Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
File:                     nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json)
Hash identifier:          SQHi0Eld0NX6V72jIisvyhLtw0bSIW70qJtRaN7rHqo=
Subject key identifier:   88:4E:FC:4C:6F:49:F6:AE:9B:5B:7F:9C:A0:59:4A:D1:BE:A8:B2:FB
Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
Certificate issuer:       /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
Manifest number:          66
Signing time:             Thu 16 Jul 2026 18:24:08 +0000
Manifest this update:     Thu 16 Jul 2026 18:24:08 +0000
Manifest next update:     Thu 23 Jul 2026 18:24:08 +0000
Files and hashes:         1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: DzuUCr9F8OGVHgxL1ZLIQlrN44/58us5u5I+ngg0W5o=)
                          2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
        Validity
            Not Before: Jul 16 18:24:08 2026 GMT
            Not After : Jul 23 18:24:08 2026 GMT
        Subject: CN=6a5921c8-b17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:e0:fb:1c:39:9f:b5:85:06:d8:9b:af:69:
                    e0:41:3b:25:98:6d:29:58:b9:f7:04:8c:99:8d:29:
                    20:95:cb:1f:84:43:1b:3d:a0:5f:b9:36:79:b2:3a:
                    e5:ca:99:16:29:82:a6:26:ff:db:fe:d9:bd:11:44:
                    35:c3:b4:17:dd:d3:7c:7f:15:e9:c5:78:fd:2e:7e:
                    ab:d8:7b:be:a6:b2:35:7f:fb:d2:67:1e:4c:bf:d5:
                    11:a5:e7:1a:a2:bd:b8:7e:33:2d:2e:ce:37:cd:31:
                    10:fd:4b:46:9c:d2:4c:82:1c:58:43:4b:7f:1b:1b:
                    57:88:16:cb:d7:33:61:cb:90:42:5c:b8:cc:d9:b3:
                    28:27:d7:36:d8:70:4a:e7:03:19:6a:5d:31:be:09:
                    4b:63:2d:c0:87:09:3c:ec:66:30:56:20:1b:ff:86:
                    d7:6a:1f:d6:11:48:b6:1d:5e:98:c1:01:07:91:30:
                    7a:b5:f7:dc:bc:37:93:7c:1f:d7:af:f5:4d:72:f8:
                    65:37:06:0d:97:77:26:48:be:ef:d4:28:be:78:24:
                    0a:be:e3:4e:8a:f3:f1:18:60:1e:d8:99:a8:b7:e3:
                    38:28:34:e0:a7:79:a7:7c:9c:f5:3c:cc:bc:ef:05:
                    01:a8:e6:5d:ed:b5:3f:e3:01:39:50:5a:52:d6:9f:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:FC:4C:6F:49:F6:AE:9B:5B:7F:9C:A0:59:4A:D1:BE:A8:B2:FB
            X509v3 Authority Key Identifier:
                keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:66:c8:72:aa:b4:77:92:ca:f0:fd:7f:47:00:c2:ee:0f:0c:
         db:23:36:f8:dc:d9:65:4c:f1:c4:7c:eb:cd:13:f8:48:ee:ee:
         dd:86:c6:8c:e8:ba:23:52:95:59:14:a3:5b:4f:30:1a:d5:40:
         04:7c:ba:52:09:db:18:ec:e0:fe:89:e4:d6:05:bd:f5:d1:ce:
         0e:ac:11:5b:01:f4:8f:a3:35:9c:cf:f1:fb:bb:a8:46:f9:a3:
         b6:13:97:7a:66:e5:87:20:14:51:57:65:2c:4c:e6:f8:05:80:
         4e:b8:21:a1:90:c1:7a:e6:05:f2:01:e1:3a:03:69:08:28:8b:
         98:a7:21:f4:8b:31:7d:70:62:78:cb:80:69:68:77:fa:b4:d3:
         b2:a4:c4:e6:05:83:14:14:91:26:0f:4b:31:41:de:25:b1:f8:
         56:2f:5a:38:64:0b:5b:e8:62:57:5b:40:03:20:b7:11:29:9b:
         2e:d5:d8:d4:ef:b7:8c:10:43:cc:56:1e:e1:95:9d:ff:33:8e:
         99:bf:1c:54:1c:2b:32:35:18:94:6d:16:d3:20:b8:b6:d3:d8:
         fa:dc:22:35:0a:dd:a4:dd:f4:c0:a3:28:f3:e1:54:56:a3:67:
         d3:48:27:e2:dc:10:30:50:e2:9a:26:51:7b:57:fb:41:6b:15:
         54:d6:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:23 2026 by rpki-client