Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft
File:                     NpQoPSE6XlZ5WORs29gStcxynXE.mft (raw, json)
Hash identifier:          3S6w6JfhE9puzm8sxRE0pGZncX18suOF8UwHO20XrR0=
Subject key identifier:   09:3F:73:77:6F:45:76:73:7E:DF:EE:96:8E:B0:0F:1B:77:9D:7C:D5
Authority key identifier: 36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71
Certificate issuer:       /CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71
Certificate serial:       039B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft
Manifest number:          0394
Signing time:             Fri 17 Apr 2026 00:40:43 +0000
Manifest this update:     Fri 17 Apr 2026 00:40:42 +0000
Manifest next update:     Fri 24 Apr 2026 00:40:42 +0000
Files and hashes:         1: NpQoPSE6XlZ5WORs29gStcxynXE.crl (hash: 56ZP+cS+VqMA7SRS/x20mbgnTGR+NbU7T/im2UFpyt4=)
                          2: 54467164E0A711EC8F4D5B5FC4F9AE02.roa (hash: 3ih0W82h9RouNK7pJiKfhQ5s9ADPnr1DBUXqXIWsTOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl
                          rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2F88, serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71
        Validity
            Not Before: Apr 17 00:40:42 2026 GMT
            Not After : Apr 24 00:40:42 2026 GMT
        Subject: CN=69e1818a-5041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:8f:03:3c:47:ca:84:0a:b1:51:1c:b6:99:
                    34:12:17:44:30:af:87:92:be:ba:fa:7a:3b:91:49:
                    59:ff:eb:e2:f0:8a:29:02:59:4d:6e:09:51:3a:80:
                    ef:b6:1c:4c:f9:e7:01:09:cc:07:40:88:2b:50:2b:
                    47:47:f2:04:a0:0b:41:a8:16:64:b0:61:33:4f:83:
                    2c:a3:d2:2f:92:08:91:f9:5e:6f:36:d4:bd:e0:93:
                    f5:85:8b:d7:f9:0c:39:47:5c:ce:e2:3e:e0:21:60:
                    c9:b1:87:50:22:d0:86:a4:9d:34:56:8f:a3:9e:cd:
                    59:5e:7d:7b:11:d3:1f:a3:14:cf:cd:bf:8d:d4:e1:
                    75:9a:7a:8b:93:4d:71:65:ed:39:b7:9f:d6:64:34:
                    da:ce:69:28:84:bc:21:b6:7f:0d:d4:dc:b5:36:4e:
                    a3:37:74:d5:cf:2d:c6:eb:5a:e2:66:8b:06:8d:5b:
                    36:86:f9:f2:c2:ff:0e:09:8b:41:37:44:5f:a1:c2:
                    06:cd:c4:44:31:0c:98:06:83:45:8d:3d:39:e2:ba:
                    de:12:8a:5d:3b:c3:24:c0:ff:0e:4b:bb:4e:00:76:
                    a4:db:88:95:be:d2:c1:4e:96:b0:4d:d5:5f:d3:7c:
                    46:00:6b:34:4a:9a:47:3a:89:eb:ec:d9:9d:60:2e:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:73:77:6F:45:76:73:7E:DF:EE:96:8E:B0:0F:1B:77:9D:7C:D5
            X509v3 Authority Key Identifier:
                keyid:36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:c4:83:b1:4b:ea:a7:1b:c8:f2:91:ed:31:ea:43:ba:85:
         6d:e5:ba:95:9d:d0:59:43:5c:3d:4b:ce:7b:0b:fe:e6:a9:1d:
         51:cd:b6:61:5f:d3:d7:36:d4:20:9a:bc:1e:36:ab:9b:e9:70:
         52:a2:5c:2a:ef:0e:19:82:ef:29:cd:a2:a0:7a:d4:6d:e1:d9:
         b0:c8:6f:13:c2:95:0e:54:4f:3b:26:aa:ea:92:c0:62:32:49:
         d5:a1:00:91:e2:f4:cc:ba:06:28:4e:ce:c6:23:a0:37:2d:c2:
         3c:67:50:f9:ec:09:d4:6e:10:97:28:bb:93:11:40:bc:84:3f:
         4c:9e:7e:1c:04:1c:a8:0e:06:08:01:f3:89:27:06:ea:65:3c:
         25:d3:75:52:48:7c:cd:84:f9:66:19:9c:26:43:a3:f0:05:b5:
         a9:65:c4:a1:b2:d5:92:0e:4a:5c:87:6a:4c:fd:bb:31:74:f4:
         70:b4:92:1b:88:2c:96:19:ae:d6:aa:8a:28:d3:fe:a0:42:02:
         99:50:5f:d4:2a:b1:95:4a:0b:57:d6:a1:29:02:1a:f2:f7:40:
         ea:78:33:73:2d:c4:e4:05:2b:d6:44:d6:e8:c5:4b:b1:db:2c:
         8e:62:d0:fe:b8:ff:ba:4c:75:eb:60:60:c1:b9:20:a9:89:a6:
         d2:3b:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:16:56 2026 by rpki-client