Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          byrXosHBKOP9UwAfRoFZV1FFEYDM+3drCi8LX8darlg=
Subject key identifier:   06:D3:83:3E:84:AA:6E:1C:B2:8D:9F:D8:A9:97:AD:E4:A7:FC:9E:DD
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       062E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          0627
Signing time:             Thu 16 Apr 2026 22:41:52 +0000
Manifest this update:     Thu 16 Apr 2026 22:41:52 +0000
Manifest next update:     Thu 23 Apr 2026 22:41:52 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: WyWscLVP3DVClF1hL7Ka9jqzV9wUlRpt7LUuennv5fM=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Apr 16 22:41:52 2026 GMT
            Not After : Apr 23 22:41:52 2026 GMT
        Subject: CN=69e165b0-f52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:92:1b:95:20:0a:88:77:1b:a3:8b:3d:38:
                    32:14:20:8e:1a:69:7d:d4:93:54:f5:a8:67:4f:89:
                    72:0b:3c:09:52:30:ff:34:3d:cf:b6:86:aa:fc:19:
                    cd:f3:1b:7f:31:38:17:fc:5b:f0:43:50:a5:a7:77:
                    12:81:70:45:ca:6a:06:3d:6c:92:55:63:1f:a5:d5:
                    67:bb:8a:cd:7f:ef:44:c2:b3:24:f0:aa:26:ea:f1:
                    ac:fe:3f:6b:20:0b:7c:52:ce:f2:08:84:a0:55:d9:
                    c9:ad:b0:b7:6f:58:8d:e8:77:d1:9c:09:ae:65:66:
                    9a:8c:02:21:f7:c9:0e:34:97:16:39:4a:aa:36:1d:
                    58:a4:8d:fb:74:b0:74:22:c4:7c:5c:0d:37:9a:59:
                    44:79:99:a2:90:2c:4a:fa:65:fa:54:9c:ce:19:d5:
                    31:32:cd:1e:f7:4a:91:90:b7:b4:56:92:7d:b4:f6:
                    3d:a6:2d:cd:4c:d9:13:76:d0:a9:06:cd:0d:14:b9:
                    8c:f0:db:cc:89:11:b5:a7:dd:88:5d:5a:38:7d:59:
                    9c:73:6a:18:8c:bc:65:4f:a1:1a:3d:d2:f0:0f:80:
                    64:0f:b6:71:35:bc:05:a4:36:d9:fa:09:99:7b:96:
                    d0:26:37:f6:6e:12:91:3c:3a:73:4d:56:08:22:f5:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D3:83:3E:84:AA:6E:1C:B2:8D:9F:D8:A9:97:AD:E4:A7:FC:9E:DD
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:5d:8b:9a:e8:3d:29:ad:8d:0f:c7:0c:fb:b6:23:39:4c:
         f5:05:97:e0:b7:56:14:8f:cc:4e:cb:34:de:00:34:ee:a6:10:
         08:01:a5:45:3f:7f:c7:80:3e:2b:50:41:1e:49:9c:37:b7:66:
         89:ca:07:13:e7:94:32:c7:b1:07:16:ab:39:63:cf:55:48:14:
         f4:72:5b:1c:85:91:05:11:35:f6:e2:9f:65:fd:c8:0f:27:77:
         93:b0:6f:4f:87:a4:d2:50:56:81:14:f8:e4:53:fc:0f:33:38:
         94:66:7e:9b:83:a5:0a:22:5b:ba:8f:d8:62:77:d1:e7:88:2e:
         0b:10:4b:fe:59:fd:9d:13:72:76:40:ad:3a:0a:3a:d1:de:88:
         31:2c:fa:c7:01:26:79:93:9c:a3:9f:d4:eb:db:2a:25:c8:f3:
         51:8c:d7:44:be:f0:86:43:9b:11:83:66:0a:95:75:53:c2:46:
         e8:0d:d5:6f:4e:15:1a:61:a2:e9:f5:3a:b9:db:06:02:5f:f4:
         d1:57:e7:fa:34:0e:13:6b:2e:61:1f:07:ea:95:40:d6:ab:44:
         8f:65:04:0a:63:1b:10:8b:dd:c3:8e:f3:b3:37:11:7a:cf:b7:
         79:4e:92:36:83:d5:79:e9:36:1d:60:57:68:d3:49:73:01:e4:
         22:7b:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:50 2026 by rpki-client