Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File:                     njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier:          TG2qFsytxRDQmlZoSynuqu0AgKkr0+PXAAiF5nafFwI=
Subject key identifier:   32:A4:79:51:CF:AA:12:21:07:78:92:51:CD:53:4E:C5:BF:8C:16:C3
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer:       /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial:       354B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number:          354B
Signing time:             Mon 22 Jun 2026 14:59:32 +0000
Manifest this update:     Mon 22 Jun 2026 14:59:32 +0000
Manifest next update:     Mon 29 Jun 2026 14:59:32 +0000
Files and hashes:         1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: tu/H5/fF9p36Xl0jIl7DnNp7602Hw/b68QY/eZVeM9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
                          rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 14:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13643 (0x354b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
        Validity
            Not Before: Jun 22 14:59:32 2026 GMT
            Not After : Jun 29 14:59:32 2026 GMT
        Subject: CN=6a394dd4-ff5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:25:d8:14:d0:8c:0e:b4:51:36:36:76:87:
                    00:60:90:3b:4f:5d:47:86:a7:42:51:84:46:0b:75:
                    03:f3:2f:4c:62:5b:29:a6:22:e2:56:14:3b:ca:e7:
                    e0:1d:aa:e1:c6:bd:dd:d9:f1:c3:e8:36:06:e5:61:
                    60:4b:11:2f:b3:b9:2a:36:6a:39:8f:a1:26:7f:ac:
                    8d:c9:64:dd:5e:b5:23:f9:58:ca:72:33:60:91:49:
                    83:d0:c0:58:2f:f8:ca:d8:1c:b3:6b:f2:3b:f0:69:
                    c0:e7:71:79:ed:2d:bb:f4:82:2b:90:b4:d4:4c:d8:
                    68:b5:c1:95:e3:f2:d0:68:0d:05:2b:1f:08:c5:5a:
                    aa:f0:85:e2:89:c6:8f:b0:f8:ca:5d:04:da:5f:d9:
                    a6:a5:b8:6f:0d:f4:09:ed:bd:7a:5a:e4:35:e8:88:
                    6d:67:80:c8:8c:ab:d6:80:73:a3:a8:8c:81:83:1a:
                    87:43:ef:8a:26:60:5a:61:c3:5f:34:b9:cc:9d:ff:
                    91:ee:8f:94:a6:1e:69:87:8c:dd:f0:0c:24:5f:35:
                    a3:61:03:52:3e:72:21:a0:bb:e2:9e:c3:24:65:12:
                    24:22:00:77:6b:b3:74:a4:59:1c:5c:69:44:6c:bd:
                    aa:8f:5e:2c:67:89:be:9c:c3:68:c2:0c:f5:b9:39:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A4:79:51:CF:AA:12:21:07:78:92:51:CD:53:4E:C5:BF:8C:16:C3
            X509v3 Authority Key Identifier:
                keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:55:19:83:3d:e4:66:ef:9e:33:c2:5d:c2:22:cc:8d:48:0c:
         7b:93:23:84:87:7d:ce:60:91:6b:af:a4:24:95:84:06:32:21:
         e7:ec:66:72:cd:12:bc:6f:ab:f3:ed:19:6a:7d:13:22:2b:b7:
         9d:9b:ae:37:6b:2c:cc:d9:10:06:d7:16:42:f2:9f:f7:5c:e4:
         c9:6f:5f:fa:93:b2:24:28:14:09:a2:d2:cc:f5:48:59:fb:44:
         ab:ce:8c:08:ba:ed:46:c6:a6:ae:9b:74:11:e6:a3:86:0e:6a:
         17:40:03:b2:f1:54:5a:dc:e3:2f:e7:fe:43:7a:b6:28:8d:f0:
         77:54:c5:aa:7e:5f:18:e2:ed:b7:ab:ee:c1:a9:fd:e4:92:ae:
         3a:8e:c3:82:29:43:a8:28:c5:22:2b:3f:aa:cd:8e:8f:d1:d7:
         34:0f:e5:25:a8:25:b7:ff:2b:e9:ae:80:cd:db:54:4d:c8:50:
         0c:b7:74:ce:2b:86:53:eb:d6:68:5b:66:d4:7c:f2:81:e2:e0:
         70:17:9b:ed:c8:ea:7b:2c:db:cf:94:88:c3:00:24:fe:6f:38:
         73:3c:08:a8:60:1c:49:cf:12:07:2c:d9:49:84:8e:47:7a:d4:
         f5:d7:fc:41:be:e5:32:53:84:85:bd:8e:4a:a9:9c:25:48:40:
         c8:c6:76:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE
QjJCMzc5NjYwHhcNMjYwNjIyMTQ1OTMyWhcNMjYwNjI5MTQ1OTMyWjAYMRYwFAYD
VQQDEw02YTM5NGRkNC1mZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPkl2BTQjA60UTY2docAYJA7T11HhqdCUYRGC3UD8y9MYlsppiLiVhQ7yufg
Harhxr3d2fHD6DYG5WFgSxEvs7kqNmo5j6Emf6yNyWTdXrUj+VjKcjNgkUmD0MBY
L/jK2Byza/I78GnA53F57S279IIrkLTUTNhotcGV4/LQaA0FKx8IxVqq8IXiicaP
sPjKXQTaX9mmpbhvDfQJ7b16WuQ16IhtZ4DIjKvWgHOjqIyBgxqHQ++KJmBaYcNf
NLnMnf+R7o+Uph5ph4zd8AwkXzWjYQNSPnIhoLvinsMkZRIkIgB3a7N0pFkcXGlE
bL2qj14sZ4m+nMNowgz1uTmkOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKkeVHP
qhIhB3iSUc1TTsW/jBbDMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE
OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa
U0lmOUxXOXNhVGJiS3plV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOVUZgz3kZu+eM8JdwiLMjUgMe5MjhId9zmCRa6+kJJWEBjIh5+xmcs0SvG+r
8+0Zan0TIiu3nZuuN2sszNkQBtcWQvKf91zkyW9f+pOyJCgUCaLSzPVIWftEq86M
CLrtRsamrpt0Eeajhg5qF0ADsvFUWtzjL+f+Q3q2KI3wd1TFqn5fGOLtt6vuwan9
5JKuOo7DgilDqCjFIis/qs2Oj9HXNA/lJaglt/8r6a6AzdtUTchQDLd0ziuGU+vW
aFtm1HzygeLgcBeb7cjqeyzbz5SIwwAk/m84czwIqGAcSc8SByzZSYSOR3rU9df8
Qb7lMlOEhb2OSqmcJUhAyMZ2bw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:26 2026 by rpki-client