Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File:                     nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier:          HGwXEQNKu9uXZ7sM8r/nUqbGU9x1efSp9qiV88h7JCk=
Subject key identifier:   E4:D1:F0:17:31:5E:DD:BB:D5:76:A1:1C:E8:92:90:B3:E4:2D:F4:36
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       05FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number:          05E0
Signing time:             Sat 04 Apr 2026 22:46:43 +0000
Manifest this update:     Sat 04 Apr 2026 22:46:43 +0000
Manifest next update:     Sat 11 Apr 2026 22:46:43 +0000
Files and hashes:         1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: zw7YPSnAXrFi+fw2duHDgifK06+vtE4MRm6GXN++xyY=)
                          2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: ynONBbaJLtslH4xEJkYmR31LTCJpIq6Pb2euDc5gbJI=)
                          3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EbdZVxWbh3R/FncALnqSzB9R0M4Mq7JJdCNgH/e/Tds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Apr  4 22:46:43 2026 GMT
            Not After : Apr 11 22:46:43 2026 GMT
        Subject: CN=69d194d3-8503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:0d:f9:2c:ef:ec:f9:50:43:3a:06:49:7e:
                    89:60:51:3e:01:5a:65:6c:8c:24:db:a7:8b:83:29:
                    4f:34:42:42:30:8e:17:a1:4d:59:0e:ad:f0:6b:31:
                    22:ed:de:16:06:59:9d:79:52:80:58:3f:6c:e1:e5:
                    ac:dc:bd:c9:a7:f7:d0:3d:f5:c9:ee:ed:73:eb:99:
                    c4:b1:e1:d0:bc:2c:7d:3b:06:74:a9:f9:6e:99:ce:
                    dd:44:83:17:a9:b6:19:2b:70:30:b4:00:fd:ab:b9:
                    d5:7a:2e:8f:43:f1:a2:32:e5:df:fb:4a:97:f0:3e:
                    01:c3:99:d6:d1:cc:4c:76:97:47:1c:df:eb:68:c5:
                    ae:0e:30:59:f6:e8:36:47:d1:a9:75:49:3d:b6:6b:
                    71:12:ab:25:6b:33:ad:7a:10:df:c2:2f:51:24:1a:
                    5b:1b:08:dd:15:b0:63:54:c4:77:54:4a:21:3c:8d:
                    9d:84:a2:64:08:6d:f7:fb:f8:d1:9f:cd:12:ee:1d:
                    78:ad:5b:e0:29:db:8f:df:69:6b:e1:7e:6a:37:fc:
                    2c:4e:f9:e3:17:fd:7e:31:15:71:3f:b0:a8:42:b8:
                    a5:37:2c:d7:79:1e:3d:a8:94:c7:1b:54:45:d3:c0:
                    00:ba:e0:ab:fb:2a:e5:ba:4a:3d:b1:4b:14:47:6d:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D1:F0:17:31:5E:DD:BB:D5:76:A1:1C:E8:92:90:B3:E4:2D:F4:36
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:db:fc:f5:01:85:6a:a5:de:86:c2:89:12:70:41:40:ce:21:
         ec:60:13:83:11:d7:29:84:0a:6d:d8:70:38:1c:39:22:f4:e4:
         a7:94:49:7b:c6:ca:0f:cb:6c:c6:27:27:86:b3:7c:c8:0c:67:
         29:02:5f:8d:fd:48:53:5f:49:27:ae:74:36:64:5b:24:39:b0:
         67:9c:d6:81:fc:26:5b:02:f6:2a:4d:e3:b0:cd:f0:e3:ce:d4:
         3c:f0:18:54:3b:e3:5e:f6:c3:83:db:81:f6:2d:04:21:6a:a4:
         e9:b3:45:9e:26:6a:c9:f0:2d:e8:dc:18:f8:6a:f4:f6:50:86:
         cc:e7:67:d1:52:49:72:0d:47:1f:9d:9b:ca:09:72:82:b3:de:
         13:24:4a:71:aa:33:19:34:9d:7e:b7:29:dd:ae:a9:7d:69:a9:
         47:d9:8c:67:17:d6:4d:a5:af:0a:b3:dd:7c:d1:ce:ed:af:ab:
         d1:41:84:42:67:29:71:05:fe:36:75:17:5a:b4:77:e0:68:b7:
         6f:87:1f:11:ea:9d:62:17:5b:b8:51:e1:8e:b6:dc:b1:75:31:
         4b:87:82:f8:ae:c5:2d:31:fc:97:9c:eb:53:d0:de:d2:9f:b3:
         1f:53:7a:73:58:80:a0:5e:3c:d8:49:3e:15:3f:c1:2a:8e:ad:
         49:94:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:37 2026 by rpki-client