Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File:                     NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier:          3hugv8XEjzPrroeCsQzkwCj/D+oQDeLVE7//w/EA/sU=
Subject key identifier:   AA:F6:2A:5D:AF:43:71:8E:C4:79:2D:46:DC:1A:4D:56:93:EE:77:4B
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer:       /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial:       0BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number:          138E
Signing time:             Sun 26 Jul 2026 19:22:56 +0000
Manifest this update:     Sun 26 Jul 2026 19:22:56 +0000
Manifest next update:     Sun 02 Aug 2026 19:22:56 +0000
Files and hashes:         1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: iQg0sawmtxYCAAUcaIGagBJyUTQ5rflCBMR+TIFD+vQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
        Validity
            Not Before: Jul 26 19:22:56 2026 GMT
            Not After : Aug  2 19:22:56 2026 GMT
        Subject: CN=6a665e90-7734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:09:d9:0a:8c:e2:21:25:af:34:d2:fa:c2:
                    24:26:3d:15:a1:94:da:d7:6a:b6:c9:cc:32:bd:35:
                    56:5c:b0:60:33:64:20:45:4d:27:c0:6a:1f:5d:d5:
                    4a:1b:62:5d:56:5e:1c:e7:9e:02:72:e7:7f:d8:e2:
                    7d:33:81:c5:4f:56:42:b4:59:d6:ed:4d:72:15:d4:
                    c3:08:da:ac:1a:83:46:60:99:ac:73:df:65:05:42:
                    21:21:35:2c:c5:43:3f:f8:e9:bd:d1:22:55:79:41:
                    55:f6:4a:e8:50:c3:85:a0:62:1f:bf:23:7d:2d:7a:
                    49:1a:29:81:c1:84:bf:4a:d8:93:11:62:73:0a:ef:
                    53:37:64:d3:86:35:7f:cb:a4:3f:20:db:30:c9:5f:
                    e0:d3:db:fe:26:df:e4:19:44:58:39:46:bd:f0:e4:
                    af:94:f1:82:b5:c5:6e:d7:56:14:c5:8a:73:a5:11:
                    6b:6f:33:83:53:f8:eb:f0:5c:7b:eb:3d:3a:65:30:
                    fd:5f:8e:08:e0:9e:b3:d2:e6:16:e3:0f:30:eb:f1:
                    83:74:4f:44:db:e5:06:20:f6:1b:e5:67:a5:b9:6e:
                    2d:57:6c:dc:df:17:b4:88:ed:52:6e:9e:81:9f:1e:
                    e4:36:56:ac:f0:1c:30:8c:85:b0:d0:ad:0e:10:d4:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F6:2A:5D:AF:43:71:8E:C4:79:2D:46:DC:1A:4D:56:93:EE:77:4B
            X509v3 Authority Key Identifier:
                keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:ce:ec:8a:0d:ff:c3:d0:59:08:bc:1e:e2:51:b2:7a:5a:
         57:1b:62:66:3a:97:54:b7:d1:b8:2f:66:59:1a:ae:48:64:3f:
         11:e8:8b:42:ca:e1:76:50:52:fa:da:0b:5b:2b:9f:4a:da:7e:
         a7:46:23:a5:8f:41:e2:49:9e:8c:f8:98:4b:8e:23:9e:2c:a1:
         ae:93:89:bb:1f:3c:ea:a9:aa:6e:54:92:32:ad:13:5e:19:fa:
         cf:0b:72:22:3e:98:46:56:6e:7c:25:52:11:a1:61:fe:46:a4:
         be:3b:cc:62:3a:41:37:ef:bd:f4:8d:3f:16:c1:d4:a0:43:b8:
         f5:5d:ab:40:e6:60:86:fa:ac:94:b9:35:c1:7d:0c:ad:86:e2:
         15:d7:e0:e8:a0:cb:4a:0e:b3:56:4c:90:d3:fe:35:1e:31:0b:
         35:de:8c:f8:69:89:10:f3:ce:cf:1c:0b:98:1b:32:d4:23:22:
         f0:e0:e7:eb:48:77:f0:15:e2:e1:3e:b8:6b:a4:6b:5f:95:16:
         d3:f6:29:1f:27:6d:b5:75:7a:ea:9f:c3:8b:3c:43:52:f4:a0:
         35:11:13:e3:94:98:52:7b:64:36:12:88:1d:15:d8:d0:b3:59:
         5f:47:6a:9a:eb:32:b0:ae:c2:71:88:d1:14:18:e7:4f:fb:69:
         96:2e:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:09 2026 by rpki-client