Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File:                     NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier:          I4AGwBRnEKcUSTjo34nutU8faZvL3AS6M1VEA/TQDW4=
Subject key identifier:   B2:D7:87:8E:8E:79:C3:EE:96:A0:CD:92:4E:10:39:40:AA:1F:18:DB
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer:       /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number:          E6
Signing time:             Wed 19 Aug 2026 07:14:21 +0000
Manifest this update:     Wed 19 Aug 2026 07:14:21 +0000
Manifest next update:     Wed 26 Aug 2026 07:14:21 +0000
Files and hashes:         1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: Jc17snF5iXTn0zgG5yuhcVBdnHlug27Xam/BQ05fk+8=)
                          2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: n7sRPa6I69j+h39GN76+PY3SuYecQbYjjiiW9wMz2wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
        Validity
            Not Before: Aug 19 07:14:21 2026 GMT
            Not After : Aug 26 07:14:21 2026 GMT
        Subject: CN=6a8557cd-7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:dc:58:46:e5:fa:a8:83:0c:a4:e7:a7:ed:
                    d4:2d:98:9e:9b:78:ce:8c:56:9a:b5:4a:ab:a9:4e:
                    a3:b4:69:6d:d6:f2:20:28:e7:0c:3d:b0:e3:35:a0:
                    da:d1:ad:33:89:29:5f:9b:ff:89:42:90:23:0d:64:
                    e1:9c:0c:ee:c2:49:d5:cf:bc:77:09:6a:38:eb:36:
                    8d:68:5c:7a:a1:02:8e:05:c9:ea:63:dc:8f:14:69:
                    cb:06:6c:c6:3e:11:65:96:5f:8d:fb:24:18:81:f3:
                    78:f3:cf:7d:e3:14:70:41:fd:58:ab:40:4e:82:8b:
                    8c:df:22:f7:c7:ad:22:32:08:f6:14:ad:31:f6:30:
                    7e:9c:3a:c5:1d:0e:ab:5e:ff:c5:94:cd:8a:98:65:
                    09:7c:5e:79:98:d1:a1:ca:7c:4d:aa:af:94:7e:23:
                    c0:d8:51:91:d3:d9:21:99:eb:55:ab:a4:d5:aa:73:
                    1e:47:1d:cc:7e:66:28:8c:bf:ed:1f:32:65:9c:f7:
                    5f:d0:a6:b5:e0:fa:ef:07:f9:c7:5c:bd:fe:87:d2:
                    1b:3e:82:77:01:db:de:17:d0:59:89:f7:1a:37:89:
                    c7:e3:72:2b:02:6c:d5:ff:d8:a8:f3:51:35:10:49:
                    06:97:4f:72:58:7a:d6:85:45:59:07:8f:29:52:bb:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:87:8E:8E:79:C3:EE:96:A0:CD:92:4E:10:39:40:AA:1F:18:DB
            X509v3 Authority Key Identifier:
                keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fa:e2:00:a4:f2:ea:1b:aa:ca:82:7f:f9:af:a5:b3:8f:37:
         39:f6:dc:ec:fc:54:5f:9c:55:05:99:a0:c4:e3:cf:d8:7d:03:
         9b:c9:cc:19:b3:10:24:42:00:57:8b:60:41:10:41:b3:c0:35:
         03:3f:31:9b:ac:01:b2:60:bb:e2:65:c6:fe:7f:df:0e:b1:41:
         4e:c6:3a:8d:60:d1:0c:0d:62:be:4b:ca:f1:83:8b:1e:e5:10:
         49:74:a9:ea:dc:f4:c9:2e:ab:20:29:d3:80:e2:4f:dd:81:c9:
         ef:32:1b:6c:bd:95:13:c0:ad:7c:52:d2:a4:d3:65:4c:94:4f:
         b2:dd:d3:11:a7:96:e8:fd:c8:84:91:26:6f:42:e7:d0:04:6d:
         0f:1a:ba:c9:74:8f:f8:86:ff:38:96:f2:c7:8f:fe:7f:98:c0:
         d8:80:38:b1:08:4b:d0:78:8a:e1:62:eb:04:65:7e:cf:2b:18:
         a7:b9:a4:72:2b:60:fe:72:63:9a:ea:46:a6:5f:d8:ea:84:b7:
         32:1c:39:97:4e:00:40:51:cc:ed:6e:36:03:3a:54:8a:21:c1:
         18:72:75:83:15:d2:10:2b:8d:8b:a2:22:c3:ad:72:83:4b:1e:
         88:97:54:0b:ab:9a:23:ab:b7:99:a7:52:6a:3f:62:57:fb:65:
         68:56:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:56 2026 by rpki-client