Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          PJSi07jEI9az2OA+isDztLY0rQ3JUIL0JR2N2WmYUeU=
Subject key identifier:   32:69:CD:F2:E8:6F:5F:4C:D5:7C:3F:2C:22:49:55:0C:05:19:53:82
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       0AB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          0AA8
Signing time:             Sun 26 Jul 2026 19:58:00 +0000
Manifest this update:     Sun 26 Jul 2026 19:57:59 +0000
Manifest next update:     Sun 02 Aug 2026 19:57:59 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: HYeJu6LCxA3fL/pPWV0LFgXlFW179rT9boNxcuyVc/I=)
                          2: C6D1EECC81BE11F1A685B7C064A30FBC.roa (hash: 1Jflhq0/YWfer3B+b90vVvTGQUbz1ktB3eeCu83aIbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2741 (0xab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: Jul 26 19:57:59 2026 GMT
            Not After : Aug  2 19:57:59 2026 GMT
        Subject: CN=6a6666c8-40b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:0c:30:5c:e1:56:28:8a:5d:0f:8d:58:fb:
                    c8:88:a3:28:b4:48:08:60:1c:6d:70:25:9c:9e:3b:
                    01:76:d4:41:f0:1d:47:75:3b:a2:3c:e8:33:cf:b5:
                    b1:c0:47:1c:94:23:dd:63:72:41:da:ba:e4:b0:25:
                    8e:37:36:99:83:05:28:38:dd:39:16:48:d6:e6:c8:
                    d2:3f:b4:09:1b:ba:63:5a:2f:3d:d7:bb:90:9d:d2:
                    2e:ed:cf:4a:64:f8:d7:fe:f5:cd:95:d8:c3:e4:57:
                    ed:22:5f:12:1c:1d:25:78:ac:81:c7:40:fd:55:d8:
                    9a:e5:c5:3d:94:28:38:9f:0b:d4:53:aa:fc:ad:31:
                    bd:ae:c7:7e:97:7e:6a:db:0c:51:6a:3c:24:0d:ad:
                    24:e0:89:66:aa:21:ad:a5:35:60:09:6d:4c:01:5e:
                    b8:4b:66:17:33:76:78:b5:94:ad:e7:31:09:9e:23:
                    d8:74:f8:4c:91:bd:f4:a3:65:a0:1c:e4:ed:64:8f:
                    9d:57:3c:01:0b:b4:2c:2d:81:e8:8a:b7:47:87:77:
                    c0:26:79:8a:c1:5b:b9:ed:94:b0:a6:b3:8c:d5:a9:
                    cb:10:3f:09:52:e6:75:d2:68:e6:ac:5b:cb:96:b9:
                    b5:3b:5b:5c:4b:7e:83:6b:81:f1:e9:33:e8:3c:c4:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:CD:F2:E8:6F:5F:4C:D5:7C:3F:2C:22:49:55:0C:05:19:53:82
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:12:5d:ab:f9:67:f7:06:0d:06:40:fa:54:65:f0:19:2e:
         63:47:7a:92:bf:03:22:47:d2:de:7e:d0:21:79:5c:d0:42:43:
         91:95:ba:ca:2e:94:b5:5d:67:76:1d:08:6d:14:36:6f:09:e6:
         a4:26:54:6c:91:8d:fe:17:6f:10:50:b3:89:5f:b9:5a:b3:91:
         09:61:78:e3:b7:c7:31:47:b3:6a:f4:c3:d5:41:34:b2:5f:9e:
         fc:92:77:03:93:ee:69:5d:72:8d:68:50:c3:77:9f:d7:ab:38:
         3e:54:f3:22:04:fe:3e:93:77:1f:4b:9f:e4:4c:f8:4c:db:b4:
         1a:58:0c:31:e2:7f:13:52:ab:c7:a7:fd:bd:73:8c:7c:f6:a5:
         01:ac:21:4c:01:c3:70:e3:4b:ce:b1:4f:c4:be:78:ac:f3:07:
         71:fb:c8:72:25:a5:f0:ac:31:3d:63:0d:5f:37:53:c1:8b:bd:
         bb:4a:3f:3c:f1:c7:a4:fa:da:1e:d6:63:40:07:27:f6:e3:c8:
         40:d5:a9:35:6b:d9:33:70:67:86:11:a6:cc:f7:62:16:c8:9c:
         47:96:cc:23:60:d1:a9:9e:f8:47:af:b8:55:04:c5:53:fb:cc:
         dd:6e:ad:c5:53:2f:7e:fa:e5:c2:b9:f1:14:03:a6:f3:e3:d7:
         b9:74:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:08 2026 by rpki-client