Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
File:                     NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json)
Hash identifier:          Fp2XGv62xGOHGnGub4je+EfRzx7YQZ195kTHEhocjn4=
Subject key identifier:   3B:16:0A:E3:04:EF:A5:89:F2:DD:06:BB:73:3C:29:5A:38:1B:B0:67
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Certificate issuer:       /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial:       0D5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
Manifest number:          0D35
Signing time:             Tue 28 Jul 2026 18:25:36 +0000
Manifest this update:     Tue 28 Jul 2026 18:25:35 +0000
Manifest next update:     Tue 04 Aug 2026 18:25:35 +0000
Files and hashes:         1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: Y21p0Xm84SPrFE0mp2J6Qu/v738ZUJu81qpnKrSWv2I=)
                          2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
                          rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3418 (0xd5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
        Validity
            Not Before: Jul 28 18:25:35 2026 GMT
            Not After : Aug  4 18:25:35 2026 GMT
        Subject: CN=6a68f420-bfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:c9:f2:61:d9:81:3d:91:80:61:b0:d7:76:
                    96:01:14:2b:6c:28:6f:22:9f:27:95:e3:71:06:43:
                    fc:36:00:64:2f:c1:16:0a:0d:f7:ff:3d:82:50:02:
                    f2:e9:75:d5:6c:2c:19:7f:7d:9f:96:5b:b7:df:e0:
                    d3:9e:78:50:7a:eb:45:f7:e9:45:63:37:6c:0a:7e:
                    c7:78:77:78:15:2d:16:6a:4b:40:1a:9c:4a:ba:c8:
                    a1:a4:9e:90:3d:89:49:48:b9:63:97:96:32:d6:40:
                    89:fb:15:8e:33:73:74:c1:b8:c2:c8:c4:99:82:0a:
                    f2:f6:30:db:b0:fc:8f:77:de:1e:6a:01:d4:ae:77:
                    82:da:45:5f:7e:de:15:56:ed:86:a5:bb:87:71:3b:
                    1d:6c:90:b2:fa:58:83:b4:de:4a:d2:7d:15:2e:df:
                    bf:6d:4e:09:7a:f0:5f:ed:73:ba:6b:bc:21:33:4d:
                    8e:bb:81:f8:6d:62:cf:a3:f8:e3:0f:eb:76:72:00:
                    57:0c:ec:85:b3:f5:b9:f2:01:21:3f:ef:64:b3:2e:
                    4e:45:e6:fd:67:c0:b1:7d:7e:f9:93:69:ed:28:94:
                    aa:08:0c:7c:9f:56:2b:83:33:7c:3a:ac:ab:8c:94:
                    1d:71:01:c9:6c:cc:67:2c:0f:c5:36:fe:d0:4b:79:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:16:0A:E3:04:EF:A5:89:F2:DD:06:BB:73:3C:29:5A:38:1B:B0:67
            X509v3 Authority Key Identifier:
                keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:95:b6:66:e8:f0:ea:c1:85:07:61:ce:78:1a:8f:e7:ab:a5:
         44:33:32:e1:af:ef:62:14:02:47:dc:8b:c7:d9:31:18:32:67:
         fb:40:21:21:9d:69:09:34:39:27:b9:13:55:2b:71:2c:cc:61:
         e9:c4:2c:d7:38:1b:4b:1c:d6:d0:99:49:a1:d3:e0:48:c7:df:
         78:f7:12:ae:d8:10:99:56:bb:15:92:80:70:83:07:5c:5f:7e:
         2f:f1:fd:de:e5:59:4b:92:09:9f:28:59:d5:4b:87:23:b2:9b:
         5b:0f:80:33:17:69:ec:d2:44:ab:c3:8c:cf:a5:e2:e0:4c:4b:
         12:b3:03:9a:48:c7:f7:ef:87:fe:10:98:9b:d6:15:8c:10:a0:
         a6:7b:c1:3a:b9:7d:05:02:22:a7:0f:f8:b4:b4:f7:ba:c5:6f:
         8c:3b:9c:c1:f9:e9:a4:4e:ad:80:66:9e:75:48:9e:31:e4:d1:
         1a:e4:fd:b9:34:85:d3:38:dd:32:b6:58:52:72:e7:92:96:e2:
         92:98:cb:d3:1a:28:d3:92:0e:df:42:3f:63:d1:05:99:12:44:
         0a:b9:4e:7d:2c:65:54:32:54:b2:b2:2c:90:59:81:1f:b1:b3:
         78:6c:90:6f:18:cf:ea:c3:ff:48:a4:bd:25:86:79:c2:83:84:
         6b:0b:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:51 2026 by rpki-client