Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
File:                     nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json)
Hash identifier:          uphhL75xBsH1JowSZV8MCozA7Hkk/YAsU+fYW2I7kBo=
Subject key identifier:   79:6D:4B:1D:15:B8:1C:FB:6E:C6:74:57:E7:A0:55:F7:B7:40:5A:6B
Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43
Certificate issuer:       /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
Certificate serial:       0473
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
Manifest number:          046C
Signing time:             Mon 27 Jul 2026 01:08:08 +0000
Manifest this update:     Mon 27 Jul 2026 01:08:07 +0000
Manifest next update:     Mon 03 Aug 2026 01:08:07 +0000
Files and hashes:         1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: CvMAlNyjM+6VmsCRuYdTmDoslU9fSZVxW1sXjEIzXmM=)
                          2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: AIiAPtcEdSGDtm5Xu/SA/2I+9nLKM1Ar3r+Ob3EnuAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl
                          rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
        Validity
            Not Before: Jul 27 01:08:07 2026 GMT
            Not After : Aug  3 01:08:07 2026 GMT
        Subject: CN=6a66af78-5eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:b5:50:c2:44:c8:e9:98:a5:fb:d4:15:f1:
                    cc:f0:59:ee:3b:fc:aa:08:15:25:b7:30:01:7c:99:
                    25:90:d3:f7:4e:3b:df:cf:87:a5:88:ab:95:ca:32:
                    af:11:7a:4b:21:2f:bc:21:41:a3:1d:eb:bc:cf:11:
                    1d:98:0c:9f:4b:e8:f2:37:11:0d:01:02:10:d1:7b:
                    61:31:cf:a5:f3:9f:0b:bd:10:aa:22:f2:8b:e7:97:
                    03:de:f4:e6:24:5c:50:0a:52:82:7a:04:53:85:7b:
                    b6:41:3b:8c:8c:84:f1:3f:93:a7:dc:4e:11:8e:0d:
                    35:34:3d:14:fd:d4:5f:30:e3:b5:2b:76:9d:08:06:
                    14:af:e6:b3:59:1d:4a:55:dd:c4:a4:c5:e8:99:a2:
                    34:02:08:80:e0:ef:c0:f4:49:19:30:0f:e5:63:88:
                    24:6c:49:0d:24:dc:d7:b3:22:68:f7:7c:21:bf:df:
                    12:0e:d6:24:0f:e0:e7:b9:2f:83:d7:95:c9:0b:3b:
                    dd:14:09:27:d4:b6:55:e4:69:9e:e4:97:73:4b:6d:
                    e7:f8:6a:3f:8a:46:01:91:d9:29:ea:19:17:9f:51:
                    b4:0d:4e:8a:3b:a5:98:a7:6a:af:8e:bf:92:10:b5:
                    fe:59:c3:e9:45:00:1a:25:fc:92:6f:e4:42:8f:5b:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:4B:1D:15:B8:1C:FB:6E:C6:74:57:E7:A0:55:F7:B7:40:5A:6B
            X509v3 Authority Key Identifier:
                keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:c2:ae:45:52:21:09:4b:35:72:ba:d0:4f:a7:a9:a9:2b:
         cd:41:ea:f8:68:63:d9:2d:27:09:31:5d:5c:c4:29:d8:af:d7:
         28:50:32:7f:2e:59:d2:f9:ab:32:41:13:45:47:d4:61:12:d5:
         81:47:e8:51:8a:e5:4f:bd:2e:70:5f:ce:73:38:96:28:c3:56:
         d1:05:ff:57:a4:67:02:ae:68:24:cf:1e:69:31:8a:7d:0f:92:
         b4:0a:55:0d:29:b3:54:37:77:46:36:dd:3d:2e:8f:0d:b2:8c:
         af:d0:72:c4:4f:90:8b:f5:da:e9:16:5c:34:90:61:a8:cf:89:
         1b:e5:61:c4:c6:41:b5:2b:9d:27:bf:cd:8e:8e:c9:64:16:57:
         46:c6:e5:d0:55:d9:50:a5:5d:bb:f1:c1:d7:47:cc:8e:60:7a:
         7d:bb:d5:10:56:2f:7b:1a:5e:70:40:c0:53:3f:5d:9b:a5:03:
         82:f6:b9:3c:94:31:09:e2:d8:6d:51:2f:4b:7c:41:74:fe:fc:
         4a:ce:8d:2b:bf:80:7a:5e:5e:fa:47:77:c2:0d:f6:26:75:a0:
         a4:b4:d3:36:c5:9b:fd:7c:4f:13:bd:f7:71:9b:5f:65:f2:61:
         83:a8:ce:a0:bd:40:ee:78:40:1b:b0:81:77:37:db:fd:cd:97:
         86:38:62:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:49 2026 by rpki-client