Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
File:                     NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json)
Hash identifier:          bzBT/SoKew59y70fbzbaqlx+5wFssSz7RnpCPch5cjw=
Subject key identifier:   A7:6B:72:B5:94:29:3C:83:BA:D3:37:BC:45:20:08:69:D2:D6:1F:52
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Certificate issuer:       /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial:       0B44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
Manifest number:          0B3A
Signing time:             Sun 26 Jul 2026 19:40:51 +0000
Manifest this update:     Sun 26 Jul 2026 19:40:51 +0000
Manifest next update:     Sun 02 Aug 2026 19:40:51 +0000
Files and hashes:         1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: vlruatXtXctGZkOG9plqNP2yfJ08+aq+wXt4/P5KoQU=)
                          2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: Dk339imNFOip5Ywpt/0EfK35LYjSFKAUXhrmv8n0CpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
                          rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
        Validity
            Not Before: Jul 26 19:40:51 2026 GMT
            Not After : Aug  2 19:40:51 2026 GMT
        Subject: CN=6a6662c3-f8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:82:e9:cd:b8:ac:0e:16:2b:5f:02:ab:ab:
                    9e:32:fb:4b:ff:57:71:c0:00:4b:5b:e9:36:c4:cd:
                    3c:ca:10:ba:ec:f4:e9:21:cb:a9:1e:b7:50:fe:b6:
                    1e:c2:4d:84:a5:1d:3a:0f:39:3c:f8:6c:c1:2b:07:
                    3f:19:72:a7:e7:99:1d:0f:4d:d7:51:e5:f4:08:63:
                    8e:a3:a4:4b:24:fe:5c:9b:d9:30:42:b6:64:af:a1:
                    2a:1b:22:2f:77:02:57:bf:87:91:65:69:23:b9:0f:
                    3b:7d:54:b0:f7:2c:b2:0c:18:a1:89:ee:bf:3a:b7:
                    45:2c:50:78:40:d7:5c:0c:ce:46:8a:06:ba:f5:e8:
                    cc:74:bb:f5:a8:3a:2c:92:c6:19:2a:83:da:a3:df:
                    41:39:d8:d2:33:35:1b:b0:9b:09:12:49:5a:50:bd:
                    0d:0f:1d:93:e5:fa:24:b1:65:58:1f:fd:78:14:b6:
                    11:fa:2a:25:a9:54:16:dc:b8:b7:1a:74:4a:3a:06:
                    dd:f0:3b:5f:92:06:88:f1:6c:7e:27:17:01:33:97:
                    38:75:3c:32:a2:fc:ca:2e:f0:f4:2a:61:de:e1:01:
                    bf:7a:23:88:f6:86:a6:06:be:53:c3:d4:a5:c5:f2:
                    2c:16:2a:3b:e4:4b:97:4b:6d:7f:51:56:2b:30:02:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6B:72:B5:94:29:3C:83:BA:D3:37:BC:45:20:08:69:D2:D6:1F:52
            X509v3 Authority Key Identifier:
                keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b3:4e:4f:8e:1b:d2:63:74:ad:de:c9:05:02:95:21:f5:ae:
         48:28:4b:1d:df:5d:da:b6:b9:97:24:1a:3c:1a:f4:9d:d2:c7:
         0c:1e:df:89:56:01:c2:7b:5c:bf:53:e3:ee:89:57:9a:e1:6e:
         48:7b:e4:23:a4:5c:f8:2e:01:0a:b0:6b:a6:67:b0:9d:5b:71:
         9d:6e:9d:d2:70:40:b4:50:36:b7:ac:f1:21:23:82:c6:b1:ed:
         c2:ee:fe:97:e0:e2:e6:3c:5e:c2:87:d5:ab:ab:90:34:7b:7e:
         33:10:c8:e7:10:17:2a:fc:7c:23:b6:42:2a:c3:78:b9:61:73:
         af:81:bb:70:78:b7:4d:ed:50:5c:eb:b7:c4:61:f3:9e:96:40:
         33:cf:e6:f8:59:34:d7:c1:46:a8:32:78:4e:99:01:ed:c8:ef:
         69:63:26:6f:f9:8e:7f:fe:82:3b:91:e8:37:52:bb:ee:14:b5:
         6d:36:d8:8a:88:93:f6:74:18:07:10:fc:ea:24:e4:74:47:0e:
         ba:ee:f0:56:65:f2:1e:45:f3:a5:6d:04:25:e1:dd:36:52:b2:
         84:0a:d7:f0:fd:33:df:0c:1c:23:e5:d6:4b:d2:3a:88:7a:59:
         f0:7b:19:5c:b0:03:df:51:5c:be:85:d7:fa:17:16:48:de:2e:
         d0:91:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:51 2026 by rpki-client