Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
File:                     nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json)
Hash identifier:          1quLhYDFXl+8yl+f5HyqKHBjAajEedy4Xgra+1AryO4=
Subject key identifier:   1C:BA:1A:88:B6:7B:CF:D3:F5:ED:41:CC:89:71:79:0A:6F:13:3E:0E
Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA
Certificate issuer:       /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
Certificate serial:       092F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
Manifest number:          0927
Signing time:             Sun 31 May 2026 20:48:01 +0000
Manifest this update:     Sun 31 May 2026 20:48:01 +0000
Manifest next update:     Sun 07 Jun 2026 20:48:01 +0000
Files and hashes:         1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: 3cmGEaWZAwetXRdAtIA2DViUbRSbYWFse4w5Q23SquU=)
                          2: FE60ECB0879311EB84047577C4F9AE02.roa (hash: z8K9NFfgSR+lYBTmglUzfygULgy/XVJpR7AJN5E7qvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 20:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
        Validity
            Not Before: May 31 20:48:01 2026 GMT
            Not After : Jun  7 20:48:01 2026 GMT
        Subject: CN=6a1c9e81-7d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:0a:72:38:7c:6f:9c:dc:86:a2:21:e0:a0:
                    d1:4d:7e:7d:f0:b9:68:0d:e0:1d:49:38:01:33:a1:
                    89:f3:01:d9:9b:46:71:54:d7:0a:00:1b:22:e3:eb:
                    a1:c2:bc:28:a1:a4:a7:df:5e:9c:ae:42:3b:1a:29:
                    74:d7:6e:b1:fd:52:71:6e:3d:af:46:2f:27:a0:b1:
                    cd:1f:76:b6:11:1c:5d:1e:bf:18:0a:cc:da:d7:93:
                    d4:20:c4:6b:f8:12:45:84:7a:46:a2:01:8e:81:18:
                    cc:db:49:21:f6:c3:f8:14:b3:2f:e3:f3:70:41:b3:
                    7a:0d:f5:b2:4c:03:de:86:34:72:2f:b6:95:d1:5b:
                    bf:ff:e9:74:a6:47:51:23:d9:12:e4:e6:51:4b:6d:
                    c0:73:44:74:c1:22:c7:35:90:b2:51:ad:48:29:0d:
                    13:82:1e:68:d8:bb:91:1f:39:4a:f0:fd:6d:7a:e4:
                    64:de:d0:8d:02:98:b5:c1:87:4c:e7:a4:0d:ea:a1:
                    b5:d6:f9:c7:78:32:60:13:3d:2e:c5:39:11:08:9d:
                    32:6f:55:83:eb:df:3e:22:60:f6:fa:53:0d:24:32:
                    1c:90:a1:9a:01:64:00:6b:f4:48:9a:0c:77:c7:94:
                    5b:d5:b0:09:e8:43:b9:e5:f6:c7:cf:4d:62:04:b3:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BA:1A:88:B6:7B:CF:D3:F5:ED:41:CC:89:71:79:0A:6F:13:3E:0E
            X509v3 Authority Key Identifier:
                keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:56:10:79:5d:6e:8b:c3:c5:90:4b:45:6a:0e:ff:56:25:
         c0:ae:29:5b:b0:e4:bc:2c:88:d8:94:af:b1:34:b3:38:b4:31:
         36:d7:13:05:17:52:2e:ab:68:6c:68:8e:d8:66:70:93:ba:c4:
         9f:0f:ff:c2:0d:ea:8f:79:57:a7:4e:7b:5f:0c:87:4d:92:f6:
         ea:36:ba:a4:f7:42:47:9c:cc:6b:96:c1:16:ab:70:07:2a:d5:
         d6:34:e4:ef:e6:a3:c0:9c:25:70:c8:72:62:0f:8d:6a:92:b9:
         91:1a:32:77:db:3a:a8:f5:4e:59:32:4e:0b:75:af:dc:23:25:
         60:a2:92:ae:a2:45:f2:c9:50:74:b6:ce:37:85:76:58:14:3d:
         6d:61:89:29:bf:c8:cb:0f:32:e4:19:83:e4:48:a6:66:e8:f5:
         54:9a:a0:a2:c1:12:55:8a:94:7c:48:b4:1c:71:5a:b1:57:dc:
         3a:97:c7:e1:81:bf:8f:01:1d:8f:1d:42:b2:ec:8a:33:80:f2:
         8a:40:ee:f4:80:5d:5a:00:16:66:11:8c:d2:72:b8:a0:9a:63:
         d1:45:ed:e1:3a:e6:51:18:39:36:f9:85:7e:60:98:06:53:30:
         ba:85:42:e5:61:4b:19:df:1c:7e:8d:d0:40:f2:4e:af:3a:d1:
         04:ab:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:39 2026 by rpki-client