Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File:                     nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier:          OFxwqZ4/4lqHpJInzBG/7gxpb/Nm/nBcyUD84kqYUBs=
Subject key identifier:   93:B6:78:FB:6A:52:94:EA:DA:39:CC:08:FD:CA:F1:94:0E:60:DD:6D
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer:       /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number:          01EA
Signing time:             Sat 13 Jun 2026 03:26:39 +0000
Manifest this update:     Sat 13 Jun 2026 03:26:38 +0000
Manifest next update:     Sat 20 Jun 2026 03:26:38 +0000
Files and hashes:         1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: /KW7COxEb9pGNQlhTRvDRB528FQEDEVZxhBvUGFPDDk=)
                          2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
                          rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
        Validity
            Not Before: Jun 13 03:26:38 2026 GMT
            Not After : Jun 20 03:26:38 2026 GMT
        Subject: CN=6a2ccdee-4e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:50:ee:42:26:cf:9f:c6:3c:90:bb:e4:a9:
                    ac:a1:34:f7:7a:c7:bb:f8:bd:5f:d7:01:d1:83:65:
                    0f:9b:f0:ff:e5:37:a3:ec:2e:05:0f:99:8e:cc:20:
                    51:dc:a1:9e:3d:aa:b8:3a:0f:a6:b3:3f:9f:6e:66:
                    39:43:25:61:b9:d7:a3:1a:54:a6:65:82:ba:22:a9:
                    89:02:4b:be:01:de:48:41:6d:df:18:6b:ed:04:dc:
                    3f:6a:63:23:19:02:23:c8:cc:f5:c1:c5:61:d5:ae:
                    a1:14:19:b2:f7:0e:11:d8:80:5d:74:84:7f:09:5d:
                    9d:16:96:51:39:64:c8:66:06:3e:42:d6:c3:af:b7:
                    1f:6b:94:b1:bf:9d:98:57:a9:44:70:b3:e8:12:a8:
                    4a:ac:75:ec:12:e6:d4:e0:97:8b:ad:c6:b2:eb:81:
                    61:69:b6:73:5c:a2:ff:63:9b:8c:61:29:ca:10:da:
                    23:b9:f5:59:77:3b:55:fe:f4:c7:c4:26:3d:f4:57:
                    af:6f:b4:a2:70:58:32:3d:79:47:e9:c7:90:1b:f5:
                    6a:fc:cb:62:b0:da:c2:4c:b5:03:b3:1d:63:92:bc:
                    e2:cd:5d:bc:bf:24:e9:56:96:0a:80:b7:13:dc:c9:
                    6b:82:5c:8b:27:63:07:09:ca:47:c7:7c:54:0f:cd:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B6:78:FB:6A:52:94:EA:DA:39:CC:08:FD:CA:F1:94:0E:60:DD:6D
            X509v3 Authority Key Identifier:
                keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:68:35:26:e3:5d:7f:fc:73:74:ed:44:07:2c:97:02:93:
         72:0b:90:a7:0a:fd:9c:c3:d8:f0:39:f6:e4:61:5d:80:9d:5c:
         25:c0:15:a8:b4:46:d7:1b:e9:52:2c:e0:37:31:38:91:93:a7:
         bc:3b:20:5f:ce:ca:17:71:78:f4:5b:0a:2a:4c:eb:ba:bc:75:
         b6:83:6e:9b:86:9b:ec:e7:07:cd:bf:99:aa:23:ff:55:a8:57:
         83:48:0b:4b:c3:3b:47:bc:74:e3:42:25:1c:c4:c7:07:b5:57:
         5e:89:9e:f0:7c:d2:d9:f8:1f:73:2c:44:d3:58:e1:d9:f9:f1:
         8f:5d:1c:d3:d2:ad:98:c2:86:17:d2:e6:a5:8e:b5:a1:1b:ac:
         5a:71:02:ee:c5:c3:8e:e1:be:83:9a:2e:71:f3:31:3d:6b:48:
         4f:e5:12:0e:4a:71:f8:80:fe:d9:1a:48:8f:5a:92:06:2f:0d:
         2e:e7:a0:68:d1:9a:38:fd:f3:40:79:22:f0:99:a3:99:34:a8:
         89:80:f2:ad:06:d3:04:2f:e5:bf:15:57:e5:79:49:da:57:ec:
         26:25:81:6d:27:44:2c:31:95:f5:5c:13:cf:1b:41:b6:90:b1:
         60:c1:12:6c:3a:4f:ef:f4:78:39:e5:79:74:d9:87:b1:e6:16:
         c2:82:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:36 2026 by rpki-client