Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File:                     NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier:          nCMpMmFnBBSqphL+1Hp6EetTh8uYjwJQz/LkFfRCJ1k=
Subject key identifier:   25:B6:57:C3:A7:33:2A:C9:D5:62:32:44:39:44:EB:1C:F0:C8:70:DA
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer:       /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number:          01C4
Signing time:             Sat 13 Jun 2026 03:47:10 +0000
Manifest this update:     Sat 13 Jun 2026 03:47:10 +0000
Manifest next update:     Sat 20 Jun 2026 03:47:10 +0000
Files and hashes:         1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: ibnGRIJ+WH3aVgdl3D0xlZhssKYGgoGKEHJiOolC+r0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
                          rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
        Validity
            Not Before: Jun 13 03:47:10 2026 GMT
            Not After : Jun 20 03:47:10 2026 GMT
        Subject: CN=6a2cd2be-4441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:c8:73:f3:55:82:10:96:06:80:0e:d9:82:
                    0c:eb:7e:1b:37:07:3c:6f:7e:8f:7d:8c:10:af:d1:
                    d2:e8:c6:68:a8:ff:6b:35:ff:9a:f3:07:ab:83:94:
                    12:c5:6d:db:d1:72:50:a8:e2:80:e1:1e:dc:3a:bd:
                    6e:6d:81:e6:9d:c3:e1:be:50:f9:72:a0:5c:08:74:
                    d3:60:55:3c:65:f1:86:38:3d:e2:17:80:b5:e2:bb:
                    09:b2:5c:4e:75:d6:d8:36:77:1c:bc:31:60:75:09:
                    e8:f7:bc:75:df:61:84:48:ed:3e:61:9f:c0:cc:38:
                    bd:e9:a2:86:6a:f4:89:8c:a5:b3:29:be:ce:fe:da:
                    d9:6a:07:e0:98:03:f6:a2:c9:57:3a:5e:83:cf:91:
                    86:36:c5:a5:cb:41:a1:c4:fc:f8:d9:e3:63:ec:36:
                    ba:52:ec:f1:0c:a1:ae:6f:17:08:52:20:87:13:2f:
                    d3:03:b2:de:24:e0:99:b2:20:74:f2:8d:e1:e2:b3:
                    bc:cf:c9:99:fa:1c:01:42:72:90:ae:89:b0:e7:fe:
                    ed:f3:e4:9b:0c:c2:cc:dc:c8:1e:fb:f3:08:89:d1:
                    52:a9:5b:5a:38:5d:8a:3d:d1:2a:ac:c8:7e:86:b7:
                    bf:3d:08:9f:51:ad:61:2f:91:f9:43:3a:9e:cc:8b:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B6:57:C3:A7:33:2A:C9:D5:62:32:44:39:44:EB:1C:F0:C8:70:DA
            X509v3 Authority Key Identifier:
                keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:c6:65:c9:36:75:7f:03:8e:fb:ad:83:ae:c9:6d:1f:4c:
         07:19:b3:57:d6:df:0f:c9:b5:55:2e:87:82:5b:8b:ae:3a:e7:
         89:26:a5:fd:48:90:b9:de:1d:46:14:44:d1:db:87:01:f4:c0:
         5a:62:e6:5b:ef:b5:cf:a1:9b:71:d1:b0:c4:c9:aa:f0:80:ca:
         ba:c3:ad:36:ab:70:09:54:4b:ef:6b:43:c4:04:97:58:86:2a:
         88:02:80:c4:af:d5:42:cc:66:db:9e:d6:14:88:40:fa:c7:d2:
         9b:04:f4:99:0b:56:49:c8:65:61:c4:94:c5:78:1f:70:2f:1d:
         87:ff:1d:e4:fe:39:6e:8d:16:60:c6:f1:e3:9f:8a:d5:5b:d2:
         ff:45:19:3d:03:8c:ab:ad:f6:4b:d4:b2:5c:b3:98:06:38:22:
         91:98:b7:c9:57:70:84:51:df:7b:6d:79:48:d4:1b:e2:b0:c5:
         62:5c:94:34:0d:cf:16:d0:c3:b9:37:2f:98:25:e7:ba:0a:f9:
         b7:d4:27:9f:d4:23:4b:b1:28:b7:ff:cd:66:be:38:30:cd:9a:
         a1:89:73:be:d6:d5:11:c9:b9:9e:42:63:31:9c:38:72:a7:18:
         55:14:40:7c:d1:7c:fc:b5:a9:d1:2c:76:de:b4:80:e2:6d:dd:
         51:99:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:51:04 2026 by rpki-client