Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          6ByYlMuOkqPhWC3hgxaORW2xCPUz4uKq4gT4Zd0t01E=
Subject key identifier:   00:F9:41:BC:09:2E:49:96:7C:7E:51:2C:F9:6E:E7:F1:5D:12:B6:31
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       0661
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          065A
Signing time:             Sun 26 Jul 2026 23:28:20 +0000
Manifest this update:     Sun 26 Jul 2026 23:28:19 +0000
Manifest next update:     Sun 02 Aug 2026 23:28:19 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: yAL+e7FOtiRujZednqP7auC0H7gZF9cj9joWYAoi4II=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jul 26 23:28:19 2026 GMT
            Not After : Aug  2 23:28:19 2026 GMT
        Subject: CN=6a669814-599b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:35:f2:02:46:82:d0:84:d9:95:04:86:95:
                    5d:16:ac:7e:1f:b4:86:60:46:ae:ad:b4:46:c3:16:
                    8a:29:3b:b8:3f:15:09:65:1c:ee:42:7c:c3:da:a3:
                    3a:45:ea:d9:94:e5:9c:1c:b8:cd:de:70:24:97:dc:
                    ee:ec:4c:39:99:71:ce:ba:fb:b5:45:a9:4c:91:a5:
                    a4:48:c2:73:5b:f8:cd:3b:9a:f5:e5:78:2c:f5:fb:
                    5b:95:ae:05:e4:96:58:de:78:65:b6:84:74:2e:72:
                    57:21:b3:da:65:f3:82:0f:50:b8:67:9b:e3:d7:f7:
                    e5:5d:c9:f2:e2:b4:05:fc:31:4c:74:1c:f1:2d:e7:
                    8e:b1:3c:0a:64:7b:0f:d3:bd:a2:37:ed:97:9d:b5:
                    86:7c:b1:7e:ca:45:ba:76:1b:18:5c:52:37:76:88:
                    f0:a6:9b:55:e5:99:bd:03:45:91:1c:82:e1:90:b5:
                    b4:bf:17:02:fa:ff:97:62:ac:ba:d7:c7:cf:b5:5f:
                    c5:aa:54:01:c0:f4:40:72:3a:29:da:3a:45:ed:92:
                    9c:4a:b3:e8:f5:15:25:f0:19:8f:22:10:64:39:79:
                    ea:ce:a1:c8:b9:6c:68:c3:18:92:aa:2a:67:c5:00:
                    b9:ce:1d:ca:ce:8a:f3:e8:c6:5b:a7:d4:c2:a7:77:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F9:41:BC:09:2E:49:96:7C:7E:51:2C:F9:6E:E7:F1:5D:12:B6:31
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:f9:f8:f5:bd:8c:ae:15:ed:6d:82:7c:5e:e3:00:e7:f7:
         da:cc:ce:5a:27:01:83:59:fc:6c:68:07:72:99:18:68:18:6f:
         76:93:88:ff:7c:4e:fd:fe:8a:95:69:16:8b:a6:21:89:aa:79:
         4a:2e:75:cc:aa:c1:db:15:a9:b1:5c:b9:a5:b4:9c:10:cf:5f:
         9f:08:53:e4:f3:ba:2d:80:40:2e:06:34:c0:8c:bf:7a:ff:56:
         51:f5:eb:d7:dc:a9:5a:75:e8:ba:e5:0b:8b:53:2d:6d:df:39:
         9d:42:e7:38:4e:37:b7:9b:4b:a5:8b:95:59:64:88:33:25:85:
         89:68:02:c8:45:9b:4f:3f:03:e5:eb:13:72:f8:98:23:56:3e:
         dc:16:95:fe:a4:59:d0:1c:a7:83:73:d3:95:70:f6:2f:dd:35:
         80:ae:49:1e:6b:60:7d:89:a6:04:da:a3:bd:65:19:33:0b:01:
         0d:08:59:94:c8:c6:b6:a4:1e:73:41:a2:fa:ee:71:20:13:f3:
         20:29:63:b5:d3:6c:2b:d5:63:db:05:bb:18:73:5c:ea:f1:67:
         b7:de:3d:45:0e:91:96:c5:f6:c6:74:c1:0f:9f:18:63:50:6e:
         bd:1c:3e:22:84:dd:de:36:e3:b1:1a:36:45:bf:fb:e6:2b:18:
         47:e7:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:36 2026 by rpki-client