Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          KUaoZASQK+yhyCxzg8B4eRjccwv2S1bjO2yduQebL10=
Subject key identifier:   10:84:32:19:DD:BE:0F:D5:08:45:7C:B2:27:E5:99:34:32:B6:10:08
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          C0
Signing time:             Fri 17 Jul 2026 08:11:10 +0000
Manifest this update:     Fri 17 Jul 2026 08:11:09 +0000
Manifest next update:     Fri 24 Jul 2026 08:11:09 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: KB6MO3oSZ+wmU5dfT7oT8wE5WLbB6zQUDObKUs+m8Qs=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jul 17 08:11:09 2026 GMT
            Not After : Jul 24 08:11:09 2026 GMT
        Subject: CN=6a59e39d-c523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:c6:fd:32:03:55:be:fb:9a:43:30:80:27:
                    b9:b3:88:67:cb:df:e5:ae:69:7e:c0:19:40:75:38:
                    3c:7b:2f:ef:f1:64:3d:86:de:14:8d:3b:31:73:cd:
                    9c:bd:18:62:49:70:98:91:81:86:ed:6e:84:23:88:
                    15:13:11:7d:cb:55:c2:2d:d8:40:b2:ba:d5:4d:cf:
                    75:01:7c:16:ba:0b:75:0b:9a:2b:78:dc:49:4d:43:
                    dc:bb:4a:e1:cc:0c:b9:f9:09:a1:c5:13:79:57:42:
                    56:1b:e3:fd:3b:cf:e9:ad:ce:9a:0a:fe:f7:7d:4d:
                    ac:b4:6b:61:82:ed:fb:3c:19:a5:20:87:12:55:2b:
                    45:37:33:e3:7f:d9:4c:94:53:4f:61:db:62:b4:a0:
                    3d:ed:f3:d0:0e:c3:ac:93:35:e6:d7:e2:77:84:0c:
                    b9:93:46:8b:16:0b:b0:f6:10:0f:2f:40:9c:70:07:
                    b9:cc:df:33:9e:27:44:78:00:41:8f:20:fa:a0:19:
                    86:1a:dd:0f:38:05:97:ff:c5:3b:bf:19:11:d1:ba:
                    5b:35:95:9d:f0:f6:ed:ab:be:15:11:1b:33:b2:18:
                    69:7d:4e:18:09:70:1f:5b:55:50:4b:29:f3:1f:19:
                    6e:38:b1:08:30:bd:04:d3:5b:3c:00:e2:90:5b:2a:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:32:19:DD:BE:0F:D5:08:45:7C:B2:27:E5:99:34:32:B6:10:08
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cb:10:90:bb:16:f4:d6:f6:b8:49:33:df:06:0f:b0:6e:9a:
         6b:00:13:d3:51:00:0c:47:7a:4a:91:3c:3c:cf:1b:9b:14:a5:
         b0:96:61:b9:63:64:b3:16:8f:f1:50:26:c8:d4:76:72:50:86:
         e3:4e:77:46:ad:c9:f0:12:a4:55:67:6d:5c:ec:53:b0:0f:ff:
         a2:cf:06:20:50:01:6a:a2:06:d1:46:3e:70:5f:df:26:1e:bc:
         27:c6:dd:13:93:0f:f1:fe:93:d7:0c:88:a9:c4:07:34:30:24:
         40:7b:69:2a:81:e0:60:36:e4:6e:d4:07:34:31:3f:be:be:09:
         83:27:8a:01:69:4c:57:46:b7:d1:de:42:33:42:18:58:ef:e1:
         64:3c:9e:6b:1a:a9:49:e2:c6:20:01:c2:0e:85:a0:00:1d:61:
         17:d6:b3:03:6a:3f:48:7b:05:68:50:2f:f8:ad:5c:96:8b:cd:
         19:8a:d9:97:54:a2:6e:0d:e0:e7:4e:f5:a4:47:ed:63:02:69:
         51:5f:74:00:4f:17:6a:7d:f2:b0:32:9c:ca:41:3d:75:fe:de:
         5e:e8:d5:39:47:11:82:6c:aa:67:ea:ec:22:43:91:a9:55:b7:
         99:f1:fc:3c:fd:4c:0c:f2:8a:9f:0a:4a:27:24:4e:86:95:de:
         c2:f7:f9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:45 2026 by rpki-client