Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
File:                     NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json)
Hash identifier:          kjWRfwSd2L0N354lyfYYFkMd5ezp7TRmgrHvUkM/Z/o=
Subject key identifier:   88:4C:6C:07:E6:03:E3:85:A5:72:44:F0:69:EE:70:F2:AF:07:35:14
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Certificate issuer:       /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial:       0D0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
Manifest number:          0CE7
Signing time:             Sat 28 Feb 2026 18:31:28 +0000
Manifest this update:     Sat 28 Feb 2026 18:31:28 +0000
Manifest next update:     Sat 07 Mar 2026 18:31:28 +0000
Files and hashes:         1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: 88yqTYBfAjjI3B7Z7u+CBi1PL6xv868X61ILOYFeXMc=)
                          2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: FszG+g8vl/qtex3FDIorZ8+D6lOQxfBxXOVLGxzLmac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
                          rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3339 (0xd0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
        Validity
            Not Before: Feb 28 18:31:28 2026 GMT
            Not After : Mar  7 18:31:28 2026 GMT
        Subject: CN=69a33480-8bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:06:2a:3a:0a:55:5b:4a:ff:63:1d:3d:89:
                    ed:65:de:ca:60:fa:db:77:a7:ef:b8:b0:aa:de:3e:
                    20:c8:13:a5:00:74:6e:73:f7:95:d5:18:30:07:0d:
                    03:eb:07:15:04:bd:d2:f3:f1:f8:f9:c5:d5:ad:8c:
                    5b:f3:0d:43:d5:c9:ce:bf:d7:12:24:b1:61:e2:c9:
                    75:a8:36:8b:b4:02:ce:fa:6d:8d:52:f9:d7:6c:01:
                    6a:96:d9:35:4e:f5:3f:4c:46:a7:a9:7a:0c:12:d3:
                    1b:f4:b0:50:27:8a:c1:eb:38:84:9d:d4:b3:3e:4b:
                    93:97:d5:4a:17:ae:20:e7:83:b1:e8:bc:1b:3d:84:
                    20:b5:14:bf:ae:8b:ae:b0:82:8d:fc:2c:8d:d9:56:
                    58:78:be:38:a2:b1:ec:e1:0e:24:99:d9:b8:16:49:
                    50:cd:60:13:34:65:f2:ca:4e:7a:95:12:64:cd:c0:
                    50:a8:c9:7d:fe:de:40:54:2e:d9:ed:c4:84:43:b2:
                    d9:7e:d5:7a:dd:cc:99:dd:e8:28:5f:3b:02:88:f4:
                    88:ea:58:79:09:e1:3f:56:9a:1d:13:a2:7f:e5:25:
                    da:40:90:ff:e9:60:4a:ca:71:d2:de:66:21:68:19:
                    1c:13:2f:6e:06:0d:a1:3f:b3:5f:b0:a3:44:c0:3e:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4C:6C:07:E6:03:E3:85:A5:72:44:F0:69:EE:70:F2:AF:07:35:14
            X509v3 Authority Key Identifier:
                keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:5c:dc:f7:c5:f3:ac:38:db:95:94:03:37:5b:8b:4a:7d:82:
         9e:5e:0a:6a:54:e7:69:a7:1c:53:c2:e0:d9:dc:3e:86:07:01:
         71:e7:5c:2d:28:e5:37:58:8a:29:e0:0c:39:aa:7d:b5:e0:2d:
         9e:2b:40:82:dc:11:74:84:70:ad:96:03:93:02:f8:48:aa:6e:
         fb:83:37:17:56:57:a7:b4:28:21:99:61:51:d7:0a:ff:75:18:
         d3:81:39:0a:b5:72:60:32:53:70:92:1f:c3:3c:88:2a:de:50:
         ef:6e:09:6a:f1:b8:eb:34:c1:3f:dc:ba:39:4a:7b:42:16:e3:
         6f:16:fb:2f:6b:97:fa:6e:9b:07:42:6c:2c:73:2c:1d:86:7b:
         51:b2:c2:65:f1:01:a2:15:0d:82:d9:9e:11:a3:c6:6c:1f:72:
         37:ef:48:03:25:c6:34:10:de:13:6d:a1:5e:66:ba:54:7e:bf:
         2b:8f:b3:53:ac:e0:dc:6f:1e:89:7a:1c:1c:52:7e:18:b5:25:
         64:fc:f2:25:d7:1e:e7:88:4a:a3:6b:47:66:c4:83:b8:92:ec:
         af:64:2f:52:18:77:91:40:83:81:f6:5b:45:e0:0f:e8:94:43:
         5d:ac:ca:fc:d9:12:f8:5f:d9:91:7a:05:3c:c5:5d:ba:e4:76:
         b1:85:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:32 2026 by rpki-client