Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
File:                     nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json)
Hash identifier:          n/w7xRbXNFiGfIMUqSSwtNu6ehfy3cv3HWzavFGFP1Q=
Subject key identifier:   AE:93:60:F5:CE:12:E0:F6:BF:22:6E:AC:3E:26:63:01:F2:53:39:34
Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
Certificate issuer:       /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Certificate serial:       05FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
Manifest number:          05EF
Signing time:             Thu 16 Jul 2026 23:27:46 +0000
Manifest this update:     Thu 16 Jul 2026 23:27:46 +0000
Manifest next update:     Thu 23 Jul 2026 23:27:46 +0000
Files and hashes:         1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: Fv7yLdN9c0/fGl38qmmss194BCwCETfZygyWhXekmxY=)
                          2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=)
                          3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: UlkMJAnK6fFfP1AdnmJ8vApdDQzCRL9Tu3cGNLiI+BY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
                          rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
        Validity
            Not Before: Jul 16 23:27:46 2026 GMT
            Not After : Jul 23 23:27:46 2026 GMT
        Subject: CN=6a5968f2-8d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:74:1e:9a:e2:21:69:4d:e1:9f:bf:cf:a7:
                    ef:b3:b0:db:6c:b2:5f:54:b2:c9:84:0f:0c:ed:9e:
                    e6:ab:5a:92:42:c4:27:d9:9b:67:73:2f:1d:f7:4d:
                    4c:56:58:f6:90:b5:cb:13:6a:93:f4:13:66:2a:e4:
                    1f:e3:76:36:62:1a:cb:d2:0a:b2:7f:fc:1f:18:b4:
                    da:16:cd:57:cf:c4:d8:c1:8c:8c:6d:ff:4c:3f:53:
                    fc:af:d8:db:7f:94:ad:4a:89:84:02:1c:c2:a6:a1:
                    2b:b2:ac:f0:ca:2b:3d:09:34:30:7d:ed:b8:f7:74:
                    4c:db:2f:ae:3b:ac:d0:7b:b3:29:a6:59:b5:10:1b:
                    fe:f3:af:e7:ee:39:6b:00:4f:3d:67:af:07:1d:5c:
                    dd:c7:11:18:10:bc:7d:8c:54:7a:18:a1:99:10:d7:
                    5f:b8:4c:02:6f:e7:1a:c0:cc:73:aa:49:c1:11:f6:
                    99:dc:a3:8d:2e:65:ed:10:1b:b5:08:4f:1b:ba:1f:
                    3e:63:aa:1e:d3:ef:11:bb:d9:4e:bf:00:df:8a:75:
                    ac:05:2a:10:a5:c8:0f:8f:f7:02:14:8a:e8:d1:5b:
                    f8:06:d2:21:7c:c8:8e:4f:52:6d:45:29:79:a8:1d:
                    48:89:81:c9:e9:57:d5:c6:e0:13:70:f0:2e:9d:2e:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:60:F5:CE:12:E0:F6:BF:22:6E:AC:3E:26:63:01:F2:53:39:34
            X509v3 Authority Key Identifier:
                keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b6:eb:20:a8:f6:47:cc:5a:7a:40:cd:c8:ff:ab:92:83:c3:
         47:26:1d:ff:eb:73:82:99:ca:d4:b8:a0:88:46:4a:0e:de:1c:
         42:8f:54:82:7d:a1:17:17:ce:2a:97:bb:6f:3e:3a:02:13:3a:
         b6:9a:46:b7:c8:92:52:fc:83:75:b3:6f:1d:18:a1:95:e0:6a:
         a5:23:73:c1:00:38:73:bd:f2:a7:a8:7a:49:aa:32:8d:ce:df:
         56:d1:70:11:da:ef:19:da:44:93:49:ce:d6:b5:16:95:1b:74:
         51:ce:e7:bb:e7:9f:1c:0a:9a:d6:a9:4e:90:9b:41:d0:bb:ab:
         24:94:3a:d8:60:a1:2b:71:4c:0c:31:69:1f:7b:4a:dd:9e:24:
         4a:b6:9d:27:ee:ae:92:a3:3f:cd:00:1a:ae:aa:2f:61:3a:e0:
         41:49:ee:40:8b:6e:72:05:7d:d7:e3:3e:1f:18:af:43:b0:d9:
         fa:87:e5:0e:61:0a:f4:ad:7f:fc:07:9a:e0:69:47:c0:a8:40:
         c9:8b:0e:a7:c1:ae:c4:90:ae:98:e8:4d:a6:ea:1e:1b:a6:be:
         14:99:74:8f:81:0d:7a:19:3c:f9:f5:d3:95:b0:22:67:d9:7a:
         6e:7e:c0:86:70:3b:d4:fb:26:3e:2c:ae:47:41:87:df:9c:c2:
         d8:72:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:26:35 2026 by rpki-client