Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
File:                     NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json)
Hash identifier:          RMxgXCV1pjDVf3koRVgAlsfu1cDBoOruaq0C50nvUTY=
Subject key identifier:   51:E9:91:32:28:19:04:80:8D:A3:EE:A1:11:83:F3:2E:6B:3D:75:53
Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
Certificate issuer:       /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
Manifest number:          01BD
Signing time:             Sun 05 Apr 2026 03:23:39 +0000
Manifest this update:     Sun 05 Apr 2026 03:23:38 +0000
Manifest next update:     Sun 12 Apr 2026 03:23:38 +0000
Files and hashes:         1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: 396PBOGIYp4cX3lcte6F/hAJX8Zj+4ygC/Ym7+ImpJM=)
                          2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: fAaur7LW2+pEge7BQCktlo8tOQuU2cmVWJ8Ioa474Lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
                          rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
        Validity
            Not Before: Apr  5 03:23:38 2026 GMT
            Not After : Apr 12 03:23:38 2026 GMT
        Subject: CN=69d1d5bb-a8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:55:72:c1:d8:ad:20:d5:cf:c4:f8:73:b4:
                    15:7a:c4:b0:74:00:5d:a8:4f:69:4c:13:9b:cf:14:
                    08:b1:64:e5:9d:7c:be:41:38:7a:84:c2:ca:1e:79:
                    42:24:81:f0:f9:c3:52:f8:b3:97:7a:e5:e4:63:f9:
                    48:b8:ca:51:2f:ba:ef:be:7c:31:64:51:1a:72:4f:
                    c3:f7:88:7d:12:90:c0:0a:83:69:b0:bd:86:ff:e7:
                    e5:b6:c9:d8:fb:ee:f0:e6:b0:cc:47:3c:77:3f:7b:
                    58:2d:d9:46:5b:12:95:53:bd:75:3e:0e:92:91:c6:
                    65:a2:ce:e2:74:28:83:34:11:15:5e:a5:f2:2a:1d:
                    6a:27:10:e5:9b:b2:6b:fe:04:40:f6:a7:0b:94:23:
                    94:c8:bc:25:81:db:67:8c:cb:db:ac:f3:fb:56:7b:
                    49:57:42:0c:ac:13:77:80:d0:ff:27:90:0e:d5:32:
                    28:c4:ad:56:bf:27:72:40:0e:bf:9c:f0:87:d7:e8:
                    3e:ac:bc:21:f2:2b:15:72:7f:12:dc:a4:60:a2:4a:
                    fd:6e:62:e5:9d:a4:1b:d2:ee:67:bf:68:36:df:cb:
                    51:db:0e:3e:62:42:5d:b7:d2:06:eb:f7:3c:54:7f:
                    ea:4a:56:de:b8:90:83:9d:ac:6b:27:ed:a1:94:4c:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:91:32:28:19:04:80:8D:A3:EE:A1:11:83:F3:2E:6B:3D:75:53
            X509v3 Authority Key Identifier:
                keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:5d:70:fb:89:e6:f1:d2:4b:7e:a9:4e:1c:31:9c:86:6a:
         ee:c2:75:ab:47:7b:00:79:11:73:20:ac:59:90:00:0d:a2:70:
         0a:8a:79:c2:3f:0c:ae:5a:2b:d6:75:e6:ff:bc:21:db:9a:1e:
         1d:71:8e:f4:2d:0d:69:d4:1f:19:eb:4b:df:2d:43:58:3f:a5:
         3c:fd:af:e1:9e:6b:5e:0a:14:1a:1f:50:28:34:85:7b:de:44:
         7d:a7:0b:3f:d6:07:5a:b3:8b:b6:ae:95:13:2a:0e:e6:7c:93:
         5d:ed:8f:a6:26:f7:e8:31:f1:f8:89:37:64:85:14:be:82:65:
         77:19:d6:a9:d9:87:1e:11:3e:31:24:6c:26:8f:05:dd:cf:2b:
         ae:45:96:df:55:ba:33:32:b1:29:72:7c:95:a7:1e:49:b7:f3:
         93:4e:4a:78:3e:b2:85:30:a9:d0:6c:2e:03:d7:5f:00:a3:2a:
         02:00:a4:88:50:a6:1e:93:75:c8:df:f6:90:2b:b9:69:3a:6b:
         0c:b7:94:ac:8b:e8:c9:2c:20:49:8f:22:4e:f4:ce:16:00:fd:
         b7:56:d6:84:ff:73:3e:cd:a6:05:cd:41:40:e6:a9:ac:7c:07:
         3e:40:6d:a6:89:0b:85:e7:05:3b:07:ab:6a:7d:eb:20:3a:53:
         c9:11:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:04 2026 by rpki-client