Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
File:                     NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json)
Hash identifier:          CcweiOVC/IOPt19oxMTeVsJ4eZVf4K3zlkwQ5TpXvU8=
Subject key identifier:   A7:0B:1D:8D:D3:E1:DE:67:02:F2:98:39:36:90:F7:EC:9B:FD:02:5F
Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
Certificate issuer:       /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
Manifest number:          03E7
Signing time:             Wed 19 Aug 2026 00:51:10 +0000
Manifest this update:     Wed 19 Aug 2026 00:51:10 +0000
Manifest next update:     Wed 26 Aug 2026 00:51:10 +0000
Files and hashes:         1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: 3nSpu57N65pbJFKfBMI7cwZ4DMa8IxjxEaXlM1gvHF0=)
                          2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: G58s+WAEg4C4LutKoAsZWg3Gtc1DpCuEN4PtWpnwCRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
        Validity
            Not Before: Aug 19 00:51:10 2026 GMT
            Not After : Aug 26 00:51:10 2026 GMT
        Subject: CN=6a84fdfe-3062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:4e:58:60:43:75:08:74:49:5d:23:25:f3:
                    00:de:ee:ed:a5:66:43:87:39:b5:27:5e:b9:04:66:
                    66:5f:77:63:b3:a4:68:8d:d9:55:de:0d:f1:45:e4:
                    cd:49:ab:37:9f:44:17:4f:3d:ab:8b:ac:45:f5:73:
                    e6:1d:3b:ad:b0:bb:66:b2:34:4d:fb:ab:ca:0e:57:
                    46:9a:f3:96:ab:90:1a:4e:ce:1d:fa:62:77:68:f0:
                    87:0b:9c:17:b0:a2:a7:78:e2:24:e1:25:f0:ea:ef:
                    cb:2e:d7:4c:de:5f:26:78:ef:3f:a3:d8:56:e6:2b:
                    06:26:30:67:99:b0:4e:d6:10:08:f2:3a:e4:4f:dc:
                    78:1d:a1:0c:1c:dc:ab:06:e3:cb:99:5c:2d:8d:37:
                    46:c9:dd:35:5b:91:94:1c:0b:2a:70:9a:98:8f:33:
                    e3:2a:32:07:dc:e8:92:dc:6f:20:b8:a0:92:24:06:
                    df:8d:a8:40:83:3c:c2:5a:89:ed:1d:bd:35:cb:ae:
                    5a:39:dc:2f:3d:de:95:60:4f:cc:51:43:35:2c:91:
                    aa:b1:ab:6d:78:6b:87:bb:39:99:17:4d:ce:1b:eb:
                    f0:9a:b1:df:f2:87:7e:79:fb:d6:66:7a:eb:55:a0:
                    92:f5:26:94:86:44:97:27:95:81:7f:8d:d2:1a:32:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0B:1D:8D:D3:E1:DE:67:02:F2:98:39:36:90:F7:EC:9B:FD:02:5F
            X509v3 Authority Key Identifier:
                keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:9e:e4:37:38:63:9f:bc:b4:c7:a8:07:08:1f:eb:73:01:
         2a:f3:e9:82:24:af:2a:de:56:c7:ba:42:5d:19:3c:93:0d:72:
         e2:d7:ba:22:56:89:69:f4:ea:e6:5c:95:1f:10:04:1c:86:a4:
         9c:e0:c4:14:fa:02:14:ce:d8:20:b6:93:db:0b:ed:a5:88:61:
         4d:76:3d:7f:77:43:25:ad:f9:3f:e3:a4:98:28:1f:e8:4b:0b:
         91:a5:55:41:4c:a2:9d:6c:59:ea:b3:b5:b7:cd:1b:93:37:c9:
         b1:79:2d:df:38:4c:dd:7f:8d:c7:c1:68:94:db:d9:db:0d:3d:
         eb:2f:cb:c6:e3:1d:34:04:ba:e7:4c:10:22:fa:cc:97:a3:a9:
         74:8d:ec:3b:bf:5c:a2:f3:1b:c5:f3:66:c7:1f:e5:bd:65:36:
         4e:c2:02:91:6f:d4:75:2e:b5:85:ff:4c:a1:ef:7f:08:ca:68:
         56:3e:32:ec:5f:86:69:9b:0a:75:ec:3b:10:ee:16:dc:b2:dd:
         7f:57:8b:0e:b8:91:8b:da:18:ac:f3:d8:b0:0e:4b:0b:72:69:
         aa:6c:3f:86:d1:d2:eb:a3:a6:36:ed:fc:ea:fb:7e:14:82:5f:
         3f:2d:d6:b6:01:42:58:cd:f7:87:b5:90:a6:9a:93:49:e4:4b:
         5a:48:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:05 2026 by rpki-client