Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          aoIoI4K76fZgu+MNRZJE7z04epZ3JlKWK206fbGVyrw=
Subject key identifier:   62:C8:9D:56:62:05:F6:AD:32:0E:1D:64:3F:49:25:A9:65:2A:C9:E5
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       09C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          0990
Signing time:             Sun 26 Jul 2026 20:34:11 +0000
Manifest this update:     Sun 26 Jul 2026 20:34:11 +0000
Manifest next update:     Sun 02 Aug 2026 20:34:11 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: 2URleyWYl28ANr4e0DDXN0xOF8ukC+qt4bXFCicr87U=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: 7BcXlcd3LJPGSVAJ0cpsMaAQmbsNPhOb+ijpOwrVFzQ=)
                          3: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: mdaUyLNP5ILBUXwjj5qxgg+9hrAAfPyxuDqIwoe7rWU=)
                          5: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: jmiRcmGtCSPQ80tETmfEOVJ+GurX16ZfdMdpnSOQ5WA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Jul 26 20:34:11 2026 GMT
            Not After : Aug  2 20:34:11 2026 GMT
        Subject: CN=6a666f43-e2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:46:a0:c2:b7:61:87:0e:e4:25:4a:18:7f:
                    41:be:bf:6b:da:f4:e6:83:cf:8c:c1:d9:ef:90:15:
                    84:82:94:e5:36:50:ba:fb:b5:d2:32:ea:bc:42:fe:
                    cc:20:62:09:2f:4b:6d:2a:c3:f4:5b:fa:8b:66:e7:
                    ef:3c:e1:84:39:41:aa:bf:bf:0e:a7:7a:f1:01:22:
                    d5:3e:e2:18:9c:71:46:7e:53:b8:c8:f4:64:3b:40:
                    42:0e:44:31:f0:c2:68:33:a5:fc:e8:6b:34:d4:94:
                    92:47:8b:7e:fc:1f:10:da:db:51:a3:cb:ff:b5:de:
                    e2:16:10:0d:1f:e3:25:97:6b:5f:2d:61:1d:96:6c:
                    37:67:69:77:d8:08:2a:b1:92:af:23:5e:28:8c:bd:
                    3d:64:c2:e4:2f:0e:38:87:be:90:f8:62:54:79:b9:
                    14:a2:a6:d1:99:45:fb:db:27:f1:40:56:25:cc:64:
                    c7:b1:d7:b3:32:69:b8:99:e3:32:c9:f1:87:b0:24:
                    10:ca:0e:ec:26:c2:dc:f5:a0:60:4c:80:7b:4d:23:
                    35:f3:22:6e:68:49:55:1e:d5:5f:18:ec:50:7e:4f:
                    08:40:96:95:29:43:c7:cc:69:f8:ea:88:24:2e:8e:
                    74:6a:af:43:c3:b9:db:53:e3:61:d7:24:28:56:29:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C8:9D:56:62:05:F6:AD:32:0E:1D:64:3F:49:25:A9:65:2A:C9:E5
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:2f:94:66:e0:5f:3a:2c:88:5e:4f:5f:fa:5c:2f:f2:a9:
         c3:8b:df:59:84:b9:26:8a:9d:94:65:16:72:91:0a:f2:75:46:
         db:ac:2a:61:24:6d:26:1a:56:14:a7:9e:17:51:a4:a3:ba:37:
         03:85:89:18:44:73:aa:d7:94:97:3c:18:91:eb:40:7f:2e:99:
         ec:a1:2e:2d:fa:c8:93:53:f0:8b:a4:41:fb:3e:93:3e:32:2b:
         95:51:5b:42:70:4b:5c:b6:52:39:f5:a1:1d:88:fb:40:a7:33:
         3e:19:cd:14:73:31:d1:e3:59:36:48:85:69:c0:5d:4e:40:79:
         d9:1e:fc:d9:19:a7:d0:7a:fb:b6:47:fc:c1:13:5e:62:5c:e9:
         7a:ee:ff:fa:00:e9:f3:a8:56:f6:2e:38:2e:de:1b:66:56:f7:
         5d:e4:9c:0b:4b:94:54:1d:b7:0c:8b:7b:18:39:40:76:a3:87:
         31:f0:2f:35:e6:5e:87:92:d2:ce:b7:69:6d:27:6d:a6:4f:72:
         fd:0d:b5:d0:c9:5d:15:f1:27:71:4e:f4:63:1e:68:dd:63:0f:
         2a:cc:30:fe:bd:b7:0c:71:64:a9:9a:80:67:1c:d3:7c:4c:10:
         b6:d3:e8:9b:dc:b0:7c:8f:b0:32:9d:1e:10:86:4f:23:d6:93:
         08:0e:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:46 2026 by rpki-client