Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
File:                     NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json)
Hash identifier:          rdZxJYFXf4VcV0092qEhMf8mGsH6D3+JFaASEwr0XFo=
Subject key identifier:   6A:A9:F7:83:82:CC:1F:A3:CF:33:42:92:2C:27:53:06:B6:4B:0F:15
Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
Certificate issuer:       /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
Manifest number:          26
Signing time:             Sun 01 Mar 2026 10:16:11 +0000
Manifest this update:     Sun 01 Mar 2026 10:16:10 +0000
Manifest next update:     Sun 08 Mar 2026 10:16:10 +0000
Files and hashes:         1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: n4TXEEkOBBrjdqgJer+69QzJCwfwl5SCMHMZ2Pcd+9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
                          rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
        Validity
            Not Before: Mar  1 10:16:10 2026 GMT
            Not After : Mar  8 10:16:10 2026 GMT
        Subject: CN=69a411eb-d13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:fd:9d:d2:2c:35:6c:bd:74:99:ec:99:cb:
                    f1:b1:b2:ec:d5:cc:50:d9:77:2a:4d:f3:0b:7f:1d:
                    a0:06:96:4f:c1:4c:85:40:1c:42:c5:16:c5:12:d6:
                    7d:60:48:61:53:72:f6:04:36:b1:2a:03:ba:bb:9a:
                    c6:13:b6:7d:9f:2f:a2:3c:04:52:0a:f8:0c:15:30:
                    70:38:68:ac:0c:92:b3:f2:cf:4c:f8:52:ec:c6:81:
                    69:a2:9b:bc:0f:48:13:e1:42:45:ce:d9:66:28:cb:
                    a9:bb:4f:ef:48:86:65:be:47:6c:5b:9d:dc:19:07:
                    e0:ec:79:b4:96:8f:4c:06:dd:a0:bc:95:ee:93:a3:
                    3e:bd:6d:b2:62:13:1d:36:a9:23:d6:b3:92:9e:ad:
                    75:f3:bf:ae:f8:fc:f3:53:df:18:7a:04:53:96:9e:
                    56:c1:ac:96:ac:2a:29:38:b8:b9:8e:73:ab:72:0a:
                    30:40:58:36:9b:6a:3f:24:c4:86:cd:2d:10:49:8c:
                    1e:4a:14:eb:a2:43:74:b7:74:d2:6d:36:30:5f:5b:
                    7d:0a:d7:af:a1:c3:8e:d9:64:ca:bd:43:9e:79:8d:
                    52:6a:3b:e2:00:8b:67:2b:56:22:9a:39:5d:93:c9:
                    1f:60:34:4c:a5:32:5e:54:20:fa:86:e9:8e:45:84:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:F7:83:82:CC:1F:A3:CF:33:42:92:2C:27:53:06:B6:4B:0F:15
            X509v3 Authority Key Identifier:
                keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:89:91:2d:b7:19:10:28:c7:6f:52:77:3d:c3:d5:dd:af:1c:
         f9:81:23:7d:c1:c1:e4:1d:13:2c:75:f0:8b:ae:7d:fc:b5:9e:
         b5:54:e1:92:f4:be:59:00:03:65:fd:7f:94:cc:11:72:54:7e:
         ea:b5:03:1e:84:94:9a:37:b1:04:77:e6:cb:56:d3:22:91:2b:
         1d:69:f2:39:4c:35:df:a0:9a:32:79:d9:2b:52:f7:7f:3a:06:
         ef:a1:ef:f9:ec:b6:a3:d6:3b:8c:db:d2:e4:41:9e:ba:85:a4:
         c5:96:85:8d:01:5e:15:dd:3d:3f:5b:0a:f8:dc:75:c2:ac:46:
         f4:64:37:ef:41:7c:0d:f0:62:46:c5:86:ed:3d:c3:29:da:fd:
         b2:e8:6c:07:44:56:82:37:b0:ac:1b:87:91:3c:36:1f:63:4c:
         81:0e:7f:8b:d3:84:72:da:e6:cc:b0:d6:16:7d:34:77:48:df:
         ba:fe:a6:38:0e:b9:1b:85:66:34:2d:e1:30:65:90:4c:25:2f:
         39:40:21:98:f5:cb:41:e3:b8:24:42:6a:a6:37:a1:c8:48:45:
         4e:75:28:aa:a3:90:7a:4e:2f:d0:bb:70:1d:d2:34:09:46:58:
         1d:f0:0e:29:77:85:3c:3c:f7:93:83:55:9d:c2:92:60:e3:55:
         4c:40:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:43:47 2026 by rpki-client