Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File:                     nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier:          DUxNsQYcY60924yC+oLOCk/sgtW7X/ZUlKmN3R0/L98=
Subject key identifier:   DB:A5:13:DD:C7:EA:1B:B3:E4:A4:75:44:27:F6:AA:1D:DA:62:E6:CE
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer:       /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number:          0126
Signing time:             Sun 05 Apr 2026 05:08:42 +0000
Manifest this update:     Sun 05 Apr 2026 05:08:42 +0000
Manifest next update:     Sun 12 Apr 2026 05:08:42 +0000
Files and hashes:         1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: rg3w1kBz6G5nR2VpqamdUhI2wd8g9Fd1gpUhkxbaq38=)
                          2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: WwFFmG8/4wsEls41tloUK6sLzod+S/W4CA8w6ITWHJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
        Validity
            Not Before: Apr  5 05:08:42 2026 GMT
            Not After : Apr 12 05:08:42 2026 GMT
        Subject: CN=69d1ee5a-9bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:5b:19:c6:b8:ca:45:1d:63:8b:e9:ab:8e:
                    a9:41:27:cd:a9:94:40:f4:f8:e1:8b:10:e8:ee:2a:
                    9f:4e:1d:92:d3:59:aa:3f:fe:3d:c5:99:3e:94:56:
                    1c:7b:6f:f7:91:01:0b:60:cc:bb:46:78:81:47:e2:
                    57:80:b9:d2:43:35:32:c0:f3:5d:02:f6:44:2c:c0:
                    a1:af:94:83:83:5a:0c:22:44:b3:6e:c5:3a:6d:51:
                    fc:c3:a9:52:e0:59:6c:74:bb:7f:13:a7:f6:37:92:
                    00:a0:02:a6:0c:1f:e4:9f:2a:bb:f4:80:46:25:35:
                    30:cc:f3:95:6b:02:2e:61:bb:4d:3a:d8:22:94:8a:
                    ad:15:d1:79:6e:2e:55:9a:49:b7:56:1a:88:ff:79:
                    20:bb:a3:e1:f1:4b:76:e2:48:13:3f:b7:61:72:65:
                    14:16:d2:73:51:83:be:be:71:16:b0:99:4c:33:19:
                    b9:d4:8c:9d:02:be:32:b9:1d:33:d1:15:a9:1a:5d:
                    a7:3a:fa:75:bc:51:10:65:c1:43:f9:43:30:31:de:
                    f8:f5:39:9a:f8:bb:b3:ae:2d:a1:ad:5c:53:35:5d:
                    05:9b:05:67:cd:50:e1:7b:f9:f7:93:b1:8e:9f:fd:
                    4c:c6:8f:de:d3:b8:67:01:67:dd:ab:88:fc:3b:cb:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:13:DD:C7:EA:1B:B3:E4:A4:75:44:27:F6:AA:1D:DA:62:E6:CE
            X509v3 Authority Key Identifier:
                keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:af:60:04:25:ef:88:9a:6e:84:46:a7:46:10:55:21:7e:4a:
         39:5c:fd:f8:1d:c8:1c:7d:07:77:0f:8a:58:b5:67:40:6e:7a:
         c7:c9:6b:a7:6a:34:cc:7f:53:71:f7:6c:7d:11:6b:4a:78:c0:
         0b:27:bf:2b:e9:74:ab:25:50:55:ee:37:25:05:ce:f6:d1:a3:
         dc:10:43:c4:dc:86:7f:bb:76:56:8d:a6:c7:09:45:bc:da:c1:
         a4:f5:75:c3:67:b6:6a:50:1d:cb:f7:91:0b:eb:35:78:e5:15:
         75:88:a5:58:ae:d1:4b:85:8f:4d:17:01:45:4c:7d:f7:ca:87:
         03:c9:07:2f:10:f8:af:09:1b:11:38:42:0a:95:9e:11:85:e5:
         91:9a:93:ea:4b:5f:64:bc:a4:89:8a:88:9d:2d:a4:33:de:e1:
         77:c1:84:73:c1:36:01:9d:64:f9:6e:de:a8:bf:16:c4:64:27:
         af:01:ac:a0:3e:99:48:b9:96:10:60:b0:04:ac:73:08:63:aa:
         24:9e:69:0e:6e:47:62:14:e7:87:04:af:f2:8d:70:8e:62:24:
         77:9d:c4:e9:20:4c:da:38:0e:57:5f:44:35:41:f8:6c:0a:0d:
         50:5c:e1:55:b5:17:82:09:85:9b:67:8c:b6:75:e0:e5:b3:ff:
         15:28:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:32 2026 by rpki-client