Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
File:                     NNz0cp9FgmKIjvB6K9RnX24xE4A.mft (raw, json)
Hash identifier:          lhpEWpsytZtqWjBJwYdLY2CJAQusvVLR31Nzc8tTVsc=
Subject key identifier:   B7:64:88:77:E2:20:4C:4D:3A:9D:C7:47:39:A2:57:76:31:0F:E8:5E
Authority key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Certificate issuer:       /CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Certificate serial:       0761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
Manifest number:          0753
Signing time:             Fri 12 Jun 2026 21:44:58 +0000
Manifest this update:     Fri 12 Jun 2026 21:44:57 +0000
Manifest next update:     Fri 19 Jun 2026 21:44:57 +0000
Files and hashes:         1: NNz0cp9FgmKIjvB6K9RnX24xE4A.crl (hash: UtN+qxwGbCEhEkTAcS0cB1A9v9f/OkcKHPcJt8GRFFE=)
                          2: AE27A8A671B311EBB90BB364C4F9AE02.roa (hash: Yz43RwlZ5yy4nBg8j+EwoqSiXNci2+WLpvODtls54Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
                          rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B7F, serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
        Validity
            Not Before: Jun 12 21:44:57 2026 GMT
            Not After : Jun 19 21:44:57 2026 GMT
        Subject: CN=6a2c7dd9-7491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:3a:30:dd:2b:8b:39:64:7b:a4:60:3b:c5:
                    e0:8d:63:28:d8:96:1b:90:d3:f0:66:ff:74:81:06:
                    6a:d6:5a:f4:36:97:d1:18:32:20:a1:fc:d9:4d:05:
                    4a:0a:03:18:8c:57:27:30:f3:de:31:1f:d7:00:f1:
                    d8:91:2b:bc:34:5e:f2:5d:8e:bf:e2:29:03:5a:90:
                    e8:06:5b:8b:cb:02:b1:01:29:31:53:e5:68:0c:c6:
                    29:eb:ab:08:e6:27:d5:e7:49:86:2a:82:b7:1a:ff:
                    22:00:7b:ee:78:22:49:ab:94:4d:f5:35:e2:f9:9f:
                    63:33:69:78:29:78:40:14:b1:51:55:90:a6:e5:d9:
                    ee:1a:ec:3c:45:f4:04:40:32:6c:09:a1:81:f5:fc:
                    35:51:90:d1:53:cb:f8:3d:a7:90:97:71:49:43:62:
                    fa:55:79:33:61:b5:1b:e7:a3:49:c7:83:eb:0f:40:
                    cf:33:81:fc:b2:6d:ed:02:b6:0a:ed:bc:0b:2d:18:
                    62:0f:f5:7a:e4:5d:1e:5c:6f:ea:fa:3c:1b:31:c5:
                    41:b6:a3:2c:95:71:bb:d8:8f:de:fe:78:a4:35:cb:
                    4d:af:50:c8:52:50:04:d4:35:cc:b4:1c:7c:0b:7c:
                    f5:7f:87:c6:ac:81:5b:d6:fe:32:98:e0:8c:8e:5e:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:88:77:E2:20:4C:4D:3A:9D:C7:47:39:A2:57:76:31:0F:E8:5E
            X509v3 Authority Key Identifier:
                keyid:34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c2:fa:5e:25:d6:1d:4d:5d:fc:f1:43:28:66:17:77:da:35:
         b2:df:ad:d0:cb:2e:0e:ca:d0:86:48:0b:bd:b1:20:5d:22:1a:
         c1:7e:74:90:f0:bc:50:d7:ae:64:09:66:bc:d4:9b:2f:50:91:
         5c:e3:b5:3d:dc:c0:49:08:a7:4f:52:91:d0:7d:e1:b8:ed:39:
         ad:d1:69:ef:0d:69:2a:8f:5c:c0:df:5e:49:44:6b:cc:3c:ad:
         8b:4a:4f:5f:c0:56:e8:f9:ab:ff:56:35:21:0e:a3:80:10:70:
         f2:70:a4:56:86:79:c1:8f:ae:e7:4a:f3:73:e1:27:ed:28:09:
         37:21:0e:e5:9f:36:d8:6d:5d:e7:db:35:d1:d3:a4:86:25:21:
         b7:8c:40:5b:ef:64:1c:d7:d0:a4:4b:dc:26:1e:df:66:d5:b0:
         2a:0c:47:74:c0:50:66:fa:f7:3e:3a:e5:22:23:78:a3:67:df:
         28:c7:a2:b5:b8:01:6d:92:9d:b5:d0:ff:97:8d:51:8b:8f:0d:
         dd:d0:77:ae:5f:eb:9f:8b:ae:f8:2f:9a:75:4b:f3:41:d8:05:
         a6:77:a9:a6:8e:7c:11:92:71:fd:16:42:9f:32:e7:9f:c2:22:
         c0:69:25:3e:06:ef:7c:b1:78:b9:12:d2:55:0e:a5:8e:66:50:
         9a:1d:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:08 2026 by rpki-client