1:73:79:76:7e:7c:7c:c7:5f:57:07:a1:
                    38:ca:69:bc:fc:16:f3:aa:64:c3:86:34:01:6a:f1:
                    da:ce:c1:4e:3c:57:e1:c7:59:d0:4b:85:a7:7d:87:
                    fb:db:f4:0a:51:2a:4e:62:cd:65:cc:62:51:a8:4a:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3B:39:EA:D8:B9:56:94:49:27:77:67:11:B6:9F:96:48:C0:E6:BB
            X509v3 Authority Key Identifier:
                keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:29:d0:ce:4e:73:b8:21:ef:37:c4:58:45:18:6b:4e:f0:
         ee:3a:fb:d7:c7:70:d2:03:df:5c:f1:2a:4c:6b:b6:da:52:38:
         9f:01:5e:27:9d:39:9a:7d:f7:6d:78:fa:ab:b0:28:b5:8e:30:
         78:5a:7c:f8:48:60:98:d2:a8:22:6b:5c:c7:09:d5:c5:3d:4f:
         10:0d:3b:5a:99:3e:32:23:cb:5f:08:22:ae:37:eb:9b:a0:16:
         76:36:62:4e:00:60:ca:69:c8:8e:20:40:cd:73:52:7d:ba:08:
         af:36:05:d4:a9:b0:6a:74:74:dc:98:53:2e:93:a1:5a:8d:02:
         db:46:4a:06:3c:53:f8:56:69:11:cd:88:f9:52:5e:d5:36:e7:
         96:8e:db:8e:6d:5c:60:fb:3f:2a:83:90:25:52:77:3b:26:b5:
         19:65:5c:26:d1:23:20:39:20:ed:39:16:bb:51:79:fa:4d:48:
         7b:0b:83:85:ab:26:fe:9c:d9:28:ba:ef:08:28:8b:dd:39:87:
         20:69:af:dc:cf:96:d0:8b:f9:20:98:4f:14:34:28:ac:ae:d7:
         f0:d1:35:46:59:d0:93:6f:ba:62:ef:c6:f3:92:c8:21:17:64:
         f9:c9:f7:d0:db:a3:54:ec:12:49:0d:59:db:b0:75:e8:27:5a:
         41:46:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:51 2026 by rpki-client