Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File:                     NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier:          OoFGpghCtwYTyVcnS6gXMDVC0jKIV+dogQmlLNfcds0=
Subject key identifier:   D3:04:93:D5:32:2E:3C:90:AA:F9:ED:6C:6E:B2:53:B2:49:D0:C9:76
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer:       /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number:          0411
Signing time:             Fri 17 Jul 2026 00:58:31 +0000
Manifest this update:     Fri 17 Jul 2026 00:58:30 +0000
Manifest next update:     Fri 24 Jul 2026 00:58:30 +0000
Files and hashes:         1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: KcxZkzxIcM1yCBDLSaT0Al/assE9jwSrHGKw/LoHgNw=)
                          2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 00:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
        Validity
            Not Before: Jul 17 00:58:30 2026 GMT
            Not After : Jul 24 00:58:30 2026 GMT
        Subject: CN=6a597e37-c511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:76:80:c0:d8:3d:f3:22:9f:28:8d:dd:7d:
                    c4:e3:99:9f:48:7f:46:56:5c:49:52:8a:10:fc:3e:
                    c9:03:df:3e:ff:6e:b7:cc:76:c9:b7:4e:0a:79:e2:
                    6a:cc:3a:9f:f3:aa:e1:f9:7a:f3:a1:80:3c:8e:d8:
                    c9:9d:0c:14:45:e4:fc:53:97:17:22:4a:99:e2:5d:
                    4d:ed:b4:d7:10:da:9c:37:ea:a7:5f:15:25:e0:86:
                    3b:46:bd:89:f7:c2:18:63:26:5b:75:08:19:c5:29:
                    40:06:88:39:44:d1:b6:0e:90:ef:b3:70:f5:e1:9f:
                    f1:cb:ce:09:0b:60:6f:89:03:6b:13:6f:7a:72:d7:
                    de:98:ca:b2:20:8c:63:f9:6b:da:22:f8:7a:08:64:
                    88:78:8d:cc:65:f7:be:23:b3:73:a6:6b:c7:7e:6a:
                    7e:50:90:86:ff:d5:be:71:f3:fa:ab:bd:18:6b:dc:
                    52:ff:51:ab:a1:bf:86:1a:7b:57:18:9e:be:b0:ce:
                    00:04:04:19:b4:f6:92:9c:c2:fc:48:d9:f3:d0:e1:
                    12:b2:c8:fa:f6:98:f5:ab:0a:b0:fe:9a:20:06:61:
                    d5:4c:cc:e8:58:21:d7:21:bd:e9:6e:03:4f:48:03:
                    ae:07:74:54:68:46:d4:27:a0:d0:0f:73:04:85:2a:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:93:D5:32:2E:3C:90:AA:F9:ED:6C:6E:B2:53:B2:49:D0:C9:76
            X509v3 Authority Key Identifier:
                keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:74:4f:b3:ef:06:17:f3:6d:ac:06:fd:66:9e:ee:76:65:e5:
         55:19:b6:bf:20:f5:4a:b8:bb:97:6b:91:f4:fe:c9:df:c3:21:
         e1:09:c3:88:6a:73:b9:a3:7f:79:da:b9:d2:db:28:f6:e9:13:
         fa:48:74:db:1e:b9:7d:2b:16:95:1c:b3:b6:e3:6a:a5:39:27:
         92:85:a5:fd:e3:31:4a:9d:98:38:f4:c2:68:9e:8c:20:72:90:
         55:93:b3:91:8c:8a:b3:de:a7:0d:17:cd:7a:57:80:97:b3:a1:
         74:c9:75:18:e3:00:4e:45:ee:45:fc:ae:3c:ff:d9:fc:4f:7a:
         c5:c2:8e:39:05:6d:7a:2f:44:76:e7:1c:e7:4e:8f:ed:40:0c:
         4f:3d:db:b3:48:7a:5e:dd:ac:16:c4:34:96:8b:75:85:1a:5c:
         a9:ea:4b:76:33:99:c3:c7:45:4d:70:e7:48:0d:b2:31:54:92:
         f9:d1:80:88:da:97:5c:f5:d3:1c:72:8e:a2:6f:22:5d:d9:5a:
         93:45:09:4f:88:2a:4c:b6:9b:a1:33:fc:81:68:90:bd:70:d0:
         b6:c8:78:5f:69:d5:59:c3:4a:84:5a:80:17:da:7e:4b:8e:dc:
         13:ec:87:27:e1:20:29:95:d7:1a:26:ce:5e:23:25:16:3a:ac:
         c0:0a:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:47 2026 by rpki-client