Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File:                     NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier:          Ttw8SE3cQbTcJcQHtfIuMgvNK515ZF60rTOp2zB4l6Y=
Subject key identifier:   D2:77:86:3A:D0:42:A8:F0:FB:8E:8E:4B:6C:27:AD:87:F5:69:62:65
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer:       /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial:       0E96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number:          0E8C
Signing time:             Sat 28 Feb 2026 17:50:49 +0000
Manifest this update:     Sat 28 Feb 2026 17:50:48 +0000
Manifest next update:     Sat 07 Mar 2026 17:50:48 +0000
Files and hashes:         1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: wydyXKCn8+YCLisbYbumwTW7g7awPIzHBl+J6YLDSjo=)
                          2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: 6nYEOZbY+riA9hipBBLAA8A7cOGQEYjhf5EbPaoNkaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
        Validity
            Not Before: Feb 28 17:50:48 2026 GMT
            Not After : Mar  7 17:50:48 2026 GMT
        Subject: CN=69a32af9-32f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:37:dc:c7:83:58:60:31:13:7f:d2:37:78:
                    e2:67:8b:1b:2a:5d:25:57:ae:e4:8e:40:0a:35:5e:
                    6b:8a:cc:d3:20:a1:b7:f2:ac:f0:c4:b4:b9:7f:28:
                    ea:09:bf:37:35:70:11:7c:b0:6c:d2:47:14:b7:8b:
                    72:6b:6d:01:b5:6d:0c:c6:57:75:fc:32:16:27:18:
                    57:d7:d8:71:fe:6c:2a:06:43:28:03:92:b6:ce:12:
                    24:fb:fa:6c:12:6c:c2:d7:37:4b:bb:ed:d4:1b:f4:
                    67:35:93:87:2b:b2:6b:cd:b5:ad:5f:d7:b9:26:a1:
                    6b:3f:03:3c:3e:59:77:48:5f:26:60:fd:cf:4f:d5:
                    31:81:c9:8a:65:73:70:02:4f:3f:b7:16:45:0f:3e:
                    4e:03:12:2d:5a:e2:c4:05:30:59:35:e4:bb:3f:09:
                    aa:b0:70:55:80:98:af:ea:48:54:43:ab:5f:a9:5f:
                    d3:1c:7c:e2:50:88:ec:0b:85:c8:63:5a:dc:67:28:
                    19:d1:6f:ed:e0:2c:a4:5e:be:a7:73:bd:f3:53:ef:
                    49:54:41:d2:6c:0e:fb:5a:15:01:2f:ec:9e:f6:cd:
                    ff:94:b7:3e:cb:61:ac:2b:c6:7a:79:ff:83:70:51:
                    79:12:fc:cf:e2:98:c4:68:f6:b5:f6:a2:38:a8:cd:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:86:3A:D0:42:A8:F0:FB:8E:8E:4B:6C:27:AD:87:F5:69:62:65
            X509v3 Authority Key Identifier:
                keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:09:01:4c:53:65:51:47:55:db:89:d9:c9:8b:da:a0:39:28:
         35:49:9f:a8:b0:8f:79:09:b5:07:86:46:d1:c9:ec:25:27:ef:
         06:e3:4b:f0:fc:de:d5:84:47:1c:c7:bc:ca:eb:25:cc:9c:36:
         6a:7b:9b:c8:b1:61:8a:4c:59:3e:95:06:3b:85:5e:4a:50:5a:
         19:ff:16:51:af:1e:45:01:1d:1a:e5:77:88:94:74:c4:fa:3d:
         64:32:6e:91:d5:08:01:67:24:ba:a5:0c:16:c4:f7:af:93:5a:
         40:9b:54:82:ef:9a:50:4d:6c:cd:06:e8:e4:d1:7e:41:aa:49:
         5a:d6:72:55:5b:ef:76:fa:04:33:ca:47:c0:1d:4b:12:52:31:
         bd:62:67:81:3d:6f:eb:60:9f:52:b7:0a:1e:1a:1d:a2:d7:3c:
         ed:41:76:33:99:97:aa:e2:14:70:56:00:fa:c3:da:5b:64:90:
         25:a6:b8:c9:bf:dc:c1:3e:c6:eb:ef:93:fa:55:d5:d1:b3:83:
         22:0a:ca:c6:97:27:07:21:52:b3:b2:e2:79:b5:9d:fe:8d:27:
         99:a5:ce:44:ed:1e:87:ed:46:54:6c:92:53:f4:97:8a:9a:5c:
         ad:87:19:b5:6d:f0:a6:43:5b:26:83:d6:c4:dd:bc:c7:6c:a4:
         51:60:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:47 2026 by rpki-client