Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          sVVjAUF/U8Yq+1jZE5uxZV6U0gw5LhyUzJe2rL6Jxf0=
Subject key identifier:   77:2F:0A:F4:BC:95:0E:40:21:62:2C:E7:68:07:F7:32:EF:24:64:CD
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       14FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          14F4
Signing time:             Tue 28 Jul 2026 16:55:12 +0000
Manifest this update:     Tue 28 Jul 2026 16:55:12 +0000
Manifest next update:     Tue 04 Aug 2026 16:55:12 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: 1HadmCU+qo2kEkLViBDzD9TjTcDBNPg5oMRhC5CZGqg=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: W6FOTcn74gf4+0BoMZOpH6DC5rviJxuaWu2OotOF9rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5375 (0x14ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Jul 28 16:55:12 2026 GMT
            Not After : Aug  4 16:55:12 2026 GMT
        Subject: CN=6a68def0-8bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:4e:7f:2f:cf:6a:f0:64:c6:94:f2:a1:92:
                    d4:3d:8a:6b:38:a9:4e:2a:dd:b0:ba:be:7f:bd:90:
                    3e:bf:1d:20:aa:78:51:20:c1:05:6c:ef:d9:e0:13:
                    5b:35:cf:4d:ea:3d:ee:88:f6:1d:20:64:50:c6:7d:
                    3c:04:c9:f2:e2:4e:5c:a9:89:c0:5e:66:89:e8:19:
                    fa:11:58:5a:3b:78:12:9f:94:ba:df:84:01:f4:1f:
                    7d:b3:63:bf:d0:3a:9c:e5:e1:e3:38:94:1d:5a:c8:
                    57:34:88:81:86:2e:e0:2d:da:c5:88:95:02:97:ff:
                    13:03:28:90:73:6b:68:e9:58:4e:ee:42:d4:1c:7b:
                    6b:27:ff:09:ea:2e:69:de:16:94:2d:36:a9:18:69:
                    0f:02:74:5d:8b:74:2e:0f:74:d0:23:19:4b:01:c0:
                    74:99:67:48:14:48:40:84:a4:1f:2b:c7:da:20:3c:
                    ea:15:1e:d3:df:5b:6a:da:f4:62:f1:4d:17:3f:2e:
                    04:bb:7e:9a:1d:38:72:40:dd:cf:09:4d:8d:c7:e5:
                    94:dc:b9:dd:b1:de:24:0b:1d:64:df:cb:eb:4e:05:
                    64:b2:74:94:f1:4e:15:b9:2c:b0:6d:7d:6b:a7:87:
                    51:ea:45:19:0a:c8:d3:09:13:65:49:9e:17:cb:37:
                    27:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2F:0A:F4:BC:95:0E:40:21:62:2C:E7:68:07:F7:32:EF:24:64:CD
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:ae:f0:5f:03:8e:d0:2e:0d:40:bc:a5:94:21:5f:83:b9:
         27:99:60:56:48:33:b3:69:94:79:5f:7a:ed:2f:b5:db:ca:a9:
         c2:75:9b:be:67:20:4d:df:d3:57:8a:1a:f0:9a:c4:0f:1c:0c:
         22:81:c8:91:d0:94:63:4a:a7:be:c4:94:d2:3d:b3:07:6b:5b:
         58:38:f5:23:89:f0:21:5e:d8:ab:18:f5:f9:2c:6c:41:b7:1e:
         ec:c1:81:45:b6:2f:8a:47:44:d8:1b:5d:17:59:eb:1b:a0:e3:
         c4:5a:a2:6c:da:16:f3:e0:df:9c:91:e9:88:20:46:90:6c:4d:
         6d:e0:75:d4:4e:77:fe:36:6b:2a:7c:ba:0b:44:46:ac:72:31:
         82:68:13:16:13:36:01:92:8e:11:68:31:04:74:97:37:76:c2:
         4e:80:52:b6:6c:57:b4:0b:df:fa:7c:9e:d2:91:47:76:01:4b:
         95:31:8a:8c:0c:0b:c4:a4:57:a9:37:ce:46:73:d4:e8:03:6f:
         b0:df:18:25:cb:80:a5:da:4a:53:40:ae:d1:47:b3:2d:cd:66:
         de:45:57:45:91:c0:ef:f7:87:79:da:d8:7f:35:fe:d4:19:2b:
         48:b6:ab:88:b8:72:cc:40:2b:7b:24:16:72:e0:64:74:51:67:
         0c:ee:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:58 2026 by rpki-client