Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
File:                     Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json)
Hash identifier:          voXFCeIEr+Dwzgl/LGZIQgiONOXfv99D1EOGJbD3sO4=
Subject key identifier:   D9:67:50:79:97:0D:8C:48:02:8C:C3:6A:71:8C:86:AF:AE:23:B0:46
Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78
Certificate issuer:       /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
Manifest number:          01EC
Signing time:             Sun 05 Apr 2026 02:50:07 +0000
Manifest this update:     Sun 05 Apr 2026 02:50:06 +0000
Manifest next update:     Sun 12 Apr 2026 02:50:06 +0000
Files and hashes:         1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: oqVz2e4Jw2YgPHSJzmZyFkAGuMsU/GVI9GzMi4hhjE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl
                          rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
        Validity
            Not Before: Apr  5 02:50:06 2026 GMT
            Not After : Apr 12 02:50:06 2026 GMT
        Subject: CN=69d1cddf-30c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:3a:4a:03:98:0b:25:c8:fd:6f:d5:da:24:
                    fc:38:ec:9a:3b:24:9e:60:b2:55:53:2e:93:a8:a5:
                    5c:b8:f4:79:7d:d0:d7:49:ee:4e:7d:20:4f:d3:82:
                    b2:87:82:de:b8:32:75:e4:f3:01:1b:52:b5:ff:d1:
                    60:6e:d6:13:37:37:df:5f:41:d4:16:6f:85:d5:29:
                    4e:2d:44:e2:38:6c:29:b6:fc:d4:18:0e:0e:6a:30:
                    46:85:fe:32:e9:a8:c2:e8:fc:d4:01:9c:d5:2a:38:
                    28:af:ee:ee:92:2c:ae:68:b2:aa:31:81:2f:3d:ce:
                    52:9f:cb:04:2a:2a:c5:39:28:eb:c6:f5:dc:93:62:
                    f7:23:fd:72:6f:7e:15:5d:d2:2b:1c:d1:e8:26:85:
                    01:d8:a5:e8:68:69:6d:18:72:52:35:53:7d:3d:c6:
                    94:05:90:17:3f:d7:76:e1:34:b7:33:94:22:cb:f5:
                    2d:b8:75:fd:cb:3b:dc:84:31:b4:b3:e2:69:9c:3b:
                    29:35:08:70:76:3f:c8:19:df:c4:92:92:e7:7d:6f:
                    a3:e6:f9:0c:c3:58:96:8c:29:dd:f7:ee:b3:0c:52:
                    09:cf:42:a4:1e:e4:f8:1f:96:b4:fb:27:75:fd:ce:
                    c4:78:17:69:e8:57:b0:33:c2:39:85:93:5f:da:b8:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:50:79:97:0D:8C:48:02:8C:C3:6A:71:8C:86:AF:AE:23:B0:46
            X509v3 Authority Key Identifier:
                keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:a6:56:06:b8:45:23:f5:d3:f5:67:43:e9:ee:11:ec:eb:
         d5:12:b8:fc:4b:57:ae:ae:ef:87:81:fd:cf:15:80:36:f0:39:
         9d:72:30:d3:f2:33:f7:b1:45:ab:2b:2e:79:de:83:10:24:4e:
         46:5a:ec:be:1e:72:e2:b9:08:19:fe:f1:d8:40:7f:72:a5:0d:
         8c:90:f9:23:29:b7:98:22:fa:86:97:c6:78:5e:80:54:f2:5a:
         29:60:71:e9:07:12:77:89:02:a7:41:00:fa:a7:48:f5:47:6e:
         0b:a7:89:7c:b1:ef:c1:1f:fb:79:be:3f:31:8a:50:e9:43:54:
         f0:b7:94:98:44:ac:11:c2:7b:eb:bb:87:7d:99:75:c9:07:a9:
         f0:80:50:d2:27:d0:ae:e6:15:7a:8a:73:62:6c:2a:3b:97:d7:
         b2:b2:46:ec:9c:70:3d:e9:86:0a:97:3e:37:74:58:ac:93:a6:
         cd:8f:d8:95:71:5d:3b:2f:04:39:34:ac:3f:7d:69:de:eb:4f:
         0e:7b:8c:8d:7f:1d:a0:97:f0:21:6f:d5:84:27:fd:01:e5:57:
         6e:60:30:24:4c:cd:f7:e1:0d:e3:96:63:61:1b:d1:23:5b:ee:
         7b:32:d1:d8:93:71:0f:8d:23:93:48:a9:92:97:ba:52:fe:af:
         54:47:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:33 2026 by rpki-client