Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
File:                     nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json)
Hash identifier:          FGSTbrwfwM+A3JXD3tdeXUOg6nkoOHM4L9n+YTj8Hio=
Subject key identifier:   79:52:B3:77:C2:98:CC:E5:46:3B:A6:61:19:15:97:59:4E:8B:6E:10
Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
Certificate issuer:       /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Certificate serial:       08ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
Manifest number:          08DE
Signing time:             Tue 28 Jul 2026 20:48:46 +0000
Manifest this update:     Tue 28 Jul 2026 20:48:45 +0000
Manifest next update:     Tue 04 Aug 2026 20:48:45 +0000
Files and hashes:         1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: vTipaYD4yIfF/SXTGiA/aDBTMq+e02eZJXVfGH0LJ7Q=)
                          2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: yy56Dhxj1ovpz3FD+DcyQb1Zocg7YLvQqlFzvMeS8+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl
                          rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
        Validity
            Not Before: Jul 28 20:48:45 2026 GMT
            Not After : Aug  4 20:48:45 2026 GMT
        Subject: CN=6a6915ae-b3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:ce:28:a1:db:57:c7:f7:6d:fc:f5:c6:fa:
                    b5:f8:3e:7a:64:93:e5:2d:54:a0:4a:52:74:a7:4e:
                    21:f0:31:37:e7:d9:08:c2:8c:67:0d:b7:a8:21:39:
                    7e:46:08:ba:9f:e7:66:59:77:aa:45:e8:9b:0d:af:
                    a3:24:22:de:e2:7e:21:5f:f9:b0:31:bb:a2:67:ae:
                    85:c6:d9:ca:f6:2d:80:e6:68:14:a2:bd:ec:23:ae:
                    3c:92:32:54:97:e5:ec:06:c8:8b:85:c8:3e:7e:a8:
                    e8:9a:63:52:1d:95:a2:52:62:7e:87:6c:8b:07:53:
                    26:64:ea:48:99:9d:be:8b:9f:ea:cb:7b:1d:0b:34:
                    72:79:ec:da:00:9b:68:d3:90:6f:09:12:de:85:a4:
                    f4:64:28:74:8a:f5:fc:65:d2:06:89:99:e0:9f:cb:
                    a1:8d:24:f8:f1:2d:9f:d2:8d:f9:22:b1:b4:7d:ad:
                    73:ed:88:74:bb:a1:60:b2:61:79:2f:cc:e6:88:3b:
                    f7:66:c5:45:d2:7c:2e:b4:4a:cf:ba:dc:5a:52:fc:
                    a2:59:4b:e5:e1:16:df:54:ce:91:60:f1:32:b1:53:
                    14:5e:37:be:2a:17:b0:81:2d:f8:4c:fb:bf:6a:3b:
                    86:9f:b8:37:37:05:40:d8:64:cf:c1:45:76:4a:0d:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:B3:77:C2:98:CC:E5:46:3B:A6:61:19:15:97:59:4E:8B:6E:10
            X509v3 Authority Key Identifier:
                keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:10:d7:69:70:63:1a:da:25:10:d2:24:bc:57:67:bc:ea:
         94:b5:bf:65:ca:99:cb:8f:81:5f:dd:e5:2b:ee:19:ac:65:82:
         0d:c8:cc:e1:dd:3f:e4:9f:d5:ca:e2:e9:df:a7:47:4e:22:0b:
         62:9b:3b:9b:cf:a7:67:1c:cd:a6:9e:81:85:fa:f8:bf:0e:a7:
         ce:82:7b:5d:bd:01:43:00:52:ca:6f:b0:c5:c4:17:f4:ff:f8:
         ee:6c:4f:61:d3:41:9d:75:c6:31:e2:13:a4:3e:d3:0a:64:5a:
         06:61:40:aa:12:58:44:50:75:46:be:15:2f:b9:3d:a1:f2:39:
         56:82:1f:3f:ea:8c:2b:e8:ae:73:4c:59:38:a5:1a:c4:9b:54:
         5c:bd:f2:66:1c:7b:2f:31:b0:33:7b:b0:bc:3a:8d:1a:7d:a7:
         08:8e:d5:21:c0:5b:59:12:44:82:78:3d:14:41:0d:8e:db:b8:
         60:5b:0d:fd:81:34:06:3d:1b:2e:e5:69:e1:34:bd:56:0f:43:
         a8:95:11:ff:62:0f:c1:f8:ff:bb:fa:81:8b:cd:48:8f:6c:2e:
         bc:f6:a5:fc:05:b8:e5:50:a8:24:cb:2e:8f:f8:a1:78:4f:6a:
         54:09:27:b2:f9:11:f2:08:b4:71:52:43:06:0a:e0:ed:3f:b8:
         5a:c3:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:04 2026 by rpki-client