Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File:                     nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier:          uhGuNm3/ajSuET/z1Ykjt7X1ds6h3MO1TLLtq26daZ4=
Subject key identifier:   CF:83:BB:99:E2:23:37:9D:8A:61:62:AC:16:3C:3F:4B:C8:AD:50:1F
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer:       /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number:          01D8
Signing time:             Fri 17 Apr 2026 03:20:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:20:34 +0000
Manifest next update:     Fri 24 Apr 2026 03:20:34 +0000
Files and hashes:         1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: fBC6xdlR4gq1+Hj/fU9WeNm870FzFqjX1KF18DF2Nk4=)
                          2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
                          3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
        Validity
            Not Before: Apr 17 03:20:34 2026 GMT
            Not After : Apr 24 03:20:34 2026 GMT
        Subject: CN=69e1a702-17df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:47:51:92:9a:f2:58:18:bf:88:32:17:da:
                    21:ed:b7:6f:62:47:79:7e:25:34:d9:39:cb:b0:0b:
                    48:7b:f4:67:f2:22:33:39:00:46:5e:97:7c:e5:63:
                    8a:ac:e8:11:ed:15:a9:38:fe:db:e5:d0:ac:4e:67:
                    18:ce:27:0c:33:e3:86:8e:07:90:c8:d5:5d:2d:0c:
                    af:31:fe:01:b0:9d:3d:e3:f8:7f:ad:da:53:96:3f:
                    39:7d:85:16:53:2a:aa:7e:78:6e:47:61:0b:f6:6b:
                    72:17:2e:86:49:9f:a4:ab:2d:d4:ff:46:26:50:51:
                    36:4b:2f:e5:50:fd:61:2c:cc:a0:42:a1:a0:dd:8b:
                    63:f1:52:34:ed:06:0c:c0:1f:d3:8a:2e:23:9e:26:
                    7f:34:f9:90:84:de:8f:6d:51:27:0c:59:a4:69:6b:
                    fc:9e:8f:ce:95:97:37:6f:a5:01:18:a3:7e:90:3c:
                    ba:e1:db:d1:66:3d:95:ed:44:00:a4:d8:aa:14:71:
                    97:21:4f:ed:7e:db:d4:b7:9e:41:bc:2e:94:82:2a:
                    af:73:6f:79:1a:f7:18:fe:52:5f:46:4d:13:e5:29:
                    8d:94:8e:9f:ec:52:af:cd:5b:16:ac:51:2d:17:20:
                    df:75:77:ab:42:25:3f:64:d4:80:31:0f:b8:c7:a5:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:BB:99:E2:23:37:9D:8A:61:62:AC:16:3C:3F:4B:C8:AD:50:1F
            X509v3 Authority Key Identifier:
                keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:ab:25:28:ea:95:33:ba:4b:cd:86:50:47:50:59:c0:ec:
         b3:aa:b5:4d:3f:af:d1:31:14:e0:30:75:a9:91:ba:ac:46:3d:
         c7:36:8c:4d:98:01:25:1a:76:de:ac:08:51:47:8e:83:a0:ca:
         df:44:1a:64:8a:ae:cf:0f:7d:8a:9d:43:bd:90:fa:0f:bc:0f:
         f4:88:0f:0a:75:de:56:ec:1c:6a:7e:38:80:04:d5:86:97:d2:
         be:4e:7b:08:36:8e:cf:98:5b:9d:76:57:22:a1:18:14:f2:97:
         60:80:40:ec:7a:23:5d:f3:5f:8f:4b:aa:ad:64:4e:47:4f:69:
         7d:48:5c:fc:aa:fd:1b:5e:cf:1b:3e:8f:40:7f:57:00:4b:f6:
         4f:48:14:76:e5:82:52:59:18:a1:9f:a1:fd:7c:58:44:d6:65:
         f7:7f:a3:ef:36:39:38:56:c8:3c:ad:2f:77:be:04:cf:db:47:
         4c:34:a3:0d:45:43:90:eb:dd:a3:cd:dc:aa:b1:b5:0c:e4:d2:
         6e:70:c6:fb:2d:9c:c4:cd:58:35:85:21:80:29:f2:2c:96:7c:
         f1:74:d6:17:29:72:01:49:ab:22:db:7e:7f:31:e3:6a:5a:b3:
         70:f6:78:79:a2:62:e3:27:42:71:07:7c:45:6b:ef:53:7b:b4:
         15:ce:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:43 2026 by rpki-client