Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File:                     Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier:          8wrQdPADp4lsCeizE2wLvObfidTriVYyotqgb05r7Pg=
Subject key identifier:   B0:63:CA:FD:49:36:2B:4E:A6:12:4B:CA:F0:0A:73:96:7F:85:48:41
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer:       /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial:       2803
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number:          2803
Signing time:             Fri 12 Jun 2026 15:36:10 +0000
Manifest this update:     Fri 12 Jun 2026 15:36:10 +0000
Manifest next update:     Fri 19 Jun 2026 15:36:10 +0000
Files and hashes:         1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: 5wvYtFKiJkvy8XLgu2geBhFLAl7m5PeepMUCMDwds3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10243 (0x2803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
        Validity
            Not Before: Jun 12 15:36:10 2026 GMT
            Not After : Jun 19 15:36:10 2026 GMT
        Subject: CN=6a2c276a-ca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:21:eb:a0:32:6f:5a:d4:3d:c0:b3:37:20:
                    81:19:29:c4:e8:20:ac:1b:d7:45:6e:23:2b:84:64:
                    b4:7c:22:00:c6:28:fc:87:28:a4:b2:13:1e:97:1d:
                    34:7e:0c:bb:62:fc:4e:b6:6f:40:65:3b:45:a0:7a:
                    8b:b6:be:80:94:f0:16:2c:9a:db:88:71:72:f3:a4:
                    0c:0f:7e:c1:75:c4:21:52:14:0d:8c:34:87:93:5f:
                    4c:93:ef:19:22:3c:39:4a:22:8e:b4:0b:28:63:8b:
                    20:b6:a9:f6:50:7a:68:22:29:51:6f:4c:5f:ec:77:
                    3b:47:84:85:7c:26:b6:44:e4:c5:cf:7a:a6:21:40:
                    8f:63:86:b1:44:6f:bb:15:71:79:69:14:88:9f:4e:
                    db:91:87:1c:94:62:ab:90:6b:da:82:5b:0d:86:11:
                    10:af:46:77:9d:7c:b8:c2:af:83:c0:1c:d0:8f:ab:
                    77:a8:53:76:e5:ef:3b:16:f9:9c:9b:01:5e:e4:6f:
                    03:b5:1a:3b:c8:a8:f6:05:64:a2:bd:d7:e9:02:9c:
                    f0:2d:e1:bc:80:4b:27:05:2f:e8:01:b6:08:b8:23:
                    78:3a:2c:49:33:dd:17:39:b3:48:a1:61:53:19:33:
                    21:13:e8:a5:0a:02:4f:4a:5e:e7:51:95:76:8a:25:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:63:CA:FD:49:36:2B:4E:A6:12:4B:CA:F0:0A:73:96:7F:85:48:41
            X509v3 Authority Key Identifier:
                keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:e2:eb:7c:6f:3a:33:5a:0c:91:f0:48:6e:30:22:af:d8:
         93:e9:15:d1:fd:15:a8:c1:b5:c4:81:96:dd:91:f7:64:6b:55:
         4b:43:78:81:c7:bd:3e:22:51:2e:ea:9c:84:5a:eb:de:b5:f8:
         04:48:e2:a7:b5:37:d8:f3:81:62:6b:04:0a:18:36:ef:71:4b:
         22:69:7b:1b:23:5e:03:2c:ee:59:87:b8:09:fd:c2:05:2f:19:
         f7:37:75:fb:83:88:ff:5f:74:2e:17:69:6f:de:1e:94:b1:f2:
         cf:39:52:42:97:d5:08:7c:06:54:97:e0:f9:49:ad:e8:29:19:
         af:15:20:93:05:d0:1b:4a:69:96:3b:20:78:d7:36:b7:36:b2:
         75:c3:c1:44:12:5d:7b:3d:e3:8b:49:26:99:3b:3e:64:dd:ea:
         28:84:ff:04:44:b5:64:d4:52:b4:58:9c:4d:ea:db:03:f9:b7:
         1a:87:31:36:7b:6a:b4:3c:a8:f5:82:49:8e:99:ec:77:a6:2e:
         91:91:51:dc:a8:6b:90:22:b1:a7:54:e3:e2:18:fa:b2:d7:0b:
         46:5f:8a:47:6b:de:d1:7c:11:06:ce:fc:b7:de:f3:7f:e1:54:
         68:24:fb:fd:6a:b4:66:70:89:c6:b9:aa:47:3a:87:9f:83:81:
         77:85:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:38 2026 by rpki-client