Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File:                     NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier:          oVS9sv9pF5V66AyZKK2Xr3/k0YA/Vcb+IWzeYkSULk8=
Subject key identifier:   88:C7:AF:E7:79:C7:1E:9A:D4:90:31:CA:AE:9D:43:FF:D0:6E:39:65
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer:       /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial:       0B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number:          0B95
Signing time:             Tue 28 Jul 2026 19:21:46 +0000
Manifest this update:     Tue 28 Jul 2026 19:21:46 +0000
Manifest next update:     Tue 04 Aug 2026 19:21:46 +0000
Files and hashes:         1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: BfozOGuoWPi6QjFridUP+8f99N3J4//V7sTf9DEGeMs=)
                          2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: R2rbolYd8fcNYY7tviKGs474hPNIpaUduVb/0JNP9tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
                          rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
        Validity
            Not Before: Jul 28 19:21:46 2026 GMT
            Not After : Aug  4 19:21:46 2026 GMT
        Subject: CN=6a69014a-840b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:50:b0:13:e3:b6:da:58:c4:f1:0e:0e:18:
                    fb:bf:7e:9b:06:33:9c:00:35:5e:6d:0e:81:a3:84:
                    1d:d8:1d:22:68:72:7b:cd:3a:6b:ba:7d:c6:b5:0f:
                    26:b3:0a:4c:d0:5b:d3:3b:0e:ef:69:34:07:03:f1:
                    84:59:5f:7d:f3:01:a1:0b:af:7f:7a:73:08:44:e7:
                    c5:38:22:c5:12:31:6b:32:9c:99:ff:a6:e9:ad:35:
                    a1:0b:a7:cc:fd:df:d0:e4:98:ad:50:9d:2c:f8:de:
                    ef:f1:67:8a:53:83:36:07:9b:20:6a:16:c7:66:fe:
                    ad:91:36:11:76:97:d2:97:65:cd:0d:24:0b:11:ea:
                    91:dc:4b:fa:7a:53:cd:65:a7:fc:14:f4:d3:c4:30:
                    a7:86:7b:ab:e3:85:ef:74:1d:78:f7:ed:d8:0d:f6:
                    eb:f9:03:cb:a2:cb:b6:86:e6:24:4c:cc:b9:6c:d4:
                    2c:65:b5:b2:fb:1b:1b:45:25:10:be:5d:8e:30:a7:
                    dc:b7:22:d4:fc:90:98:da:cf:92:95:63:ed:d3:e0:
                    26:5a:a8:dc:f7:62:4f:3e:55:31:5a:cd:ce:85:69:
                    0b:33:b0:b1:9b:4d:a9:33:fa:ba:7d:57:ef:dd:f9:
                    1b:7f:bf:f0:4e:c1:a6:ae:8e:9e:12:43:1b:2f:bc:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:AF:E7:79:C7:1E:9A:D4:90:31:CA:AE:9D:43:FF:D0:6E:39:65
            X509v3 Authority Key Identifier:
                keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:80:4e:f6:d7:60:67:bd:ea:1a:ac:1e:cb:2e:b9:8b:6e:2b:
         78:f1:db:f8:a4:e3:be:e4:6a:95:3c:8a:b2:bb:a5:93:e0:bd:
         28:7a:90:4d:d2:2a:f2:11:1d:90:7d:20:2a:10:e9:14:84:2b:
         af:8f:d8:95:38:f8:15:d6:31:2f:a2:f6:97:6f:0a:56:45:4e:
         f8:47:2f:80:74:dd:c4:97:44:a7:c6:2e:42:56:af:05:9f:7a:
         ab:1b:86:34:a9:40:3f:2b:1b:ad:9a:ce:d3:71:b3:78:8b:fd:
         ec:78:53:fd:f5:c3:2e:32:d0:1a:34:5a:dd:f4:43:8c:c3:13:
         c0:8a:db:bc:d8:87:d6:a2:55:1a:c9:be:f0:18:89:78:fa:e5:
         3e:cc:fe:59:ea:9a:0f:7e:8c:ec:cc:1b:43:8d:31:20:ea:46:
         f0:07:af:64:58:48:79:45:fc:36:b8:74:3a:6e:1e:87:44:9c:
         a0:ab:4d:c7:3e:fd:4c:0b:7a:02:e2:86:f7:67:55:f3:74:41:
         d9:b4:6b:ff:f9:b8:1c:71:80:c1:94:98:9d:a7:01:fc:80:55:
         5d:9a:e2:bd:cc:fb:9a:ae:34:ad:bb:8c:a7:94:61:ee:05:4b:
         0f:0f:30:45:88:30:c3:ba:6a:aa:40:23:ab:ef:f0:67:26:e6:
         d7:47:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:09 2026 by rpki-client