Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
File:                     NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json)
Hash identifier:          9pPth9fz8Vgj8VByO7U5Yo68ViehJV+vfBPOW4EPisk=
Subject key identifier:   17:3C:C4:37:9C:FA:80:D9:8F:D6:12:10:C6:4F:3D:EF:B2:25:DD:BA
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Certificate issuer:       /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial:       09CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
Manifest number:          09C4
Signing time:             Fri 12 Jun 2026 19:55:30 +0000
Manifest this update:     Fri 12 Jun 2026 19:55:29 +0000
Manifest next update:     Fri 19 Jun 2026 19:55:29 +0000
Files and hashes:         1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: 1WrTo7Pmk0tpEPqgUT8jb7TunwKK4CQ9bMfG1JVj3uA=)
                          2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: Ym9v48/N9FgIEUzCm6Ez2GZBz/gUxKfUxMymr1ze1Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
                          rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
        Validity
            Not Before: Jun 12 19:55:29 2026 GMT
            Not After : Jun 19 19:55:29 2026 GMT
        Subject: CN=6a2c6432-3fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:36:e1:0f:7d:6c:b6:dc:62:fe:bf:b1:f2:
                    ce:0b:fd:16:bc:8e:fd:b7:9b:ed:a9:68:58:eb:dc:
                    5f:73:b6:e6:9e:da:04:af:04:f8:c2:24:53:44:60:
                    44:9c:e0:57:67:b4:18:ad:46:ff:b1:10:b7:30:3e:
                    62:af:47:82:09:ea:4f:a7:41:11:63:47:b3:a4:e5:
                    ae:15:cc:d2:ea:0e:4f:d5:84:0f:e2:84:28:70:c7:
                    85:c5:7c:a5:b1:63:eb:fb:7f:c7:f1:b8:25:ea:85:
                    c7:00:0b:c8:a4:99:93:ea:cf:c9:3b:6f:82:10:2d:
                    1d:ba:29:37:37:6c:ba:d7:2e:dd:bf:fa:40:2d:aa:
                    d5:dc:0e:51:7d:b6:65:39:1b:63:81:eb:6a:0e:eb:
                    c8:0b:59:aa:0f:c9:b2:51:81:37:d4:c7:31:21:e4:
                    9c:6e:9e:a9:be:5c:99:64:ac:0e:e6:82:93:26:a4:
                    da:28:8f:11:1d:f2:5d:f9:bd:86:d9:77:bc:e6:e8:
                    9c:7f:db:f2:2e:1c:c2:9b:f0:67:88:4d:78:7c:9b:
                    c5:b7:9e:78:cd:bc:4e:2e:50:3c:e4:40:cc:c0:28:
                    60:33:d2:6b:64:b3:9b:d6:f2:87:af:50:d7:6c:15:
                    22:71:88:40:d2:f2:da:37:8d:1c:cf:93:5c:2c:f5:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3C:C4:37:9C:FA:80:D9:8F:D6:12:10:C6:4F:3D:EF:B2:25:DD:BA
            X509v3 Authority Key Identifier:
                keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:74:18:d0:59:46:98:3a:0f:55:b1:e8:f9:7c:d4:03:f0:8f:
         d8:4e:5e:12:de:ae:7c:85:de:73:9c:22:c9:eb:fc:79:ab:ca:
         07:98:b1:a9:7c:c9:23:e8:70:de:07:79:67:3f:c6:c5:86:5c:
         43:ae:92:0d:b4:5a:06:ec:4d:24:74:44:b4:4c:e7:ee:54:af:
         77:32:0e:54:58:44:b6:36:f4:05:76:ce:df:57:14:16:d2:f1:
         be:ca:28:1b:16:c8:1e:e5:c2:a5:46:a0:4d:72:74:f6:65:ab:
         d1:93:8d:88:65:14:37:c1:f3:ec:5c:73:dd:fa:c0:f7:37:cd:
         b5:85:0e:9c:2b:1c:40:22:48:2b:f4:de:b3:6a:4d:24:ff:38:
         d4:c6:6c:5f:35:59:b5:23:14:a0:91:7b:51:b5:9a:42:b3:f5:
         b4:63:3f:38:d3:dd:a0:33:de:1e:bc:9a:06:0d:85:89:af:17:
         d0:58:1b:0c:5f:aa:49:33:9e:62:06:cc:27:38:4d:82:57:45:
         43:81:03:e5:8d:31:09:1d:b4:80:88:63:08:33:b0:40:be:e3:
         1f:98:50:43:a4:19:fc:10:c2:2f:2b:fd:14:1c:78:a3:79:5a:
         07:55:b5:92:14:70:34:2d:83:61:08:f4:ff:6c:bc:6f:a0:cc:
         c5:68:81:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE
QTA5MTMyOTgwHhcNMjYwNjEyMTk1NTI5WhcNMjYwNjE5MTk1NTI5WjAYMRYwFAYD
VQQDEw02YTJjNjQzMi0zZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNg24Q99bLbcYv6/sfLOC/0WvI79t5vtqWhY69xfc7bmntoErwT4wiRTRGBE
nOBXZ7QYrUb/sRC3MD5ir0eCCepPp0ERY0ezpOWuFczS6g5P1YQP4oQocMeFxXyl
sWPr+3/H8bgl6oXHAAvIpJmT6s/JO2+CEC0duik3N2y61y7dv/pALarV3A5RfbZl
ORtjgetqDuvIC1mqD8myUYE31McxIeScbp6pvlyZZKwO5oKTJqTaKI8RHfJd+b2G
2Xe85uicf9vyLhzCm/BniE14fJvFt554zbxOLlA85EDMwChgM9JrZLOb1vKHr1DX
bBUicYhA0vLaN40cz5NcLPU5zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBc8xDec
+oDZj9YSEMZPPe+yJd26MB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4
MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0
V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqnQY0FlGmDoPVbHo+XzUA/CP2E5eEt6ufIXec5wiyev8eavKB5ixqXzJI+hw
3gd5Zz/GxYZcQ66SDbRaBuxNJHREtEzn7lSvdzIOVFhEtjb0BXbO31cUFtLxvsoo
GxbIHuXCpUagTXJ09mWr0ZONiGUUN8Hz7Fxz3frA9zfNtYUOnCscQCJIK/Tes2pN
JP841MZsXzVZtSMUoJF7UbWaQrP1tGM/ONPdoDPeHryaBg2Fia8X0FgbDF+qSTOe
YgbMJzhNgldFQ4ED5Y0xCR20gIhjCDOwQL7jH5hQQ6QZ/BDCLyv9FBx4o3laB1W1
khRwNC2DYQj0/2y8b6DMxWiBTA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:28 2026 by rpki-client