Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File:                     NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier:          Vq74kJ8SBCzQcmk2e9PXMojQWUnBfrSGnP6I67kt0ao=
Subject key identifier:   80:51:02:A6:B4:EC:7E:2B:16:87:2F:05:43:7D:A1:F7:3F:DC:12:42
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number:          58
Signing time:             Thu 03 Sep 2026 06:17:48 +0000
Manifest this update:     Thu 03 Sep 2026 06:17:48 +0000
Manifest next update:     Thu 10 Sep 2026 06:17:48 +0000
Files and hashes:         1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: bTJLizRpYHUtdPyhL+O6RiTV48TeFvZZGG3oq/k1iyo=)
                          2: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=)
                          3: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: Sep  3 06:17:48 2026 GMT
            Not After : Sep 10 06:17:48 2026 GMT
        Subject: CN=6a99110c-fa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:af:32:8f:d0:fd:12:56:7b:e5:75:4d:57:
                    4e:62:55:c6:d5:d8:17:92:20:be:9b:fa:38:42:17:
                    6b:9e:0c:30:4b:76:d0:ef:b5:6d:d5:7c:8d:e3:3a:
                    0c:dd:42:a0:06:ff:fa:2c:97:ce:a5:11:38:2a:fb:
                    e0:1d:e2:94:52:2b:14:af:90:6c:ef:07:20:4d:3c:
                    6a:55:fc:85:3f:ca:c0:d6:2e:3e:82:79:2b:5a:52:
                    1e:86:cd:34:80:99:ed:5f:3b:ea:a7:60:43:fa:fa:
                    20:04:bb:4a:53:51:ff:6d:67:65:ea:56:6d:ab:c1:
                    6f:f1:f3:02:ab:25:2a:ab:86:72:27:92:61:9b:cf:
                    7d:59:db:9b:f6:22:88:54:7f:d7:f8:ce:f5:86:94:
                    d8:a2:87:87:06:f0:d6:e8:c2:2a:17:82:f3:bd:fd:
                    0c:a3:a7:54:ed:b3:d7:e0:2f:37:61:9c:fa:fa:28:
                    50:67:49:7d:f1:00:81:a4:bc:76:4d:9b:af:45:5b:
                    86:6a:e5:51:71:be:4d:e6:cf:2a:53:7b:38:e4:c1:
                    0c:29:69:21:af:2e:ff:04:2d:72:bb:a1:b3:ee:63:
                    fd:2f:cc:fb:73:eb:2f:73:35:d1:2d:81:44:4a:8f:
                    5f:02:36:4d:41:87:0e:77:17:ee:fb:fe:ef:42:65:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:51:02:A6:B4:EC:7E:2B:16:87:2F:05:43:7D:A1:F7:3F:DC:12:42
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:6f:b2:ca:71:c3:83:c5:35:51:77:85:52:ce:c1:6a:6e:
         d3:17:fb:34:25:64:69:30:2d:50:7b:00:fa:b9:07:ee:e2:a0:
         d6:12:a3:63:c9:29:91:88:b1:9a:5d:28:ed:60:33:3d:a4:cc:
         21:ff:6b:41:bb:f3:40:db:ad:c2:73:0f:32:a1:fc:28:a3:d3:
         37:88:7a:4a:08:40:8c:9a:4a:9b:b3:f5:19:ea:4b:d1:c5:74:
         b7:77:cb:27:4b:b1:82:a4:36:d1:23:d0:41:37:c6:e5:3f:a6:
         c4:03:fb:65:02:2e:f2:cb:2d:d9:f5:98:89:d8:76:83:f8:83:
         0d:2a:b2:f2:1c:c8:4b:89:3a:42:b1:cc:2c:97:29:d0:47:b0:
         c8:7b:d0:73:13:ad:3d:74:c4:68:c0:4c:ff:19:77:4d:e5:40:
         bc:8b:d4:22:9f:84:6c:8e:89:3a:e6:ee:e9:42:7b:b6:eb:01:
         93:ea:15:b5:6f:ab:a9:63:d1:f3:41:b0:bc:be:48:13:3e:59:
         9c:e9:c7:51:0c:87:d4:39:2d:9e:df:62:9f:74:46:f3:48:14:
         ec:7a:fe:7c:e6:4f:59:9e:d3:a1:4d:66:e6:c4:c2:ae:27:ec:
         de:64:e8:83:ac:68:29:d2:b8:a4:73:1d:ad:61:49:c4:d6:ce:
         c4:76:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:50:34 2026 by rpki-client