Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
File:                     NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json)
Hash identifier:          mY3UoshZWSx8SIhBCKqAXqcWZRC/1dStrkPd4K1Dsro=
Subject key identifier:   EE:2D:C0:FB:36:CE:35:B0:4A:5A:BA:38:8C:82:30:4A:9C:9F:E2:DC
Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
Certificate issuer:       /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Certificate serial:       0B1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
Manifest number:          0B0C
Signing time:             Sun 26 Jul 2026 19:47:22 +0000
Manifest this update:     Sun 26 Jul 2026 19:47:21 +0000
Manifest next update:     Sun 02 Aug 2026 19:47:21 +0000
Files and hashes:         1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: 6VFNi4Z+DG3oKZVPqB75/+rVNa8TYyUMH7mAAsMdBc0=)
                          2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: 27XzgPYM591+AmGw9aI7U6vPsdo/FxtR92lobcxlp4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
                          rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2843 (0xb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
        Validity
            Not Before: Jul 26 19:47:21 2026 GMT
            Not After : Aug  2 19:47:21 2026 GMT
        Subject: CN=6a66644a-dc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:c9:f6:12:83:5c:f7:b7:33:a8:5a:76:50:
                    28:3f:51:e5:85:be:b4:ed:6f:cc:3f:d3:3d:ef:bf:
                    5b:94:11:2d:c6:51:30:97:61:a0:a8:ae:44:66:83:
                    d8:8c:7e:fe:de:41:91:af:06:fa:f9:54:ba:1a:10:
                    0e:15:68:88:81:fc:5d:f3:32:8f:b4:5b:46:f3:6d:
                    ff:0e:28:81:5d:59:e5:de:10:f6:93:da:1a:f7:9a:
                    a0:eb:a2:47:5f:c0:ff:f7:9c:55:d7:71:5f:f8:95:
                    1f:96:10:06:77:25:43:23:fa:c9:77:98:57:21:ba:
                    59:32:93:a6:8a:ee:30:f3:e6:bc:3f:47:a4:d0:87:
                    60:38:f3:bd:b3:e3:ee:be:3a:41:91:94:84:31:dd:
                    7e:93:32:41:c9:15:d6:06:02:68:58:b5:7f:79:1e:
                    98:e7:da:1d:f4:58:e7:58:31:82:ad:fb:0e:fb:25:
                    da:c3:f4:db:6d:26:95:cf:00:8e:c9:68:f5:07:df:
                    dc:8a:92:21:af:e4:62:41:19:48:28:1f:e1:6c:23:
                    46:41:8f:0b:69:34:cc:8e:ee:e8:9e:c6:69:14:dc:
                    d9:c1:40:a9:04:c0:0f:91:de:c0:05:bb:ff:48:f6:
                    ec:d1:ad:8f:23:7f:c3:11:15:a4:7d:c1:26:fb:93:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:C0:FB:36:CE:35:B0:4A:5A:BA:38:8C:82:30:4A:9C:9F:E2:DC
            X509v3 Authority Key Identifier:
                keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:03:a1:04:51:7b:4c:43:e3:05:ec:d0:4c:9e:f8:67:b6:b0:
         59:06:05:d3:63:54:e6:2c:b5:0c:63:4a:81:de:7f:a5:78:ca:
         c5:dd:97:64:59:e4:dc:2a:44:2f:02:6b:a7:b3:b4:5d:dd:6d:
         58:73:c5:a7:57:8c:fe:19:d1:9e:a0:6c:07:62:5e:3b:c8:07:
         92:6d:e4:35:cd:be:11:46:0c:e7:96:13:52:c4:3b:31:28:55:
         ee:55:a3:1b:2f:e4:69:92:65:34:b9:44:ec:7a:62:53:99:ab:
         fc:74:cc:19:cd:09:38:13:5f:90:fc:95:86:d5:46:de:14:c0:
         0f:fa:9c:29:11:6d:1a:d8:73:ab:50:b9:ab:d1:b3:ad:37:d9:
         94:ed:4a:e4:9c:d3:17:03:2a:ff:e7:54:8b:96:df:63:79:28:
         fb:cf:8a:a0:d9:f4:72:6e:4d:2c:74:c9:ca:21:37:b4:ef:5c:
         ac:0e:7c:3e:1b:c6:6c:85:2d:24:55:4a:6c:ca:09:29:a7:df:
         8b:64:d0:32:b1:db:b9:60:1e:2d:44:13:e0:17:5c:7d:07:30:
         53:30:ae:0a:90:f1:8b:7f:4f:74:cf:d1:5d:41:d9:40:37:d3:
         7b:ca:59:2b:29:8b:5c:97:24:3c:e5:74:44:93:1e:b9:a1:81:
         15:e6:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:36 2026 by rpki-client