Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
File:                     nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json)
Hash identifier:          19zxnHPab1B1D00kiQgyTZCltPPPGYRgyp6Jb8UqLWM=
Subject key identifier:   AE:EE:AC:15:C6:3E:FB:E0:5B:A5:88:A1:AC:AB:19:6C:13:98:ED:DD
Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
Certificate issuer:       /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
Certificate serial:       2AE0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
Manifest number:          2AD2
Signing time:             Mon 06 Jul 2026 14:24:27 +0000
Manifest this update:     Mon 06 Jul 2026 14:24:26 +0000
Manifest next update:     Mon 13 Jul 2026 14:24:26 +0000
Files and hashes:         1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: 9fW4G1Rv65kV4FHiNtsOIbkWXaYgpqGoEf3uK79i/DQ=)
                          2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: Pj58dNaZu/U/JcWFr9d0FmcQsI/n3fUrfDxW8/v49HY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 14:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10976 (0x2ae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
        Validity
            Not Before: Jul  6 14:24:26 2026 GMT
            Not After : Jul 13 14:24:26 2026 GMT
        Subject: CN=6a4bba9b-1258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:bc:88:9c:44:b4:ea:94:a3:16:ab:2e:5a:
                    4a:cb:39:ed:c1:1e:5e:21:7a:14:d6:41:07:b5:40:
                    d0:06:40:31:a0:94:4d:44:e9:70:ef:74:e8:bf:2d:
                    54:66:50:c5:39:b3:e3:87:95:4d:57:27:a0:ba:78:
                    b0:a0:83:5a:fb:4f:29:c5:3f:93:f8:36:76:ce:eb:
                    ee:d6:47:07:25:79:58:56:6b:b4:99:73:a5:59:7e:
                    53:e2:42:39:df:70:c0:6c:53:ea:c1:1a:1e:99:f4:
                    98:45:38:bb:b6:ba:38:b3:ff:ef:79:a9:b1:f3:5e:
                    21:b6:58:c2:c2:4b:3e:99:5e:fa:75:31:fa:46:ec:
                    dc:3f:9f:91:7b:54:98:2b:1b:36:db:02:ff:77:22:
                    e5:b7:ba:36:89:16:66:c6:60:c1:57:1b:6c:da:25:
                    e4:e7:85:57:69:c6:e1:fd:69:8b:20:b7:6b:8c:ad:
                    5f:85:32:cc:ec:cf:01:d5:e8:e3:8a:e9:85:17:8a:
                    15:0a:3f:46:43:ee:6e:38:72:15:9c:70:44:79:7e:
                    2e:b0:dd:1e:e6:2e:5d:a6:1e:ad:7a:0e:c5:1f:c6:
                    fb:42:88:e3:91:9d:95:d5:35:f2:f7:e8:45:0a:6e:
                    6a:d1:96:d1:c1:71:8f:bb:84:e6:d4:8c:d8:b5:91:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:AC:15:C6:3E:FB:E0:5B:A5:88:A1:AC:AB:19:6C:13:98:ED:DD
            X509v3 Authority Key Identifier:
                keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:01:54:71:47:9e:9d:ae:5f:d9:56:59:13:73:68:ef:bb:
         e9:1c:4a:a0:cb:f6:8b:49:3e:e3:01:83:c3:aa:6a:05:eb:11:
         63:f6:85:97:6f:4d:f9:2e:b0:5b:54:37:9e:6b:c1:f0:cb:79:
         bd:0c:b1:56:e3:1b:91:8d:9a:b1:5e:62:c0:dd:5b:33:0a:8f:
         5f:7a:96:0a:15:69:0d:63:4e:8f:48:f9:86:2a:d5:1c:6a:dc:
         f2:d1:1e:42:04:98:c4:91:ed:63:fb:83:ff:af:37:15:79:1e:
         b1:dc:e8:92:1d:b0:aa:c3:86:2c:f5:d5:c3:97:44:2d:f7:62:
         12:0e:b5:6a:dd:f1:2e:ba:54:52:02:cd:29:9d:d9:5c:b4:a7:
         77:70:06:08:28:0c:b9:74:8c:94:08:4b:c2:be:d6:de:6d:b0:
         48:4d:73:24:86:2d:c2:90:79:66:c5:e3:12:9b:f1:93:b0:54:
         80:61:a8:2e:13:c5:2b:a9:b1:11:c1:87:00:8d:ab:fd:a3:fc:
         51:4b:58:6a:08:d0:48:07:80:79:5c:97:aa:18:f7:75:7f:9a:
         27:4e:cd:35:9b:63:cb:f2:0c:bb:15:98:e0:cf:33:7a:a0:6f:
         2a:79:9a:0e:7e:a2:3d:a6:94:60:68:08:17:a5:df:c0:bf:cb:
         cf:fc:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:21:33 2026 by rpki-client