Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File:                     NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier:          +15HhlAyXOjA8eOXOO0kCBwNTbajRrILGnDIyKJm+Wc=
Subject key identifier:   1B:DD:00:49:9C:CB:A1:AA:4E:11:64:89:20:DE:95:AC:F6:6A:00:FE
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer:       /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number:          0270
Signing time:             Sat 13 Jun 2026 02:02:25 +0000
Manifest this update:     Sat 13 Jun 2026 02:02:24 +0000
Manifest next update:     Sat 20 Jun 2026 02:02:24 +0000
Files and hashes:         1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: 6KQ+Fsm+uKdoemPfEmfjCcwfO1KXAip0NoRxFZL2awk=)
                          2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
        Validity
            Not Before: Jun 13 02:02:24 2026 GMT
            Not After : Jun 20 02:02:24 2026 GMT
        Subject: CN=6a2cba30-cedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:86:96:da:40:34:0b:fe:f0:02:96:c7:32:
                    9b:38:25:50:95:1c:db:52:67:8b:e2:b7:db:47:d7:
                    77:a1:56:bb:83:a8:4b:a5:f7:e3:e5:43:5d:04:1b:
                    af:97:43:71:2b:9d:55:75:0a:68:84:25:58:36:d1:
                    f1:b5:5f:96:36:5b:3c:ba:ed:42:c3:2b:07:e1:eb:
                    5a:4b:c6:ac:b8:b7:6a:04:c6:fb:0a:92:88:31:5a:
                    f0:e1:ee:fd:7a:eb:4a:5d:b6:7d:24:80:d7:3e:17:
                    ed:f2:5d:bc:c2:dd:9c:1e:de:13:eb:2a:ae:56:80:
                    ce:c3:8a:7a:1c:49:ba:69:ac:34:8f:ce:92:2a:c1:
                    0c:b5:bd:5e:a8:f0:d7:db:2d:a0:ef:e8:6a:43:a7:
                    84:70:83:02:32:cc:b8:87:f9:db:69:b1:19:c1:44:
                    19:78:b2:0f:4e:a0:5e:30:f8:c6:6a:20:32:87:e5:
                    b7:d1:ea:a1:bf:8e:1f:32:72:dc:e5:95:04:83:4d:
                    7e:7d:07:3a:71:99:bf:92:d1:5c:3e:12:91:62:58:
                    69:d0:56:21:d0:a4:00:55:39:31:28:46:fc:ed:c8:
                    93:22:dc:04:fa:f5:08:14:43:9c:8a:9c:30:a5:33:
                    52:e1:c5:78:40:32:bc:28:ea:41:0b:26:8a:e6:60:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:00:49:9C:CB:A1:AA:4E:11:64:89:20:DE:95:AC:F6:6A:00:FE
            X509v3 Authority Key Identifier:
                keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:1a:e4:75:bf:25:6b:30:7d:58:e0:e3:01:27:97:5c:1a:
         f3:32:a0:4b:e2:e3:c6:06:08:9f:a3:58:e1:e5:6b:5d:58:fa:
         21:7f:9f:b5:36:d4:c8:ee:1f:f9:11:71:20:64:05:e0:f8:62:
         46:39:5e:6d:06:f9:ff:0d:64:f9:c1:67:0f:da:cc:c0:98:0a:
         44:6a:3c:57:76:5b:28:18:19:46:e1:57:6e:d5:f3:ae:c7:b9:
         c7:99:cc:ba:a7:07:2a:a0:e7:4c:3e:1e:cc:4a:d2:ee:fa:5b:
         61:0d:d4:ba:c3:e4:d4:d3:15:c9:dd:e2:67:07:8c:ee:50:3f:
         95:ee:9c:37:e0:a0:4e:a6:06:a6:1a:83:7a:b2:05:c6:89:54:
         10:52:7c:ab:c2:39:a4:90:14:88:e3:16:f6:43:03:1b:02:c8:
         01:3f:1d:04:88:68:c0:1d:61:63:76:5c:13:d9:2b:3d:9c:8e:
         5d:20:c3:30:23:f6:f5:0a:4f:cc:1c:fc:a9:98:69:81:c4:d7:
         23:27:9c:50:01:27:30:cc:00:be:bf:70:bc:23:97:23:8e:a6:
         18:49:9e:da:85:b2:4b:2d:b4:bc:9a:5f:01:89:11:c1:a6:5d:
         9d:75:8b:6d:64:5c:dc:41:8f:4b:0d:76:4d:ad:9b:6d:d0:96:
         38:b1:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:40 2026 by rpki-client