Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File:                     NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier:          NJs4sUbjVhudmqlZQzpOEOoITM6MY5/WyL6bzTYsNls=
Subject key identifier:   9B:AB:A7:AE:45:F7:52:FD:F9:F5:B8:A4:4C:19:C4:87:CD:AE:6B:8D
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer:       /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial:       1D44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number:          1D27
Signing time:             Tue 28 Jul 2026 16:13:49 +0000
Manifest this update:     Tue 28 Jul 2026 16:13:48 +0000
Manifest next update:     Tue 04 Aug 2026 16:13:48 +0000
Files and hashes:         1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: xzE/TL+yTQmr5c/irv+2GWexwN36Rv6ZzGAGEnaCmWc=)
                          2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
                          3: xfIw3q3qM2oF8nKAJKiIyOXPmts.asa (hash: Iw8t2cOOoe9YoYuawbsMRtKnfr4RdcfMSHPUEPUr57I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
                          rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7492 (0x1d44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
        Validity
            Not Before: Jul 28 16:13:48 2026 GMT
            Not After : Aug  4 16:13:48 2026 GMT
        Subject: CN=6a68d53d-91a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:26:b5:a3:3f:52:90:58:13:16:69:b4:44:
                    78:46:51:ab:f2:4b:10:0d:04:00:d1:ba:77:5b:35:
                    16:f6:c8:d7:c2:67:5d:70:e8:d8:1e:b5:6b:f9:0a:
                    22:22:cd:7b:e4:e0:21:79:5e:1a:45:10:42:db:fc:
                    04:92:d3:ab:16:ff:bb:de:0e:93:06:a8:b9:1b:af:
                    19:08:ce:9f:8e:bf:be:4d:3a:94:91:36:4a:6f:93:
                    66:2c:86:c1:ae:2d:98:fe:6f:de:de:73:85:3d:7f:
                    f9:0b:15:92:57:27:98:22:38:f8:25:15:62:a8:8c:
                    ea:c0:0f:07:cb:85:7a:28:ae:47:32:d8:a3:ff:ce:
                    5d:db:df:60:46:17:07:50:88:a7:1c:0c:1e:2d:bc:
                    92:ba:6b:c8:dd:1f:71:e9:44:5e:e8:33:f3:6a:7a:
                    46:6f:48:ac:e8:a0:c6:3e:05:ab:7e:88:57:b5:54:
                    65:b7:e2:8e:ed:0a:39:96:a1:89:bf:03:a7:c4:26:
                    28:b1:cf:c5:1d:d4:26:c8:1f:d2:41:47:d7:08:cb:
                    0d:3e:52:25:ee:5b:b0:18:b5:4a:bf:7c:a9:04:67:
                    54:e0:5d:ae:f5:60:cd:22:ca:71:39:f8:b6:2d:8e:
                    75:d7:55:40:a5:23:a2:fa:0c:69:e5:3c:44:37:41:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AB:A7:AE:45:F7:52:FD:F9:F5:B8:A4:4C:19:C4:87:CD:AE:6B:8D
            X509v3 Authority Key Identifier:
                keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:c9:46:54:d0:45:5b:75:8e:af:58:68:85:26:f8:63:ae:
         d2:0c:41:38:bc:a7:86:93:d3:e7:1d:14:fe:a8:2b:15:ee:28:
         d8:93:e9:8a:f3:77:2f:02:8a:2d:76:40:ed:42:6e:d7:4c:16:
         f0:a1:a4:96:ae:59:f7:9b:92:86:7e:ba:f2:4f:cb:36:ad:15:
         80:67:5f:4a:cc:48:7e:72:05:2c:f5:69:f9:87:d9:d0:6a:38:
         54:4d:00:ff:80:da:a4:2c:29:cd:f5:28:00:09:3d:a4:4d:75:
         7c:9d:58:73:61:d6:78:47:2b:7c:f8:05:92:99:b4:a5:9b:03:
         b8:43:de:60:ec:15:1b:5c:40:a8:52:ab:a3:28:72:ab:b2:ce:
         4c:dc:49:ce:ee:46:d3:a4:38:8e:6f:7a:1b:02:c4:17:66:05:
         fd:bb:2c:95:ba:ca:a4:32:92:17:0c:3a:58:4d:c0:97:d1:5e:
         73:66:ee:f9:b2:ec:e9:3e:31:e9:88:80:a0:c1:60:cd:4a:6e:
         c6:c1:fc:9a:91:47:d2:cb:14:d4:25:c1:45:d1:1e:7a:bf:2a:
         39:b4:87:30:41:54:b9:8f:92:df:03:c8:e0:87:2c:6c:aa:6e:
         de:dd:e5:a9:34:4e:91:ea:a5:14:ca:4f:10:a5:d5:87:46:39:
         db:cc:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:18 2026 by rpki-client