Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
File:                     nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json)
Hash identifier:          jjJJ0IznPsz2QeuCjvl4SzhrxckXmAEmrHgfOIVbCL0=
Subject key identifier:   CF:E4:4C:08:AB:6E:41:06:3A:40:45:34:1B:EE:E2:C6:0A:0B:FE:6C
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Certificate issuer:       /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial:       0A65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
Manifest number:          0A56
Signing time:             Wed 20 May 2026 19:42:59 +0000
Manifest this update:     Wed 20 May 2026 19:42:59 +0000
Manifest next update:     Wed 27 May 2026 19:42:59 +0000
Files and hashes:         1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: vy4wwfwxzNeRyifD4lei6oC9QmpCt+3ytgzYHJ3nAMg=)
                          2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: hntqZR06bEi96YIe77PYhaN+w+8+mUWcyue+uEJX0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661 (0xa65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
        Validity
            Not Before: May 20 19:42:59 2026 GMT
            Not After : May 27 19:42:59 2026 GMT
        Subject: CN=6a0e0ec3-df31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:fa:14:05:8b:fe:4c:ec:59:e6:58:55:39:
                    0a:a1:09:45:44:91:60:e8:e9:27:11:f3:52:d1:a1:
                    72:e3:e5:3f:cc:32:91:d1:1c:d6:9b:18:b8:c0:35:
                    bf:4c:f1:02:de:b8:04:a9:23:f6:ba:29:28:0e:52:
                    87:3b:63:9e:df:9d:5c:4b:18:b8:dc:0f:38:04:d3:
                    60:59:87:9e:df:d9:43:56:60:c3:77:40:b7:a3:b1:
                    e6:08:a6:75:2e:dd:4c:82:9f:03:95:85:89:88:9c:
                    de:65:c0:c0:87:77:a4:6a:0f:7d:c2:a6:a3:0a:95:
                    f8:df:95:92:0b:3d:e3:ff:1a:15:4b:69:fc:03:b5:
                    bd:f6:1a:cf:2f:c0:a0:8f:f7:68:da:f4:99:a7:51:
                    b2:ad:31:f7:97:b4:7a:8c:11:4b:5e:58:83:c0:70:
                    93:08:ec:c3:c7:f7:03:fc:dc:53:c4:25:c0:14:36:
                    43:b7:4c:51:85:79:f6:4b:4d:c9:49:cc:60:08:f8:
                    76:c9:0d:1a:f1:02:35:29:cb:de:00:52:85:47:1d:
                    52:84:a3:6c:b6:29:ba:ab:de:e0:a5:81:1b:19:e4:
                    da:d6:de:82:1f:36:c5:b4:5d:ad:6b:64:5f:88:55:
                    e9:fd:59:de:af:b9:7d:d5:ed:1c:ca:79:fc:e2:15:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E4:4C:08:AB:6E:41:06:3A:40:45:34:1B:EE:E2:C6:0A:0B:FE:6C
            X509v3 Authority Key Identifier:
                keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:52:47:d7:ef:d1:e6:a8:8a:9b:30:d0:69:76:e1:79:c0:
         ae:66:ab:bf:46:c4:dc:7d:d1:ab:39:99:67:c4:42:4f:7e:dc:
         ee:c1:78:02:04:3c:08:c8:9b:99:a1:3e:50:3a:82:1f:4f:fe:
         4b:b6:da:88:7c:ce:2d:06:76:5c:cc:a9:9e:89:7a:15:f1:db:
         8d:c8:98:de:ce:39:4f:21:63:0a:d3:01:15:b8:24:6c:82:c4:
         b3:26:e9:74:83:35:68:f7:3c:ae:6a:81:4c:4a:f1:1e:df:bd:
         62:5b:4e:87:b1:be:25:20:ca:48:27:1f:71:99:fc:49:3a:15:
         85:ce:01:7b:23:a2:71:87:3d:20:7a:28:f9:5c:a0:9a:a0:44:
         59:dc:e0:76:85:ab:f2:8e:53:67:e8:9e:3a:17:16:f8:30:39:
         95:47:d2:cf:a9:ca:7a:a4:46:cf:41:b9:d4:6d:4c:95:df:c0:
         c1:72:28:55:a6:7e:6f:df:8c:2d:3a:2b:4e:0b:2e:3f:4b:9c:
         a3:0f:3e:3b:90:46:5f:76:b8:d4:f3:44:15:97:cb:bf:b2:be:
         89:4c:fc:5b:e1:84:a0:15:2f:e3:f0:b5:8b:bf:b5:1b:72:d2:
         64:e7:22:71:5f:96:d7:e8:c6:da:02:b3:97:e0:76:ed:bf:09:
         7c:58:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:46 2026 by rpki-client