Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File:                     NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier:          JORQo1Vm1y0SpIeSIxAvMB+ZFgN7pEj6eosWc7NZV6E=
Subject key identifier:   7C:16:EC:65:37:D7:62:FF:3B:85:FA:4B:09:10:FA:FA:14:66:03:76
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer:       /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial:       0CC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number:          0CB8
Signing time:             Wed 20 May 2026 18:29:27 +0000
Manifest this update:     Wed 20 May 2026 18:29:27 +0000
Manifest next update:     Wed 27 May 2026 18:29:27 +0000
Files and hashes:         1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: XRyUVh/9zaCH4JLwxDkDkJ8A7p5Qnlht2/9NhYG9kw0=)
                          2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: yqBrYS+OQh89LeyuxvtAswEE9eX5g7RnQPP/zPqycgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
                          rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
        Validity
            Not Before: May 20 18:29:27 2026 GMT
            Not After : May 27 18:29:27 2026 GMT
        Subject: CN=6a0dfd87-05b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:b0:2c:0d:27:26:e2:01:03:fb:34:63:a3:
                    d3:eb:8c:4e:14:d2:a6:a1:bd:65:78:7e:22:a0:4b:
                    69:e2:d0:7b:2a:e2:5e:d7:92:fd:d4:3d:68:8f:89:
                    db:d0:30:c3:2a:3c:f7:71:7b:bf:ad:f3:2f:6a:9a:
                    a7:7a:75:79:33:d7:7b:21:2e:5a:b6:15:73:47:7a:
                    ba:86:cb:9d:6d:2d:0c:91:4b:c3:8e:5f:9a:5b:2d:
                    f8:10:26:fb:88:f2:48:0d:e4:be:dc:e9:96:d0:44:
                    45:c9:e3:c6:ef:ea:0b:20:c2:81:17:d4:c2:0d:c2:
                    51:ca:cd:3f:2e:b2:cb:8c:33:7a:e8:80:16:88:81:
                    1c:f2:46:68:cd:00:e2:09:87:e5:d8:7c:3e:e6:78:
                    db:12:5a:ee:33:72:a9:d5:25:47:9b:0f:22:c6:b1:
                    68:f4:5f:9d:05:08:a5:57:93:26:02:5e:84:6b:bb:
                    92:8f:14:4a:1d:96:5f:c5:d3:fe:b5:7e:ba:7c:ed:
                    0c:40:76:af:91:12:2f:09:69:d7:b4:b1:b4:7e:13:
                    90:73:04:28:1a:bd:73:e4:ae:1a:b8:39:2e:40:fe:
                    a4:3d:d2:5d:2e:2d:de:5c:5d:6e:c6:2f:cb:53:32:
                    43:17:f0:ef:6b:38:c2:12:90:c3:18:1a:a5:90:ac:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:EC:65:37:D7:62:FF:3B:85:FA:4B:09:10:FA:FA:14:66:03:76
            X509v3 Authority Key Identifier:
                keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:b7:b0:ce:e0:66:ac:83:6e:ee:ed:59:fa:12:93:99:5a:
         19:6b:54:08:fb:eb:83:69:ae:bb:5c:05:37:bb:0d:d5:f2:21:
         88:6e:8b:56:e2:f5:f6:5b:41:e3:5b:6a:7d:ce:a9:df:8b:aa:
         72:6e:6d:9b:10:9c:a7:ba:50:d8:44:50:89:3b:d3:ff:15:0b:
         91:37:62:dd:2b:44:aa:e0:f4:99:4d:72:7f:19:24:94:a2:86:
         dd:e6:a0:78:74:f0:8c:37:99:30:2a:fd:ba:1e:9d:9e:60:0b:
         fa:e4:3d:4d:5c:d1:0e:5c:27:87:e8:f8:43:08:a4:20:22:01:
         59:5c:fc:5c:00:75:72:17:ff:55:c0:b6:80:f4:c9:89:c7:24:
         b0:22:1e:c8:26:f3:6f:fd:45:9a:0d:b6:c3:a7:62:c7:1c:be:
         ef:42:4a:48:6b:fd:b5:a9:a4:63:54:a5:be:ed:f5:17:71:42:
         de:85:60:f4:f7:5f:86:1b:af:90:ba:7c:1e:5f:2f:5a:1b:df:
         bc:0b:b5:cf:2c:22:a6:3f:4d:a2:4d:e3:f9:84:62:0f:aa:d4:
         be:3a:b9:43:5d:33:c0:6c:3d:be:47:d2:96:e4:4e:05:e6:ae:
         28:f6:d1:0e:16:5d:39:77:d9:f7:a9:10:f2:fd:2c:b5:6f:f9:
         13:92:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:22 2026 by rpki-client