Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File:                     NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier:          3LvY+iJxBsQ5fEsPEIU5Ve9LhznBr9TNKY/WI+Aa2J4=
Subject key identifier:   A1:16:30:CB:93:D6:08:0D:88:09:69:F7:DC:7D:50:39:EC:40:13:BD
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number:          01BB
Signing time:             Sun 01 Mar 2026 23:56:35 +0000
Manifest this update:     Sun 01 Mar 2026 23:56:33 +0000
Manifest next update:     Sun 08 Mar 2026 23:56:33 +0000
Files and hashes:         1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: ZQrwDGEeYVH/JF9CiDLLCXZt1Bd/nkane9yWVcuS/Fw=)
                          2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Mar  1 23:56:33 2026 GMT
            Not After : Mar  8 23:56:33 2026 GMT
        Subject: CN=69a4d233-bae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:9a:1a:b3:f3:b3:1b:35:dc:67:0c:58:95:
                    18:81:18:91:d8:90:3e:32:89:f6:fb:ad:2f:8d:f0:
                    b7:47:be:5d:22:cc:d1:66:41:62:ef:32:b8:0c:30:
                    52:43:5a:4c:bb:f3:76:62:4a:29:89:a7:84:6a:7c:
                    b4:88:da:cd:58:7f:d6:ba:79:7a:34:cd:72:2e:2e:
                    cb:19:18:cd:c8:ef:10:2f:f7:b2:21:00:68:ff:d9:
                    fb:83:fb:17:0e:63:9d:0c:11:8a:39:54:fe:e1:07:
                    8f:ba:67:97:e7:47:ca:b3:06:3c:b4:af:89:a2:c3:
                    8e:53:49:80:a7:31:b1:bc:e5:38:b2:97:65:01:92:
                    93:d5:aa:50:d3:61:83:82:bc:53:ba:f5:20:2c:9f:
                    2e:79:ec:80:ea:e7:5d:c1:6e:5e:e8:be:24:b9:ce:
                    6f:68:17:8f:62:1c:61:97:e0:13:a1:6b:c6:29:be:
                    41:24:5d:99:11:48:a9:c5:e8:a7:e6:a3:72:72:09:
                    07:32:1b:82:f1:40:65:9c:da:80:86:1e:74:58:7d:
                    e5:14:c7:8a:c1:2f:42:24:8a:0d:a7:0e:d6:29:e9:
                    f0:eb:df:fc:58:4a:12:53:a0:82:ce:87:19:ae:eb:
                    40:70:f9:e7:35:b6:8e:ee:29:41:56:11:86:31:26:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:16:30:CB:93:D6:08:0D:88:09:69:F7:DC:7D:50:39:EC:40:13:BD
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:90:ea:26:15:d3:c4:8b:02:59:c5:91:f5:47:c9:e1:f9:
         ea:42:7a:e3:ff:e2:8e:49:fd:68:c4:7b:92:98:9b:fb:fe:f3:
         6a:55:8e:9d:3b:f6:9b:11:ad:6d:72:91:44:e3:fc:31:98:30:
         2b:49:6c:d4:2e:3a:7f:f5:22:e5:b2:1a:58:c8:00:ce:27:5b:
         56:ec:5e:17:df:3a:ce:2b:5d:b1:2f:a9:4e:71:39:b4:54:3c:
         b8:81:2c:72:be:9d:87:f0:a8:8a:cd:2d:01:f8:d3:71:eb:22:
         f2:a6:30:6c:7e:57:b1:d8:65:ec:cb:14:c5:a8:45:21:ad:66:
         18:c1:e0:c3:37:96:c2:08:48:85:bc:31:93:c3:03:d6:bd:2f:
         d8:a3:4a:69:13:7b:d1:17:9d:4c:ac:56:a4:e6:a7:37:6b:46:
         6a:7f:65:90:55:74:15:3a:c5:80:3e:79:76:ec:1b:65:91:a2:
         83:48:35:60:7b:bc:f9:cd:e5:6b:ad:12:a5:53:5c:23:f5:15:
         c7:d1:00:13:3b:a1:83:d3:a8:c7:a1:4a:21:a7:ff:58:ec:84:
         a2:db:38:c1:cc:a2:82:41:8c:cf:44:11:2e:77:6e:ce:cf:3c:
         c7:9e:63:5b:5e:fb:1c:35:bd:75:b6:e4:ec:b2:98:80:50:55:
         79:64:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:49:31 2026 by rpki-client