Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File:                     NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier:          jPigj4gR5PNtKS/Siu+ZsGyS6fyfEVVhKXPP977SEuY=
Subject key identifier:   73:8A:3A:FB:9C:A3:3B:E7:B9:B5:17:C3:A5:92:56:AF:7F:71:9C:3F
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number:          01CD
Signing time:             Sun 05 Apr 2026 03:14:28 +0000
Manifest this update:     Sun 05 Apr 2026 03:14:28 +0000
Manifest next update:     Sun 12 Apr 2026 03:14:28 +0000
Files and hashes:         1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: 7Pixyg1ZrYgz13L58n5Lu/pTKRgawwzIi8wdxGkZdL8=)
                          2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Apr  5 03:14:28 2026 GMT
            Not After : Apr 12 03:14:28 2026 GMT
        Subject: CN=69d1d394-a225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:eb:61:a9:5b:b6:7b:9e:f0:b8:10:a7:62:
                    a2:3e:b1:4e:c4:95:d2:1e:60:e4:59:d9:12:28:7b:
                    54:65:47:45:90:a2:16:33:2c:a2:60:08:ca:d5:14:
                    a6:e9:45:f4:30:f1:b6:61:9a:5e:43:28:a4:b3:8a:
                    8f:c0:1a:5c:0a:f3:9f:18:00:0b:9e:17:8f:58:33:
                    0c:d0:80:aa:c0:a6:cb:48:cc:f3:fb:f3:ad:bb:87:
                    19:dc:c1:3d:c1:dd:25:32:08:88:e2:ae:d8:ba:51:
                    b8:27:58:38:59:dd:a5:42:5a:05:b5:b0:6a:39:c4:
                    90:9c:1f:29:59:77:61:bd:be:cb:4d:f0:09:e3:72:
                    2b:04:f9:b5:b9:2e:24:ac:04:12:57:a3:27:2c:46:
                    32:4f:a4:44:c9:db:a5:79:7c:c2:b2:00:45:f6:30:
                    03:6c:33:68:a3:1f:b7:03:2e:cf:4f:ff:56:4a:3a:
                    c5:2d:1d:e3:09:10:fb:77:f1:66:b1:d0:b6:d7:c2:
                    4c:df:cb:2a:34:a3:7f:52:b5:23:df:06:6b:c0:04:
                    c9:44:06:21:05:35:b2:fd:90:19:f2:c8:89:10:16:
                    d6:ae:d9:d6:e5:6a:66:27:4f:43:0d:08:c4:a4:ec:
                    6d:b6:ec:e8:50:02:e2:9e:37:ce:40:0e:5f:d8:f7:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:3A:FB:9C:A3:3B:E7:B9:B5:17:C3:A5:92:56:AF:7F:71:9C:3F
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:3e:4b:3a:d9:cb:84:65:94:b4:92:63:b4:98:ec:ec:19:
         32:f7:ae:0c:e7:ff:fc:be:9a:7c:e6:f7:08:91:85:52:48:5a:
         e7:f2:32:89:ec:17:de:dc:9c:4f:be:ac:f7:49:ec:9c:54:65:
         28:d4:46:d8:a4:b1:d2:2b:79:2b:6e:47:e3:16:0c:07:c3:00:
         ac:ff:de:20:12:32:bf:27:96:24:0f:46:9d:78:38:26:cf:66:
         67:00:ea:5c:0e:8d:a5:e5:8c:3f:22:61:67:b3:60:91:ae:92:
         05:7a:a3:f8:54:50:cb:24:7e:ec:36:f1:9b:f9:88:4a:ee:42:
         b3:52:b9:47:d9:8c:ac:c2:4b:d0:fd:1c:21:da:94:51:49:e5:
         05:cf:57:f7:9b:72:f9:ea:6f:65:47:f1:9f:bf:ec:1b:42:fa:
         5d:80:4c:1c:4e:f8:1d:ec:5f:55:ef:28:34:fc:be:4e:35:0f:
         86:fa:61:60:c6:04:c8:01:cb:5d:b3:c8:bb:86:69:be:f8:1c:
         c0:15:25:1b:3d:b2:31:07:50:18:93:a8:cd:8d:a5:a2:70:47:
         0e:8a:af:b7:18:7f:81:c2:02:88:f6:cf:d8:b3:48:c4:8f:b9:
         1a:ab:78:67:77:e0:75:a4:86:9e:f2:dd:83:2f:29:4f:ef:a8:
         47:e9:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:56:49 2026 by rpki-client