Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          hNodOS7XXXqTCL8r2s/cPrCV/XbEgCAAOaRD54UUwUc=
Subject key identifier:   C4:F7:2E:0E:FB:BD:C1:81:05:84:1D:4D:41:7D:93:29:23:7F:7E:B1
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          F4
Signing time:             Mon 27 Jul 2026 08:27:29 +0000
Manifest this update:     Mon 27 Jul 2026 08:27:28 +0000
Manifest next update:     Mon 03 Aug 2026 08:27:28 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: kpD0HLjDtvG3cuc7cPjKQbrmzX+XaU5lgJZint5vVcE=)
                          2: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
                          3: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Jul 27 08:27:28 2026 GMT
            Not After : Aug  3 08:27:28 2026 GMT
        Subject: CN=6a671671-ddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:79:c3:3d:54:f9:9e:fb:e7:23:37:d2:3b:
                    99:3a:19:9c:14:0d:5d:fe:60:1c:99:94:9b:ff:73:
                    f9:bd:af:4e:7a:0e:44:73:21:05:b4:a0:3d:db:b3:
                    e0:47:c3:8f:93:1b:63:94:5b:61:b1:ad:d1:c2:36:
                    18:17:03:b0:b8:1a:22:9e:7b:5f:01:05:de:3c:9b:
                    20:67:64:21:fd:8b:5a:f8:13:d3:ef:76:0b:fe:ee:
                    31:c5:cc:5e:db:2e:83:19:88:6c:45:a6:15:87:cc:
                    29:6b:9c:f0:17:0c:96:57:10:e8:ac:7e:d7:29:ad:
                    53:20:a7:52:e9:68:45:01:be:be:dd:75:9e:26:3b:
                    b6:fc:85:b8:57:7c:89:2c:75:44:8d:f6:9d:2a:4b:
                    a4:66:87:2a:7a:e3:ab:66:d4:36:44:2b:77:07:d5:
                    2c:6f:47:e3:75:ee:84:4d:1a:65:25:1c:62:7e:08:
                    06:b3:de:fc:e2:d0:78:86:d2:d0:89:1f:8e:38:43:
                    c9:7c:15:8e:fe:20:d0:03:4a:0b:1a:cc:2d:d5:49:
                    96:5e:ab:4b:8d:0a:ba:ab:4d:b1:6e:55:96:f9:b0:
                    78:61:ae:94:32:58:af:35:2b:80:f3:48:2a:c4:fb:
                    e0:2e:cf:eb:47:e7:85:00:e9:27:e3:d6:01:63:46:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:2E:0E:FB:BD:C1:81:05:84:1D:4D:41:7D:93:29:23:7F:7E:B1
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:13:a6:bd:cd:bb:c8:98:ee:7b:47:56:76:1a:00:0e:6e:c4:
         26:52:c0:34:62:b1:8d:af:4a:fd:a4:52:6e:fe:04:41:8e:81:
         00:78:f1:40:7e:54:f8:b6:a3:6c:c2:52:97:e8:bf:a0:40:e9:
         10:01:2e:8e:55:0a:27:5c:2a:bd:01:9d:ad:65:54:1e:43:92:
         99:37:f3:75:3b:8e:d5:c7:8b:21:cf:6b:65:93:24:f6:ad:ac:
         3c:a1:da:5a:b2:aa:d5:0f:b4:d1:55:aa:b1:9f:2a:19:e9:fc:
         fe:49:6a:42:aa:c3:0c:69:43:96:77:dd:e2:6a:51:b9:04:82:
         51:3c:35:b2:54:d2:88:2a:a0:32:df:8f:d4:f5:9b:89:05:d9:
         7e:b5:ef:34:5e:11:02:7a:4f:3b:d6:7e:1b:e5:20:e9:41:12:
         fe:14:a1:b5:a3:d7:7a:46:8f:bc:20:1d:83:4f:d7:b7:8d:f6:
         ea:ae:45:16:58:91:6c:0c:82:03:e1:7b:ea:ec:f4:3f:43:86:
         0b:9c:39:f5:da:13:4a:fb:42:df:de:f8:73:4b:24:1f:ba:bd:
         06:c3:d7:1c:b7:9e:c6:4d:a7:1d:cf:75:d9:e0:e6:52:68:42:
         0e:f2:1e:b7:d7:e3:49:8b:48:bc:fb:fa:bf:42:68:8c:c0:c0:
         08:79:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:59 2026 by rpki-client