Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
File:                     npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json)
Hash identifier:          aZPptaPN+xTBS4oNs0cprBLSKlEPW7+jUOrrJEdo0dA=
Subject key identifier:   D7:E5:3F:66:18:F3:C5:DF:11:59:35:86:9D:6C:26:35:4A:E9:22:B0
Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF
Certificate issuer:       /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
Manifest number:          5F
Signing time:             Sun 05 Apr 2026 07:24:23 +0000
Manifest this update:     Sun 05 Apr 2026 07:24:22 +0000
Manifest next update:     Sun 12 Apr 2026 07:24:22 +0000
Files and hashes:         1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: vYUFO3D6FYkaJsxr/LBcPTXlMMxLcqQuZGXoE1J0GaI=)
                          2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: IjXlQYKLRCjmgswoL3z/dJCGoj+WqZm8SD6r7cCJOG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl
                          rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF
        Validity
            Not Before: Apr  5 07:24:22 2026 GMT
            Not After : Apr 12 07:24:22 2026 GMT
        Subject: CN=69d20e26-92e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:7e:1e:b3:0e:a7:e1:89:28:1d:ac:5f:a3:
                    ae:ef:27:54:91:15:aa:6f:a0:10:68:d4:0e:df:9d:
                    33:ca:c5:e8:ad:81:e8:b2:dd:77:8a:ec:a0:98:e1:
                    d9:2e:62:b3:60:1f:8b:1f:b5:07:96:35:5e:8e:10:
                    35:f2:a1:ac:1a:49:9f:0e:3a:df:72:ac:6e:6c:1a:
                    8d:92:11:00:b2:30:2a:26:ec:cf:d4:04:3c:17:e8:
                    74:e9:e6:a4:2e:69:62:73:22:a4:f1:fe:c5:87:eb:
                    e7:77:80:ac:56:df:3b:7b:5f:14:00:9f:cd:f4:b6:
                    31:86:1e:ba:c2:c4:d0:0b:da:87:46:e8:82:8c:71:
                    c4:5c:80:00:28:55:99:7f:53:f2:e3:53:c1:33:ed:
                    bb:55:ff:04:9e:0a:4d:45:41:61:70:58:1e:0b:15:
                    63:93:c5:f5:4f:89:db:2f:55:d7:8a:29:60:c8:6c:
                    bd:ec:1c:ea:7a:4a:a9:23:e9:db:63:49:69:30:1d:
                    25:09:35:ce:dd:1f:a7:18:fc:db:a0:00:77:35:b2:
                    d8:c7:ac:09:10:6d:1f:b2:62:7a:9e:14:71:e3:42:
                    59:cf:27:18:59:55:ac:c2:fc:5e:31:69:a5:44:4c:
                    83:f9:5c:dd:29:a5:0f:d5:51:2c:54:eb:f1:21:8d:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:3F:66:18:F3:C5:DF:11:59:35:86:9D:6C:26:35:4A:E9:22:B0
            X509v3 Authority Key Identifier:
                keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5f:f0:c7:3e:d6:28:76:ae:ef:b7:54:0c:74:fc:14:c2:fd:
         ca:fe:95:77:eb:70:50:a5:30:b4:8a:c7:76:a9:d0:25:45:b1:
         d3:39:dc:11:ec:c4:b1:ff:4c:fb:4c:ce:c9:9b:3d:31:ec:79:
         d9:ed:06:f5:a4:a4:b7:c5:0e:43:1e:bb:29:d4:ea:48:f7:7f:
         aa:8c:93:9f:d9:b1:fb:15:ab:8c:2a:37:c7:ff:ae:01:46:38:
         50:0f:4f:13:55:8c:bc:86:76:77:0e:17:39:30:70:82:e5:58:
         58:4a:29:1b:45:8b:35:1d:e2:91:00:46:e6:60:51:a3:64:4f:
         e1:37:fd:ce:3e:d0:56:49:fd:7d:ca:5a:f4:90:7e:98:ae:c1:
         eb:0a:76:ef:4c:c4:04:12:64:70:f7:55:72:ee:e7:02:08:59:
         4e:29:2a:77:c1:1b:d3:44:dc:4b:0b:74:a2:96:2e:b8:1a:6c:
         7e:24:4d:0b:dd:a7:66:7b:35:f5:bc:d2:ca:b5:d2:d1:fb:bd:
         c1:7d:97:70:dd:9f:8b:60:9e:78:31:8c:84:a6:0c:ed:ff:cb:
         99:4d:e2:3b:f1:77:52:b0:78:ba:b5:c1:e7:a3:ce:f2:d7:f0:
         d3:ca:96:62:ed:12:df:fc:7a:d1:c4:12:a3:4f:e0:00:39:08:
         82:97:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:07 2026 by rpki-client