Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
File:                     N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json)
Hash identifier:          4S2pvjmpw2MzfSW5oXaWSS0nIV33weNi5/q358UU3dc=
Subject key identifier:   52:78:0D:3C:DC:8C:E2:2D:24:39:B2:99:FD:7B:D4:B3:34:55:75:B9
Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26
Certificate issuer:       /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
Manifest number:          F2
Signing time:             Fri 17 Apr 2026 06:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:29 +0000
Manifest next update:     Fri 24 Apr 2026 06:00:29 +0000
Files and hashes:         1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: z4z4YlcExMWh7MEM1uGTbKdtr5ZCfGJYTaEbfmrWYoI=)
                          2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: VXJPLa2QkwTK9qAfsf4K4gTbZZAIxfCK2fVcEe5zOgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl
                          rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26
        Validity
            Not Before: Apr 17 06:00:29 2026 GMT
            Not After : Apr 24 06:00:29 2026 GMT
        Subject: CN=69e1cc7d-6ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:c7:f3:e7:b6:b7:09:6b:3c:86:f4:4a:53:
                    ec:b4:42:2d:42:cc:83:0b:86:b1:34:8f:b2:65:8f:
                    78:8d:2d:23:35:92:e2:f7:6f:43:70:cf:d5:ec:d5:
                    71:f7:d6:e9:dd:e9:60:71:1c:d3:99:5c:91:e8:a7:
                    5c:83:df:3a:74:b2:7e:de:b8:5c:3c:4c:79:86:8a:
                    56:15:ef:03:0a:75:0f:c3:0f:19:05:54:09:71:ff:
                    f8:56:3a:b3:90:84:3a:cf:98:7f:3f:30:fb:d1:57:
                    26:bd:e2:58:a1:46:09:a2:8d:59:31:2a:7c:54:9b:
                    e8:da:c3:88:ba:b6:90:50:13:1a:b0:fb:41:45:5a:
                    25:e6:7c:1f:37:a6:da:c9:33:9b:4c:f6:f7:a9:c5:
                    87:96:40:48:4c:3e:a6:7c:4e:13:8e:57:b4:d8:16:
                    cb:9a:f3:04:b3:c1:37:b7:c5:3b:dd:2d:24:81:7f:
                    1c:99:02:38:48:94:10:f2:cb:54:01:35:73:50:c6:
                    21:53:d1:df:51:2b:bf:df:1e:fc:a9:66:af:31:f5:
                    80:18:b7:78:03:01:be:9c:47:4c:a2:0a:32:37:3c:
                    06:f8:a5:bd:0b:8c:51:17:a8:a3:f3:43:38:ff:6c:
                    d5:f1:09:9c:7c:cf:92:11:c6:fb:2d:c8:74:ff:43:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:0D:3C:DC:8C:E2:2D:24:39:B2:99:FD:7B:D4:B3:34:55:75:B9
            X509v3 Authority Key Identifier:
                keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:54:3e:16:c2:ca:4f:56:ef:a2:17:68:4b:84:d9:83:ec:ab:
         95:38:66:ca:89:9c:7c:b2:1d:ea:f9:95:03:cf:d9:61:97:ce:
         d0:2e:67:e8:ec:ed:c7:0e:17:05:3f:ef:08:1b:f9:e1:74:1f:
         d1:59:f5:fb:ff:7a:7d:7b:68:3b:15:1d:6f:de:57:db:be:7d:
         98:24:05:28:0c:e6:06:34:3c:68:7c:0a:f8:05:a9:e4:e1:20:
         17:b1:d4:c3:19:fb:dd:48:69:1b:dd:8f:f2:a5:93:ac:cf:5b:
         70:55:4a:d6:3e:fd:c5:75:12:dd:30:28:3a:cb:38:c2:30:ca:
         07:a7:bd:2d:e0:95:8c:58:2b:68:86:00:d6:26:46:25:3f:e5:
         e6:05:24:ac:98:5c:70:87:09:dc:4d:68:91:d7:44:bd:de:34:
         84:ec:48:00:0f:86:56:35:61:62:7e:6f:39:69:27:25:bd:e8:
         12:d6:1f:3f:05:f9:fb:e7:13:97:4b:ec:aa:6b:77:4a:60:93:
         33:dd:d5:40:6f:d3:c3:51:9e:e2:9e:b6:28:fe:60:a6:d6:d8:
         c6:69:77:41:e4:0e:ee:3b:37:57:4b:e0:39:b0:16:1c:7a:4c:
         ec:b7:62:47:33:61:96:1a:bc:89:fe:72:a4:8a:ed:a2:39:72:
         88:fd:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:05 2026 by rpki-client