Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
File:                     nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json)
Hash identifier:          Cxd663g56UR+rcQYi11/CWQwQFHBwBE7xEkXOdNYNSA=
Subject key identifier:   A0:7B:0F:B9:B3:DF:3F:81:43:90:35:D2:D9:13:93:08:3E:6C:76:C9
Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
Certificate issuer:       /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
Manifest number:          50
Signing time:             Tue 02 Jun 2026 18:18:14 +0000
Manifest this update:     Tue 02 Jun 2026 18:18:13 +0000
Manifest next update:     Tue 09 Jun 2026 18:18:13 +0000
Files and hashes:         1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: v7wjJpFDo71ivv3W4jL66hr6mmLf3W/mqBboORmAEX0=)
                          2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
        Validity
            Not Before: Jun  2 18:18:13 2026 GMT
            Not After : Jun  9 18:18:13 2026 GMT
        Subject: CN=6a1f1e65-dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:45:9a:35:7a:ee:05:60:5c:ee:b9:71:56:
                    3d:d3:a9:0a:62:c4:b3:38:9d:1f:74:8a:fe:e8:b1:
                    27:6c:d2:d0:c3:81:e2:cd:4b:78:30:c7:43:7d:68:
                    93:36:67:cd:da:5a:a8:12:fb:fc:fe:5a:a6:fe:ce:
                    90:c6:a9:c9:d6:cb:5d:74:7c:0b:01:ee:45:56:38:
                    cc:b1:a8:c3:90:86:c3:d6:f4:45:bd:89:09:e7:d2:
                    37:43:b4:98:50:da:01:52:f3:3d:a2:c8:7d:6e:03:
                    ab:fa:98:cc:79:a1:53:a5:e4:a5:e5:14:70:d8:4c:
                    b7:63:32:19:e1:48:38:ea:df:c7:78:4c:13:4e:ef:
                    b3:69:66:d1:02:0e:ec:ed:7c:0d:63:60:aa:7b:a0:
                    8e:c8:70:41:1d:ba:35:c1:75:9c:61:78:37:62:73:
                    bf:ab:a7:ca:d1:19:8e:44:ce:27:33:97:86:3e:7f:
                    36:10:69:fe:2c:f7:77:eb:90:b6:cd:ac:38:a6:a6:
                    cd:d7:f3:ea:1c:c0:26:d4:8b:d6:86:02:c3:ad:18:
                    ef:38:63:a1:7d:f6:67:f9:44:a8:62:66:4b:4a:57:
                    47:c5:9e:53:51:b3:5e:df:f8:43:1c:6b:6f:be:1c:
                    69:48:23:d4:2b:fc:c9:cb:f0:fd:e9:81:22:36:d5:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7B:0F:B9:B3:DF:3F:81:43:90:35:D2:D9:13:93:08:3E:6C:76:C9
            X509v3 Authority Key Identifier:
                keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:c4:86:f0:94:35:89:51:38:52:9c:be:0c:98:7a:5a:cc:
         d4:93:4f:b0:6a:ec:9e:d7:4b:b8:9e:2b:b0:0b:95:15:db:08:
         11:70:46:ee:e8:63:94:e8:df:ac:2a:10:ee:c2:8e:5b:85:26:
         3a:ef:a3:96:c9:e9:2f:e2:82:5a:b2:a8:ae:db:7a:9e:44:1e:
         af:77:a0:70:d0:d8:c6:a5:09:c5:98:1f:58:34:88:0e:19:5b:
         48:ce:95:99:3a:c3:c1:2f:5b:c9:00:e0:91:c9:d1:b2:ab:11:
         fc:32:f5:20:09:9f:9a:dd:66:ee:d6:85:e3:a9:ee:15:d5:f7:
         31:5d:68:53:76:34:b5:50:66:14:0e:4c:5b:36:64:b3:86:35:
         f7:4a:e8:d6:6e:48:77:42:1b:f4:a7:70:35:8c:ce:32:0b:c9:
         5b:bc:c7:c8:2c:fa:1f:7d:12:24:32:5f:a1:eb:43:f9:f7:d5:
         f0:a6:bf:b2:79:6d:c7:3e:bd:2a:61:1c:c2:ce:cf:05:c7:f7:
         49:ba:69:89:81:1f:d1:23:88:39:21:ec:55:c4:0e:a5:0d:b6:
         87:7b:1a:34:80:10:93:a0:26:22:b6:8c:9e:c8:47:13:24:92:
         ba:a8:81:e9:a3:14:7c:d9:84:0b:b1:b0:2d:fa:d2:09:53:20:
         68:cc:09:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz
RjFBRkZFMjAeFw0yNjA2MDIxODE4MTNaFw0yNjA2MDkxODE4MTNaMBgxFjAUBgNV
BAMTDTZhMWYxZTY1LWRkNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTAkWaNXruBWBc7rlxVj3TqQpixLM4nR90iv7osSds0tDDgeLNS3gwx0N9aJM2
Z83aWqgS+/z+Wqb+zpDGqcnWy110fAsB7kVWOMyxqMOQhsPW9EW9iQnn0jdDtJhQ
2gFS8z2iyH1uA6v6mMx5oVOl5KXlFHDYTLdjMhnhSDjq38d4TBNO77NpZtECDuzt
fA1jYKp7oI7IcEEdujXBdZxheDdic7+rp8rRGY5Eziczl4Y+fzYQaf4s93frkLbN
rDimps3X8+ocwCbUi9aGAsOtGO84Y6F99mf5RKhiZktKV0fFnlNRs17f+EMca2++
HGlII9Qr/MnL8P3pgSI21deZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoHsPubPf
P4FDkDXS2ROTCD5sdskwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx
NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z
MkNTMFNpR2xFM2o4YV8tSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAHL8SG8JQ1iVE4Upy+DJh6WszUk0+wauye10u4niuwC5UV2wgRcEbu6GOU6N+s
KhDuwo5bhSY676OWyekv4oJasqiu23qeRB6vd6Bw0NjGpQnFmB9YNIgOGVtIzpWZ
OsPBL1vJAOCRydGyqxH8MvUgCZ+a3Wbu1oXjqe4V1fcxXWhTdjS1UGYUDkxbNmSz
hjX3SujWbkh3Qhv0p3A1jM4yC8lbvMfILPoffRIkMl+h60P599Xwpr+yeW3HPr0q
YRzCzs8Fx/dJummJgR/RI4g5IexVxA6lDbaHexo0gBCToCYitoyeyEcTJJK6qIHp
oxR82YQLsbAt+tIJUyBozAms
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:25 2026 by rpki-client