Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File:                     NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier:          Plv5mFoRsKmLt3sTXcjQA+UrFNyrilc67dcM5UpzAQ8=
Subject key identifier:   6C:5A:4A:70:67:94:AD:40:CF:79:F0:FE:A1:2E:AF:A5:47:40:07:25
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number:          01EF
Signing time:             Sat 13 Jun 2026 03:23:11 +0000
Manifest this update:     Sat 13 Jun 2026 03:23:10 +0000
Manifest next update:     Sat 20 Jun 2026 03:23:10 +0000
Files and hashes:         1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: yEsPoWoJDlrzDSXcF5PkMyxSruLtxJOY6wQWkkLkHPw=)
                          2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Jun 13 03:23:10 2026 GMT
            Not After : Jun 20 03:23:10 2026 GMT
        Subject: CN=6a2ccd1f-432b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:57:01:03:6d:85:f0:f1:7d:51:e9:a3:6e:
                    55:56:ce:90:7e:cf:b9:df:72:01:87:7f:44:f3:9b:
                    2f:60:78:82:ac:cf:8c:aa:47:dc:ee:8b:0b:46:4c:
                    97:50:0a:e9:62:07:70:c3:08:33:e6:43:e3:d7:29:
                    df:89:80:f7:a8:ac:d2:5a:de:15:54:2a:a8:3a:ce:
                    f3:34:19:b6:98:74:ba:6c:e0:f3:0a:76:b8:72:10:
                    dd:33:ea:14:f6:cf:8b:5d:76:61:47:8f:fa:38:d1:
                    0f:77:89:9f:80:9d:8b:ab:ba:bf:e2:ff:d9:83:17:
                    1c:50:95:56:18:e1:57:52:ec:84:d0:46:4b:80:66:
                    86:0e:54:bf:d6:d4:82:0e:6e:69:5a:be:a1:0c:94:
                    dd:c7:52:41:e8:84:7c:d9:47:01:c8:b0:5a:c0:51:
                    a8:11:06:a9:ae:de:29:ad:0d:e1:74:57:b2:1e:1a:
                    c6:5a:05:62:54:b4:17:88:53:d7:9f:86:f0:fc:c2:
                    61:fb:d3:59:01:36:e5:67:fe:11:a0:ab:e0:68:05:
                    2b:81:99:45:69:37:54:e3:ec:9c:f4:9f:ed:9c:4c:
                    3e:10:ca:96:a4:fd:eb:22:16:9f:e6:9a:e3:4b:03:
                    54:a5:d1:05:60:03:d7:19:24:9a:ea:e6:4a:fd:36:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:4A:70:67:94:AD:40:CF:79:F0:FE:A1:2E:AF:A5:47:40:07:25
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:5b:2b:f3:7c:e0:a3:17:5f:7a:6e:67:44:8d:1d:f0:88:
         9f:8e:bc:4c:0d:43:1f:0a:78:cd:46:cf:41:48:67:9b:52:7f:
         36:cd:60:95:4c:bb:93:c2:e6:d5:57:d2:a2:65:d1:0a:e7:87:
         8b:d1:3d:b7:74:ce:54:f4:54:d4:71:00:68:bb:91:c8:04:a8:
         e1:60:2d:51:8c:7a:4d:e1:74:24:b3:6b:27:f9:fd:20:1c:1e:
         f7:a5:38:76:4c:f7:db:c7:5d:54:ed:07:8f:0a:f3:7d:f9:48:
         0e:6c:2e:30:b7:1d:dd:55:38:03:2f:f9:71:a5:dd:36:47:53:
         5e:f9:7d:ba:41:a4:70:16:6d:e3:9c:29:9a:1a:fc:67:ba:cf:
         0a:79:22:11:a5:8d:bb:fa:9c:83:a4:d0:a3:5f:16:0c:db:e3:
         12:4c:d7:32:27:b1:34:71:44:41:eb:cd:b9:e4:d0:a0:2f:9b:
         92:29:1c:68:35:10:4a:26:c4:99:29:e5:3e:44:aa:77:c8:d7:
         0d:f8:2f:55:c9:d2:9b:00:9b:45:40:7d:a3:d0:66:9b:98:ef:
         8b:21:08:2a:8f:33:e5:5c:9b:32:09:cc:f3:42:38:b3:45:b1:
         3f:62:80:e4:ed:00:a8:11:e2:89:72:72:13:17:94:e4:c3:6f:
         ca:25:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:11 2026 by rpki-client