Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File:                     nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier:          iuMVrmfl3pNXAYNzA1sssucE3XkryGdTqA8pTYyqs1U=
Subject key identifier:   C2:C7:27:FC:C5:BD:5F:9A:ED:11:91:A9:26:D2:50:7C:39:80:CA:8C
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer:       /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number:          0143
Signing time:             Mon 01 Jun 2026 06:08:50 +0000
Manifest this update:     Mon 01 Jun 2026 06:08:49 +0000
Manifest next update:     Mon 08 Jun 2026 06:08:49 +0000
Files and hashes:         1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: aDVgnQ9rDM7+o5nb8OW3DOvS5LpG6iV8GVXLQ0FmVKY=)
                          2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: WwFFmG8/4wsEls41tloUK6sLzod+S/W4CA8w6ITWHJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
        Validity
            Not Before: Jun  1 06:08:49 2026 GMT
            Not After : Jun  8 06:08:49 2026 GMT
        Subject: CN=6a1d21f2-d3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:fa:ec:ef:4a:ab:52:f0:79:71:a8:2e:e9:
                    37:0f:e3:d9:7c:fa:61:66:5b:f9:95:84:28:8e:53:
                    ef:0b:73:14:d3:04:35:f3:ff:e5:c8:1a:79:0a:5e:
                    41:4a:d6:82:c5:fc:d4:8e:5f:3a:a8:43:ba:c4:d1:
                    86:b2:d7:e2:70:07:da:82:dc:8e:0f:88:af:80:a9:
                    bc:73:3a:1b:03:4a:a5:e8:b3:84:80:7c:85:4d:d6:
                    52:ec:19:f8:d4:1b:3c:67:d9:de:d3:42:a6:37:9e:
                    71:6f:57:b0:fb:8d:11:5b:81:b2:c0:4d:07:67:d5:
                    ff:fb:2e:71:fc:ba:02:b5:e1:3b:f9:10:8a:7c:6e:
                    a7:e1:50:87:01:cb:b3:48:94:d0:07:3c:6a:d9:d8:
                    28:98:ec:fb:56:c2:f6:08:5b:78:12:26:b7:09:c1:
                    76:4b:e6:18:a1:ab:ce:00:22:81:37:35:d5:0b:bb:
                    da:27:b2:54:29:18:69:d5:b7:60:9f:b2:ff:38:e9:
                    6f:c9:2f:7f:9a:88:c1:b7:95:75:2e:fc:10:1d:3e:
                    d4:7f:2e:2e:e1:8e:79:d9:79:d3:20:9d:be:08:88:
                    0c:ae:c2:a1:b1:d5:0c:29:ce:c4:7e:f1:60:60:24:
                    68:bb:db:46:ef:fa:50:d5:e8:57:49:25:7c:de:b8:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C7:27:FC:C5:BD:5F:9A:ED:11:91:A9:26:D2:50:7C:39:80:CA:8C
            X509v3 Authority Key Identifier:
                keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:90:cc:06:6e:2f:80:ea:d8:ae:2e:b8:e3:5e:f3:e3:5d:
         ce:d0:ab:d8:ec:c2:9f:0a:29:32:97:bf:cc:13:18:4f:6e:81:
         18:ad:87:5e:12:53:04:3f:ed:22:e2:15:bc:2d:59:b7:a8:df:
         b0:15:d7:56:1e:d4:48:03:92:21:23:58:7b:a7:b3:fc:78:16:
         00:66:a4:0e:bf:44:05:e5:b9:a1:a0:02:93:cd:b3:f3:48:17:
         70:14:51:9c:32:91:84:76:c5:a1:f0:9a:6e:de:b9:05:35:58:
         ac:26:2a:ac:74:b8:ce:29:ab:de:2c:25:be:6c:2a:f1:6f:bc:
         19:6e:f4:d2:29:6b:ac:df:9d:94:3d:f7:33:cd:62:24:50:30:
         83:19:c6:01:d0:d0:7f:0e:db:3a:a6:96:f6:d1:cc:bd:b1:2e:
         4a:77:4c:70:31:82:42:a5:96:c4:18:87:da:68:48:ad:3c:83:
         38:2a:27:b6:e4:d5:58:74:0d:d6:27:f4:e9:a6:40:b6:56:79:
         21:0c:6d:02:46:fa:9b:49:80:fc:44:4a:e6:08:43:ad:4e:7a:
         9a:0d:b7:c5:f8:0f:68:69:83:b5:e9:9f:4c:e5:93:d4:01:80:
         ca:bd:6e:43:c7:80:9d:64:90:9c:de:83:15:2e:03:f5:c8:f0:
         17:43:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client