Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File:                     NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier:          8R/atHHgVn+QFZCGB49AGVND/a3HvQTY2Ff8pKl00mM=
Subject key identifier:   E7:1F:E8:CC:ED:B0:01:AB:50:7D:A2:FF:55:3A:DE:D5:A4:26:39:69
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer:       /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number:          01CB
Signing time:             Mon 01 Jun 2026 04:38:06 +0000
Manifest this update:     Mon 01 Jun 2026 04:38:05 +0000
Manifest next update:     Mon 08 Jun 2026 04:38:05 +0000
Files and hashes:         1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: aTNWHDMOpEL3tIe6ekSpTf+K3F4Vwmws/QcOafaGKIY=)
                          2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
        Validity
            Not Before: Jun  1 04:38:05 2026 GMT
            Not After : Jun  8 04:38:05 2026 GMT
        Subject: CN=6a1d0cae-4b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:f0:3e:ef:00:8b:be:17:31:1b:9c:26:20:
                    0f:ef:ef:3a:08:05:a8:c6:60:44:a9:b2:15:fc:61:
                    0d:94:9a:49:e4:70:ed:24:a3:7a:b2:10:0d:1a:dc:
                    57:e4:d8:15:63:52:05:ba:48:06:e5:33:5d:51:6a:
                    d8:a7:86:ed:46:4a:54:0d:fa:01:25:a5:50:c2:ac:
                    9c:e2:40:4e:ad:47:83:17:75:85:49:c4:c5:cf:1c:
                    ec:db:ab:bf:17:83:e2:6e:9b:3a:5c:8c:e7:20:52:
                    7b:b4:7c:ba:07:8d:d3:93:11:9c:e7:79:c6:cf:4c:
                    31:6a:66:5d:27:41:3f:37:0e:6f:65:e1:1c:9c:da:
                    38:d5:c5:2c:52:8a:aa:1f:a6:3a:97:b8:69:4b:be:
                    8f:54:9e:be:c6:ac:c8:e0:b5:75:b3:95:ff:eb:13:
                    b2:73:57:68:d8:6b:fe:94:01:3d:bb:d3:92:74:6f:
                    72:a2:e2:b2:36:4c:70:9e:98:1e:df:ad:82:a9:61:
                    1f:6b:34:bb:7f:03:ed:d0:13:d0:c3:10:b4:33:90:
                    e2:31:76:4f:ba:ff:16:0e:d3:99:70:e6:ea:3c:cd:
                    32:e0:c4:f6:85:6b:d4:ff:0d:17:aa:47:cf:3c:3e:
                    c9:6c:02:8e:e3:21:6e:0e:4c:94:4e:28:63:02:27:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1F:E8:CC:ED:B0:01:AB:50:7D:A2:FF:55:3A:DE:D5:A4:26:39:69
            X509v3 Authority Key Identifier:
                keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c5:66:9c:19:26:dd:de:4b:e5:3b:5c:60:89:f7:de:89:bf:
         26:69:0b:03:d7:23:84:f9:f1:49:71:b9:77:6e:94:a5:39:05:
         ab:75:1e:9e:3c:02:ec:de:c7:69:5f:41:31:f8:f0:ae:b2:15:
         eb:d7:99:b4:8c:86:6f:83:67:ba:cc:6a:92:70:68:08:ec:e3:
         e5:1e:eb:71:7a:86:85:a4:15:c5:a5:b7:95:45:73:31:ba:82:
         12:e2:2b:ec:ec:5a:89:8c:bc:a9:9a:9c:24:96:40:3a:b8:68:
         40:6f:09:4a:53:98:a5:2b:06:26:b5:7c:16:df:e7:fd:a8:fd:
         25:57:d5:fd:11:0e:45:1b:f9:99:a7:8a:61:b8:c6:08:61:de:
         33:a4:f5:18:46:df:7a:df:df:73:2e:a5:33:c3:1c:5c:5e:84:
         90:d4:43:87:a7:be:1c:6c:8e:09:b0:66:7f:ef:12:aa:f4:37:
         80:ab:9b:f9:25:b0:66:d6:d1:a4:0f:50:0a:54:e5:55:72:71:
         7f:50:78:18:94:8c:76:63:d0:c4:37:bd:31:25:b8:d8:1d:60:
         73:7c:6e:e9:04:d4:38:86:8c:7c:57:09:f0:a0:34:58:29:43:
         2c:c4:b4:9d:77:4d:33:a0:cb:8b:bf:37:0c:45:ac:ab:27:ba:
         82:2b:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:48 2026 by rpki-client