Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
File:                     NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json)
Hash identifier:          8cTmE5nDCKoQ3X5SxvpELW2gGgK3WYQF7oMbQMLFPBU=
Subject key identifier:   03:58:4A:82:53:87:BD:91:AB:C7:5C:14:22:7B:D2:7A:32:56:3B:2A
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       0ADF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
Manifest number:          0AC5
Signing time:             Fri 12 Jun 2026 19:31:06 +0000
Manifest this update:     Fri 12 Jun 2026 19:31:06 +0000
Manifest next update:     Fri 19 Jun 2026 19:31:06 +0000
Files and hashes:         1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: z6F9wQAmYbQzkqxvNCd5YGyZukIyVhPTg4+vnYehj40=)
                          2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: Qr7OnU5cwXgYQ6DyrDnDHL3zNQ6VCMQTENBCUIMJfFg=)
                          3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
                          rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: Jun 12 19:31:06 2026 GMT
            Not After : Jun 19 19:31:06 2026 GMT
        Subject: CN=6a2c5e7a-6212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:6c:ce:ce:bf:f7:9d:92:e3:cf:0d:94:06:
                    a9:30:68:9d:35:0e:67:ca:8e:ae:92:35:5d:31:85:
                    60:e6:f5:64:3e:02:d5:74:be:46:30:47:ea:04:2a:
                    ce:8a:0a:df:4f:38:ec:e8:33:6a:ff:e6:ef:b6:26:
                    d9:59:ac:ad:07:0f:6f:10:fd:99:2f:80:21:b0:2f:
                    c7:d5:dd:5a:00:fc:cf:85:60:d2:db:21:f0:c0:ba:
                    d2:29:56:50:11:84:d6:70:c2:2f:1a:0e:69:d0:84:
                    71:d2:61:92:32:45:45:a8:7b:a0:f4:5e:62:43:10:
                    1b:26:6f:aa:67:a4:a7:5a:00:84:a4:0a:8f:c0:0a:
                    3f:2d:4c:ac:ac:bb:b3:1a:a7:fd:70:a2:13:cd:3a:
                    87:64:d7:1a:51:de:ad:3a:d5:73:cd:69:56:d4:00:
                    89:cc:35:90:53:13:b9:a8:c0:8b:59:3c:5c:c4:0f:
                    4b:6b:dc:62:5d:49:f7:e4:71:eb:99:c1:2c:6e:cf:
                    fd:43:19:76:44:4f:e5:32:88:f5:63:97:f1:6a:93:
                    d6:74:f5:2b:84:8f:f5:5f:22:27:97:cb:c8:ad:0a:
                    aa:31:27:72:7b:4a:a9:78:36:6d:17:99:bd:90:f0:
                    1f:ed:41:d1:67:21:e4:b8:b6:0c:7d:e6:46:29:2a:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:58:4A:82:53:87:BD:91:AB:C7:5C:14:22:7B:D2:7A:32:56:3B:2A
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:24:6e:9a:77:a3:a5:a4:bd:e0:db:b4:61:1a:87:a0:11:89:
         49:33:9e:34:b7:12:4c:93:e8:2a:c1:18:46:f4:e2:fd:d6:cc:
         38:e0:f1:da:7d:e7:cf:09:16:86:fb:e7:08:6a:b1:a1:98:cd:
         47:f4:84:6f:16:04:f0:d8:96:2f:79:e4:9f:1b:dc:65:f2:0a:
         8c:15:da:d6:0b:7f:12:27:03:2f:fb:42:fd:24:1b:56:36:30:
         b9:ca:56:1a:75:cf:ca:29:5f:3b:87:1c:9a:cf:94:17:f5:b6:
         65:3f:47:a4:0e:12:20:96:01:2f:96:48:5a:6d:b1:b2:5c:eb:
         42:7c:bf:14:a3:b0:20:a3:32:55:b6:3f:c1:19:21:db:b1:a4:
         60:d8:85:6f:ab:39:49:ba:42:1a:bf:fc:d2:4e:ed:88:9f:5c:
         b9:2b:2b:15:5b:e4:79:4e:2f:40:be:cd:31:d9:d1:f6:e6:9f:
         a0:9a:2d:e8:a9:ff:38:4d:7b:fb:6d:fa:07:2d:ca:7a:21:ac:
         a5:0a:9c:5b:22:d6:cf:f1:67:b8:d4:1a:ab:36:6c:83:1b:c1:
         1b:aa:95:06:29:7d:44:40:94:e4:c7:00:a2:03:08:fe:fa:5a:
         6b:78:d4:08:e6:f5:58:73:70:2d:28:4d:42:80:34:fc:2f:74:
         51:92:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:46:14 2026 by rpki-client