Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
File:                     NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json)
Hash identifier:          lg8HcZbx2cN/CR6vY7XuaOJ7V7CPqT8Uf4NWDyplFrs=
Subject key identifier:   CB:3A:A9:2F:D3:17:70:79:E2:D8:71:15:64:C0:2A:0F:4D:60:5E:6C
Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
Certificate issuer:       /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
Manifest number:          010E
Signing time:             Fri 17 Jul 2026 07:14:37 +0000
Manifest this update:     Fri 17 Jul 2026 07:14:36 +0000
Manifest next update:     Fri 24 Jul 2026 07:14:36 +0000
Files and hashes:         1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: jIl8C0FYi/WWEU+hYIu3wyNbBOWBoYQRlNnKoGXcFPw=)
                          2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
        Validity
            Not Before: Jul 17 07:14:36 2026 GMT
            Not After : Jul 24 07:14:36 2026 GMT
        Subject: CN=6a59d65c-cb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:bc:a2:84:cb:8e:cc:67:84:e4:30:2c:e6:
                    82:1f:1d:2a:6f:17:d6:9a:7f:26:7e:47:ee:ec:d7:
                    f5:33:90:f5:f6:65:10:9e:fc:75:f0:94:81:2c:af:
                    dd:fd:e7:f4:c9:54:11:0e:01:33:51:5a:01:64:8d:
                    fe:5d:f6:52:cd:0d:ef:d0:dd:45:cb:19:72:0c:f3:
                    ab:9e:e8:45:8e:b5:06:46:a0:52:09:03:9c:de:ea:
                    5b:cb:5d:6a:3c:87:ab:4a:ee:72:f9:70:b9:48:bb:
                    e5:81:49:c4:41:ae:86:56:c2:02:3c:65:d3:9d:0b:
                    c7:85:8f:f6:56:31:53:8a:a3:1c:98:f1:39:2c:91:
                    a3:94:0d:a4:3f:80:97:e8:3a:7e:97:ae:7d:6f:a3:
                    b2:ea:9d:e1:5a:1a:66:e2:43:b6:2a:15:94:ec:07:
                    30:25:19:bc:5a:92:f9:c0:37:1c:cd:d1:6b:e2:5c:
                    ea:76:09:2f:f7:a0:a2:3c:53:17:04:da:55:3e:bb:
                    c6:a8:11:b6:3d:5c:0f:61:75:f3:e4:fa:e0:2f:11:
                    a5:90:9b:33:97:2b:72:ba:ba:63:d9:66:3f:0e:fd:
                    73:14:6f:0d:16:ab:89:f9:fa:d0:98:0d:b5:bc:d8:
                    8f:7d:4a:f1:4e:1c:33:9c:ee:6d:18:75:31:33:0a:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3A:A9:2F:D3:17:70:79:E2:D8:71:15:64:C0:2A:0F:4D:60:5E:6C
            X509v3 Authority Key Identifier:
                keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:2b:35:90:2e:42:2c:05:5d:2f:ad:8d:f1:c2:91:92:cb:
         d5:96:5c:4b:d1:c3:02:12:49:4f:5a:b5:19:6c:8a:03:b2:2a:
         e1:9e:b4:2b:fb:de:b0:1f:96:b8:a1:0f:79:9f:ce:fe:b6:fe:
         31:bb:34:eb:84:a2:2a:90:55:32:e2:ae:85:b9:87:2e:e5:93:
         c1:12:0b:46:e6:97:1d:9e:2e:41:40:e0:38:27:91:af:4c:01:
         80:7e:18:f7:58:29:43:87:c7:43:11:37:54:bf:f4:23:0c:66:
         82:0f:fb:9f:70:98:6f:a0:69:ee:67:c5:86:31:04:fd:08:b5:
         2d:8d:41:89:17:fe:fa:c5:23:48:61:8c:7f:a0:fa:0b:c9:60:
         25:73:54:da:06:62:af:97:42:37:05:66:1f:fe:06:5f:9b:c3:
         6d:61:a1:62:4a:5b:b3:e7:55:4e:63:08:87:22:9d:9c:45:a3:
         c2:0d:80:c9:32:69:45:18:b0:57:d7:ff:8d:22:8b:67:9d:06:
         06:0d:9f:63:46:77:7b:48:12:b1:ad:97:8b:5c:e3:58:ef:e8:
         a2:19:ac:80:5f:a4:9e:8b:7e:06:65:37:5c:16:b3:ef:cf:55:
         40:ab:a5:63:6d:ef:8e:f4:57:ed:18:24:af:2f:53:d6:4b:66:
         4d:24:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:18:24 2026 by rpki-client