Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          b34LgsLLSKwTF5SotrR3Bz0QVBwlZ8cmU4yK4yRBuko=
Subject key identifier:   7D:05:0A:7F:18:D3:B5:89:41:FF:80:DD:AC:A1:4F:B7:D7:66:14:9F
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0D73
Signing time:             Fri 12 Jun 2026 18:03:45 +0000
Manifest this update:     Fri 12 Jun 2026 18:03:45 +0000
Manifest next update:     Fri 19 Jun 2026 18:03:45 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: 6+3oYxJpKH1eN/PQ4oVqR0kpkmls+obh7lb68uB+DUU=)
                          2: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: h8pcOFfHHKAzYno1AnQaMU90IxuRx7WrkR44Fvue/Sg=)
                          3: 13D5D992979E11F08E996475C4F9AE02.roa (hash: l2h+kLqNSRAA/8kNK3Z7PjdMfsh/1wuCk20+NGCclYU=)
                          4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: O3t2hIIT2ftD/XMhSLHv6uv1WSk8u/lPKBYC3WyqprQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Jun 12 18:03:45 2026 GMT
            Not After : Jun 19 18:03:45 2026 GMT
        Subject: CN=6a2c4a01-b79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:c6:8e:7c:ee:11:73:9a:10:ed:0a:bd:69:
                    69:47:60:35:14:91:20:34:dc:63:c0:f6:3e:8d:31:
                    f9:34:c3:fb:b3:fe:89:83:c3:af:1e:5a:3b:f2:4a:
                    df:82:29:20:88:f5:d6:3a:90:26:00:41:f1:f5:08:
                    05:ba:f1:fe:08:16:cc:05:4d:ac:a4:22:7a:19:3b:
                    a5:75:c7:61:b4:b8:bf:fb:50:db:b3:e5:b1:18:09:
                    0e:bc:35:37:e7:10:91:d3:f0:30:cc:50:5f:4a:8e:
                    44:a9:8d:ef:07:ae:5e:c6:f1:1a:bd:02:26:70:d1:
                    a8:51:26:d6:82:b9:17:c4:47:c4:cf:c9:0e:20:85:
                    e0:21:cb:d5:ae:cc:cd:11:32:35:33:19:a2:7f:13:
                    e1:47:eb:1d:6a:f2:41:25:fb:3c:31:65:72:60:80:
                    8b:da:53:ee:5e:c4:3b:a2:aa:6c:84:bc:d0:bf:5f:
                    3e:ca:21:bf:b6:ee:90:e9:0f:f6:a5:9c:24:db:2b:
                    2c:c2:6d:cc:29:48:6e:12:20:1c:f6:a5:4d:73:e1:
                    6f:f2:df:68:bc:e4:93:bd:40:13:c3:e1:1a:a6:c0:
                    66:e2:94:b4:73:d0:32:c9:82:69:7a:c7:16:47:b8:
                    28:65:9d:ad:f3:91:a2:25:7f:0d:0a:cb:c7:03:0c:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:05:0A:7F:18:D3:B5:89:41:FF:80:DD:AC:A1:4F:B7:D7:66:14:9F
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4e:1e:28:b5:5a:21:9d:38:32:5b:71:76:e0:76:67:2f:d7:
         df:d5:3a:9e:7e:3d:44:79:19:12:32:5a:eb:d4:61:06:a1:e1:
         e4:1c:a9:7c:91:8c:85:7d:07:3b:bb:e1:5e:8c:d7:c4:42:7f:
         c4:06:22:6e:2e:e3:1f:31:e7:2a:8d:e7:a1:e8:58:93:06:45:
         30:51:a4:27:2a:87:f6:7f:4e:09:53:a5:77:0a:fd:ef:6c:74:
         02:3f:17:59:b9:1d:4f:1d:17:35:5d:07:e4:ac:55:e3:30:90:
         f6:e9:2c:b9:b6:1b:72:37:25:e9:90:c6:43:20:c3:5d:60:ea:
         72:c8:3a:e8:ad:0b:7a:02:e6:3f:e4:1f:21:f2:60:f8:e8:90:
         a6:28:f8:ff:47:2d:32:91:d8:48:d3:b9:b1:96:c5:1d:d4:6b:
         f4:37:b9:a7:44:26:63:14:fb:39:0a:4f:a9:f1:f7:df:bc:e7:
         51:7d:7c:77:d0:cf:2a:c1:8c:6b:87:a4:3e:8c:df:94:56:41:
         d3:28:b3:c8:86:21:86:b6:0a:ec:dd:85:dd:cf:d0:66:36:b4:
         bd:a7:de:a3:16:5e:87:e9:f4:36:13:b1:18:17:98:d6:4e:e2:
         50:4b:de:df:6d:5d:6b:b4:5a:54:50:58:cc:b4:69:0c:71:d6:
         85:4e:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:57 2026 by rpki-client