Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
File:                     nb0ycj1x0bhWzIRJBDf78NpVJWo.mft (raw, json)
Hash identifier:          Xc95WPVhCl4wqNEFhsP6ZgnPBLg1zx1ZIcDBJSNEUxI=
Subject key identifier:   9E:39:B3:2F:D1:BD:FC:4D:4F:EB:35:8C:6E:94:C0:B3:67:B4:77:46
Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A
Certificate issuer:       /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
Certificate serial:       1006
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
Manifest number:          0FFD
Signing time:             Fri 12 Jun 2026 17:25:42 +0000
Manifest this update:     Fri 12 Jun 2026 17:25:42 +0000
Manifest next update:     Fri 19 Jun 2026 17:25:42 +0000
Files and hashes:         1: nb0ycj1x0bhWzIRJBDf78NpVJWo.crl (hash: LvBIJfSYISRhhA8SO7abhgPR0x7Fnqaa62wJmDXXOIg=)
                          2: B0DA9FC46FDD11E9BC194664C4F9AE02.roa (hash: DqcO1uKyGorzFQae1aCUq8/bsyuYfHY7JCuuxkGqdBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl
                          rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4102 (0x1006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
        Validity
            Not Before: Jun 12 17:25:42 2026 GMT
            Not After : Jun 19 17:25:42 2026 GMT
        Subject: CN=6a2c4116-ec71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:bd:32:3d:09:27:12:8e:0c:9a:8f:92:9b:
                    48:28:66:ee:48:71:d8:d4:e6:92:91:5a:3e:42:f4:
                    5f:d9:85:2d:36:14:96:56:ab:88:52:6a:b1:22:2d:
                    ae:b3:a1:18:12:96:46:ea:5a:87:eb:0a:bc:78:95:
                    50:9b:1e:ae:bd:fa:a2:69:d8:ca:6b:0b:8c:b7:cd:
                    cf:dc:da:62:f2:e6:6b:36:42:51:60:68:34:64:38:
                    42:e5:39:c6:9e:ed:6d:58:0d:99:e8:88:76:18:27:
                    83:3a:d2:be:47:89:10:81:d8:d3:c4:1a:32:e5:5b:
                    97:f9:05:cc:ed:8c:73:7b:3d:ae:83:ac:62:3e:59:
                    c8:82:45:1b:bd:f0:d0:2e:8b:8f:84:18:4f:48:c6:
                    b7:68:dd:a3:a3:79:88:9d:7e:5e:7a:aa:8f:43:df:
                    4f:97:3e:19:d9:d4:06:19:38:e0:93:84:cc:4c:df:
                    90:dd:c5:25:2f:50:44:c7:04:c0:d6:6f:35:dc:b0:
                    7d:32:74:d4:aa:cf:2d:e1:df:2e:a7:e7:17:6c:16:
                    d2:0b:86:2a:7f:4d:37:10:5c:ec:16:f6:11:50:46:
                    dc:5c:70:a4:6f:bd:48:23:85:5a:e7:bd:9e:96:ca:
                    55:df:7b:52:53:df:5c:2c:cb:d6:c7:ec:d8:f3:4d:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:39:B3:2F:D1:BD:FC:4D:4F:EB:35:8C:6E:94:C0:B3:67:B4:77:46
            X509v3 Authority Key Identifier:
                keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:71:be:e1:ef:6b:02:f3:23:a4:90:8a:f2:b6:18:f2:50:
         94:ba:3f:ae:02:57:aa:37:4d:e7:81:12:24:8a:d2:0b:02:76:
         af:6f:c2:74:a1:e4:b3:fd:5d:5a:87:9a:ba:a8:84:6b:5b:0c:
         5f:63:d4:5d:b3:1a:11:f6:72:c7:0a:e2:ab:30:fd:02:8b:79:
         f7:82:94:02:46:da:5b:e8:15:a9:0e:27:d8:a4:9c:ea:a1:b5:
         ab:f0:d9:09:73:0a:44:f5:86:b4:55:1b:d0:c0:bd:e6:f6:a4:
         7c:b0:2a:ce:64:9d:5b:8f:74:94:c3:f6:b6:4f:3f:d9:fb:18:
         3b:41:4b:41:31:7a:f4:51:ff:72:43:68:61:f5:82:31:23:9c:
         1e:93:a6:e9:38:99:af:d5:95:7e:09:31:09:04:31:c4:c1:a4:
         5c:de:ea:0e:32:99:0a:e6:f3:81:26:6e:78:b5:77:35:ea:c1:
         35:99:90:c1:28:1d:82:8b:67:3f:85:67:b8:88:c6:3c:ab:d8:
         85:6b:44:20:bb:3d:6b:6c:8c:ca:7e:e7:89:2e:9f:14:ec:84:
         9c:8c:2b:a2:28:5a:17:9e:12:72:fd:de:2f:33:31:b9:0e:f2:
         c3:ea:57:0a:21:2c:86:a9:8a:bc:f4:3a:9e:e0:f8:0e:7a:b6:
         f4:b9:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:11 2026 by rpki-client