Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File:                     NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier:          9LXcXkOpC54sList/dZ9lVaoW2j2WklkIJ1CqwrwL3c=
Subject key identifier:   75:37:85:92:B6:13:D2:A0:87:74:BD:12:26:B2:66:D1:E1:F7:63:A7
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer:       /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial:       023F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number:          023B
Signing time:             Tue 03 Mar 2026 02:15:16 +0000
Manifest this update:     Tue 03 Mar 2026 02:15:16 +0000
Manifest next update:     Tue 10 Mar 2026 02:15:16 +0000
Files and hashes:         1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: TpxauTdC0ydLauLBx21xGSpizX72sK7Kqtw8DbgZNwY=)
                          2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: aw6J99WA+Ys95J2MP74DQWW0rKiOubXbXvoCANCsKOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
        Validity
            Not Before: Mar  3 02:15:16 2026 GMT
            Not After : Mar 10 02:15:16 2026 GMT
        Subject: CN=69a64434-89eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:f6:0b:56:22:3d:d3:07:06:b2:e4:52:62:
                    09:f0:43:ca:b2:90:05:bd:c1:7c:3f:7a:c4:24:51:
                    3f:8d:7c:63:43:bb:e4:6e:2d:05:45:65:b3:4b:b1:
                    2f:97:b7:5a:48:07:f1:95:af:3d:1c:f4:df:81:dd:
                    c9:b7:15:4a:8b:25:5a:37:f4:1b:92:43:2f:26:1c:
                    b0:84:90:47:e6:89:66:e3:4e:24:19:d5:f1:1e:3a:
                    a3:de:7c:d9:a3:f3:e2:1e:b4:c0:5e:3b:be:ef:6e:
                    99:e9:40:ed:6f:16:9b:b6:6d:a5:10:58:50:6e:81:
                    f2:60:06:ae:03:70:be:72:9d:ca:4c:18:b9:87:65:
                    0e:e6:23:2b:68:39:05:c2:c7:19:7e:af:56:7f:2c:
                    af:55:6e:06:50:7c:13:47:40:29:76:68:e4:c4:a0:
                    bf:47:66:26:96:56:43:02:c5:c5:9a:8b:e7:13:c3:
                    ed:9c:78:f8:32:50:77:82:53:2d:ed:59:46:bb:7c:
                    d5:5c:ad:c7:d4:6f:c2:00:d2:8a:28:d1:37:be:9e:
                    81:ee:95:90:fd:c5:8e:89:d2:e9:f4:fd:f4:42:09:
                    dd:83:91:12:d8:a5:fd:37:07:90:59:92:06:fe:66:
                    33:66:25:e2:9a:91:40:8a:8b:fa:a9:33:5d:0d:ea:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:85:92:B6:13:D2:A0:87:74:BD:12:26:B2:66:D1:E1:F7:63:A7
            X509v3 Authority Key Identifier:
                keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:85:59:35:10:4a:87:86:84:b1:ab:84:95:87:0f:cf:07:
         8a:04:e4:3f:fe:a9:df:f7:cd:51:fa:99:5d:fe:8b:a5:e5:ea:
         8b:f3:d5:ff:9e:bd:4c:e3:52:7d:57:37:2e:7b:63:c6:32:72:
         67:23:11:ed:25:4d:04:9c:60:6e:6a:d7:0c:cc:39:07:e4:18:
         ed:2c:60:16:36:0c:56:b9:e4:ea:82:77:41:93:48:93:4d:2e:
         b6:80:dc:5f:13:f8:5a:87:78:5b:ee:07:30:22:26:20:85:14:
         22:fd:a0:a8:2c:a0:0d:e2:3d:17:a6:ae:cf:0a:cf:32:43:5d:
         38:1d:77:e4:22:12:88:28:1d:c4:53:45:08:61:2e:5a:ba:d1:
         9b:6b:ca:06:e5:9e:f6:dd:34:12:40:69:fe:8b:08:6a:9e:51:
         fb:6c:33:bf:be:f0:06:e7:b4:f7:d9:4d:e1:e0:20:e8:bd:d6:
         a0:5c:4a:cf:d6:80:1e:b5:e2:ca:c8:97:9c:99:3a:4d:c8:c5:
         cf:26:55:85:04:f5:1d:d8:f7:b3:78:5d:54:07:f8:60:cb:f9:
         b6:d9:b4:fa:a0:e5:95:7a:b0:3b:50:70:58:e8:a9:f0:95:32:
         20:c4:42:0f:fa:56:1c:d4:12:72:94:9a:e9:88:2a:c9:de:5f:
         5f:51:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:32:11 2026 by rpki-client