Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File:                     n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier:          3ZF+JLRq0iNlte/hbXBbURkS5IAydmzF/cu+W2pBPqA=
Subject key identifier:   CB:44:82:13:C0:4F:53:50:38:43:28:8E:DB:92:D8:86:3A:D3:5A:3B
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer:       /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number:          0139
Signing time:             Mon 27 Jul 2026 07:31:42 +0000
Manifest this update:     Mon 27 Jul 2026 07:31:41 +0000
Manifest next update:     Mon 03 Aug 2026 07:31:41 +0000
Files and hashes:         1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: fsgWOIB0JJws4fzLCKwBmh5A9k2iQq9lzdSi33Ulckw=)
                          2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=)
                          3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
                          rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
        Validity
            Not Before: Jul 27 07:31:41 2026 GMT
            Not After : Aug  3 07:31:41 2026 GMT
        Subject: CN=6a67095e-3bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:69:62:b2:18:56:d8:8d:1d:75:69:c6:95:
                    18:d1:7f:b7:c5:aa:bd:d0:27:c5:85:36:4b:4b:d8:
                    77:d6:e2:bd:f7:f7:48:49:e3:54:f7:eb:cb:26:13:
                    3b:ca:d1:68:0a:2f:3f:83:93:b4:20:a3:37:c3:54:
                    74:2a:54:ef:40:bb:16:41:8a:e1:a9:ff:31:18:a4:
                    26:91:88:bd:3d:16:2b:3e:e6:99:21:5e:41:79:55:
                    86:f7:05:cf:29:e2:a7:ed:c7:f5:90:04:c1:fc:7e:
                    52:c6:39:4a:0c:34:d4:b9:05:7b:3b:56:1e:af:bb:
                    71:02:23:27:9a:ef:e5:9a:14:06:f6:f9:78:11:51:
                    57:9a:ed:cb:e3:17:e7:f8:eb:4c:bf:c7:d9:2d:e3:
                    83:ad:83:3c:70:ff:e0:1d:ef:a9:e6:90:90:57:7a:
                    07:6a:1f:92:e7:4f:35:14:f0:3b:1a:f7:b9:9e:6e:
                    d5:1c:20:73:0a:af:18:13:97:5b:f5:5a:a5:d8:a7:
                    dd:dc:0c:97:00:07:53:95:3f:f2:7c:07:ca:dd:8f:
                    2d:95:58:2b:b4:c2:2a:df:54:b2:10:c4:53:71:89:
                    37:ec:1d:59:98:09:4d:f8:b8:eb:6a:17:52:c5:f7:
                    fb:4c:d5:26:2d:23:52:cd:88:68:84:17:4d:16:de:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:82:13:C0:4F:53:50:38:43:28:8E:DB:92:D8:86:3A:D3:5A:3B
            X509v3 Authority Key Identifier:
                keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:28:a0:ef:05:bb:f3:69:c6:93:80:f1:33:61:17:76:d8:
         18:55:2f:12:00:2f:c9:85:58:93:5a:79:8a:aa:45:65:a2:d6:
         93:88:85:61:6f:ca:cb:bd:75:2e:f7:61:b2:b4:a4:ec:5c:86:
         59:d3:f0:09:da:6e:b2:1c:f5:a4:45:5c:3c:8d:72:2d:97:94:
         5c:40:63:2b:04:01:ba:60:23:be:19:5a:f0:6a:38:d0:39:b3:
         67:6d:74:6e:e8:d3:85:a6:60:c1:6f:95:48:13:a1:53:4e:c2:
         12:09:00:cc:ee:19:04:a0:80:21:4a:8d:09:17:54:5f:e7:38:
         33:44:33:63:a3:7a:99:0b:e8:2f:05:75:18:e9:a8:82:fb:ce:
         f7:78:11:b0:a7:40:82:71:5d:2a:dc:5c:e7:b0:93:9f:9a:6d:
         c9:03:db:6d:ef:26:21:93:f8:51:48:e9:3d:f0:07:3b:29:30:
         1f:4f:3b:92:9b:bb:70:b9:80:98:f5:86:63:10:a2:2a:43:93:
         d9:b4:df:0f:b0:d7:99:ff:c4:84:ad:94:33:21:fd:1b:88:75:
         85:6c:b4:a5:11:7f:45:07:22:94:77:80:39:76:16:b3:66:13:
         40:66:fe:08:0b:2d:65:a3:6d:12:51:ec:0f:27:3a:37:11:b5:
         4a:9a:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:49 2026 by rpki-client