Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          d29xapc65maShJdXMM+1dY+e86FE5iPXVYzcE0N7s6A=
Subject key identifier:   D5:A8:62:21:0C:09:81:B3:43:77:40:03:4B:E0:38:A4:D2:57:E0:E2
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       0515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          050D
Signing time:             Wed 20 May 2026 23:43:16 +0000
Manifest this update:     Wed 20 May 2026 23:43:16 +0000
Manifest next update:     Wed 27 May 2026 23:43:16 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: MERWVFC19TWEJpPifmdfbOjS3wmb19is5fbTSPKVC1w=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: QQ04clgDlq/iSdNCQgiJAr76DYCKTHAdHCQwRcpdMwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: May 20 23:43:16 2026 GMT
            Not After : May 27 23:43:16 2026 GMT
        Subject: CN=6a0e4714-1338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:85:71:bb:c7:24:e9:ce:61:e9:a3:4b:e7:
                    a1:af:87:82:3d:d2:47:e2:f9:c8:6c:c2:64:9c:e1:
                    1b:a9:46:80:a9:1d:c0:49:63:90:bd:92:61:fe:4d:
                    61:6a:75:17:33:0e:da:fc:fa:56:99:7f:5c:ab:61:
                    98:9b:e9:80:9e:14:c5:2a:9d:8a:94:09:c3:7c:16:
                    b2:d1:ed:04:b6:29:73:db:2b:1f:73:7d:6a:ad:b5:
                    32:4c:4e:5a:5d:c7:f4:21:76:4a:63:d2:57:a9:f4:
                    15:7a:f3:e7:5f:d1:fc:f7:b6:9b:74:72:aa:70:e9:
                    f2:ff:a0:fa:fd:e7:ee:8b:f1:57:e7:0b:0e:2b:fa:
                    80:69:8a:3c:e7:3d:97:54:74:65:6d:c8:e4:2f:b5:
                    06:c1:1b:24:c7:1d:38:b4:ac:22:5d:a6:11:74:7a:
                    6b:91:a5:15:63:f2:6d:15:69:d9:14:91:e1:cb:3d:
                    06:68:60:0c:ae:f8:63:e6:6d:6e:d1:e6:65:ef:da:
                    fa:77:ea:b5:49:e1:c2:1d:f9:49:33:a5:25:8b:e5:
                    55:3a:6d:87:2c:3b:69:f0:a8:60:80:35:a5:c9:af:
                    43:25:fe:11:05:82:51:ba:3d:e3:32:02:0a:52:3f:
                    bd:81:d4:27:2c:15:34:46:a5:ce:c9:da:d0:a0:0a:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A8:62:21:0C:09:81:B3:43:77:40:03:4B:E0:38:A4:D2:57:E0:E2
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:da:05:00:c5:d7:72:73:4d:31:b3:ef:08:5e:ba:ae:75:
         d1:ff:4f:20:a1:cb:10:c5:ca:4f:af:8a:92:0c:43:72:ee:84:
         1e:42:bf:ea:fc:1b:e4:9b:3e:b1:ec:49:6a:45:d8:80:e1:c5:
         dc:e5:bd:ed:b9:e7:aa:f9:82:49:07:e5:94:c8:17:68:c0:aa:
         51:7b:dc:53:0e:eb:44:df:40:88:41:60:91:bc:72:9c:44:3f:
         36:32:fe:88:02:24:6b:cf:c5:fc:15:8e:ea:ed:66:8d:29:e6:
         6c:16:95:8c:b2:5c:4c:bc:92:19:f3:37:b9:56:34:3e:13:20:
         57:c2:b9:af:70:2a:6b:7d:08:f2:16:9b:4e:c5:11:89:9e:d9:
         80:36:50:7b:fe:40:3a:5e:77:ae:b0:8c:6d:c8:3f:06:4c:0d:
         cd:ac:b3:af:a4:17:d6:7b:ff:c6:da:3c:48:ee:37:4a:b8:29:
         ae:23:96:94:7e:03:75:65:a4:1f:3b:85:63:5c:10:b5:8b:cd:
         3c:df:7b:2e:8f:48:24:eb:28:3b:07:c6:d0:8a:0b:9b:84:47:
         b6:21:60:4d:fd:90:5a:f4:6e:49:66:1c:17:fa:fb:a9:79:9e:
         f0:5d:07:c0:05:f0:26:f7:a2:5a:35:ea:21:3b:71:53:91:53:
         ee:56:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:30 2026 by rpki-client