Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
File:                     NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json)
Hash identifier:          TSymgGTsBAE0laMH4gWYT5uo7d3Smc3YWGKCQIF/Wq0=
Subject key identifier:   30:F9:AD:E2:41:0E:3D:F9:85:5F:7A:44:34:2B:BB:3A:EB:8F:5A:80
Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29
Certificate issuer:       /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929
Certificate serial:       3560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
Manifest number:          355E
Signing time:             Tue 28 Jul 2026 15:12:06 +0000
Manifest this update:     Tue 28 Jul 2026 15:12:06 +0000
Manifest next update:     Tue 04 Aug 2026 15:12:06 +0000
Files and hashes:         1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: Att419nID2OCaTR44i6fwaF/5ABbVdCE2wGspS2GhSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl
                          rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13664 (0x3560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929
        Validity
            Not Before: Jul 28 15:12:06 2026 GMT
            Not After : Aug  4 15:12:06 2026 GMT
        Subject: CN=6a68c6c6-9c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:c8:88:3e:75:85:66:fd:f9:0d:d5:6e:74:
                    a0:e9:ed:f3:98:f1:dd:e4:f9:c1:16:97:98:03:33:
                    11:cc:e0:95:1c:49:59:1c:ad:c4:65:60:6a:27:d5:
                    88:c6:b6:d3:f3:88:1f:0a:3d:e6:7b:72:1c:a9:68:
                    57:5c:19:02:19:58:51:94:a8:68:c3:e5:3e:25:ae:
                    17:3c:1a:b6:a7:26:94:dc:f5:29:ea:23:88:66:49:
                    9c:e9:0d:3d:8b:49:c5:38:08:2a:97:54:d5:08:df:
                    b9:ee:de:4f:0e:e1:87:c4:96:5d:7d:c1:f7:7b:7b:
                    d4:11:f6:8f:ee:27:ea:fb:b0:45:42:88:65:85:27:
                    2c:2b:f7:84:94:7a:ee:29:83:c3:f0:c3:fc:95:97:
                    70:65:33:71:5e:51:b5:bb:00:fc:ed:e9:1e:26:49:
                    2a:0f:c7:99:d3:1a:c1:d6:be:0f:b3:7c:cf:4f:1c:
                    9d:d0:79:bf:b2:a1:e6:0d:61:61:d9:d0:50:c9:3f:
                    8b:1f:60:6c:2a:4f:ee:9f:93:d8:a0:eb:a1:8c:21:
                    e3:f4:e4:5a:12:22:5d:08:7f:12:52:c1:d5:c9:a8:
                    b0:b0:24:e5:3c:39:cf:db:d6:d0:99:b4:76:90:71:
                    66:7d:ef:85:46:e4:73:b5:b2:f5:bf:6f:c9:2c:e4:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F9:AD:E2:41:0E:3D:F9:85:5F:7A:44:34:2B:BB:3A:EB:8F:5A:80
            X509v3 Authority Key Identifier:
                keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:22:d4:f0:69:bf:92:85:a1:88:1c:74:05:30:af:bb:89:a4:
         72:15:8a:2e:3a:4f:c4:c2:f8:87:d6:9a:25:d3:48:94:1e:cd:
         4a:b1:c8:5d:8b:15:75:9b:95:5f:d3:16:3e:32:77:d0:b2:08:
         3e:03:cf:9c:14:77:b3:2b:bb:7a:2b:1d:ae:eb:4c:63:58:fb:
         cf:1e:4a:ca:93:5f:aa:a4:b0:b5:2f:d0:e1:4f:a3:78:75:ca:
         5f:08:9f:de:57:19:7e:29:f9:26:37:3c:7f:ff:2a:e5:4f:c8:
         94:e7:3a:13:be:2e:52:2d:c9:3c:7c:75:2d:69:dc:03:f4:e4:
         7d:8b:68:d4:56:54:40:f9:e5:08:22:4b:f3:c8:4f:cd:07:4e:
         d9:92:04:90:5f:72:62:ee:8d:a3:87:bd:96:6d:72:4c:87:a6:
         cd:b4:0e:cf:ad:64:17:4c:78:14:e0:c7:ae:28:ff:2a:ef:80:
         fc:e0:af:54:85:3a:1c:28:31:06:28:d5:68:60:a7:37:2c:d5:
         c9:f5:8f:49:ec:92:e8:1e:f7:9f:aa:37:64:27:f7:64:4c:63:
         db:fb:e6:1e:ae:6e:1e:c6:da:83:ef:b8:6e:fc:2e:ad:e5:15:
         a1:12:e7:06:67:be:50:5d:5d:88:38:0d:36:94:9e:97:ad:91:
         a8:76:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:47:56 2026 by rpki-client