Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
File:                     NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json)
Hash identifier:          f4QeDeK16Sg5YLQrQ9Y3rOCR7P/0Pv9lE2a+nrPn+00=
Subject key identifier:   71:BD:C1:EE:C1:77:49:EA:49:B1:CE:D2:7B:F3:F0:EE:D7:0A:4E:7F
Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
Certificate issuer:       /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
Manifest number:          C1
Signing time:             Thu 11 Jun 2026 09:15:13 +0000
Manifest this update:     Thu 11 Jun 2026 09:15:12 +0000
Manifest next update:     Thu 18 Jun 2026 09:15:12 +0000
Files and hashes:         1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: j5dMZs/IMikQP2Fr92J/10OHtTeXnOE2doFrBF1KjwY=)
                          2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: lbwk8mNKjMeoW18suzzRQjcBAL5Bd/eKgngvQTadOm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
        Validity
            Not Before: Jun 11 09:15:12 2026 GMT
            Not After : Jun 18 09:15:12 2026 GMT
        Subject: CN=6a2a7ca1-e0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:98:0d:f5:3b:94:44:02:2c:48:6c:ac:3d:
                    d1:5a:99:72:b0:df:74:5f:75:a7:05:f7:a0:b6:0a:
                    f4:bb:1f:d0:aa:0e:62:c1:2b:a0:11:f4:f8:e1:cf:
                    c7:67:95:fd:a5:ba:b3:4e:c4:3b:f7:c8:b8:2d:fe:
                    af:21:7b:2d:e9:70:5f:19:bb:4a:80:f6:41:c1:3e:
                    f5:d2:c1:b2:75:8a:36:13:a9:e5:ab:5d:4f:64:c2:
                    96:65:27:52:ad:d3:6d:41:af:63:e4:f0:49:c9:6d:
                    b9:b4:fc:f6:1a:69:37:b9:98:c9:47:26:12:80:31:
                    f4:70:c6:90:ce:3f:b3:71:e0:61:02:c9:c0:a5:1f:
                    24:02:08:1e:4b:41:ab:96:3c:0e:da:64:63:bb:5f:
                    9a:a4:25:ae:4d:d6:a8:80:ac:16:5e:69:5b:d9:09:
                    06:41:10:b3:10:fe:b4:c7:2c:1e:b6:4e:25:27:ba:
                    8d:a5:68:66:22:cf:1a:5f:c0:17:79:81:bc:fe:8e:
                    8b:a0:66:c0:8f:e1:1c:72:57:d9:34:8b:6d:7e:dd:
                    1e:74:da:c5:31:43:d4:c2:f2:a1:fd:1b:fb:3e:b0:
                    82:79:63:62:3a:c1:22:6a:2d:ab:ad:15:20:9d:ff:
                    4b:05:de:54:03:96:6c:0a:2e:20:30:9c:c6:6b:1b:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:C1:EE:C1:77:49:EA:49:B1:CE:D2:7B:F3:F0:EE:D7:0A:4E:7F
            X509v3 Authority Key Identifier:
                keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:97:d0:0f:90:e6:7c:f5:31:ff:ac:ba:94:06:d9:bd:b8:05:
         b5:3f:ac:b7:42:50:38:8d:86:9a:c1:0f:9c:c2:e8:29:aa:6f:
         72:d2:58:0f:cd:f2:28:95:66:f5:98:bc:32:55:cd:a4:34:64:
         eb:05:83:c7:8e:ab:a2:cf:0f:15:f6:0f:fb:93:e6:39:4e:34:
         e0:2e:ad:63:fa:e0:06:65:cd:a3:e3:68:cb:9a:67:7b:89:7a:
         41:1f:e4:34:12:21:e5:d4:86:43:27:1e:7e:d5:eb:d0:2a:ff:
         d3:13:c1:9f:03:01:85:85:66:fe:9b:de:f0:f6:ad:0d:60:74:
         85:52:f3:b3:97:80:f0:1e:b8:59:37:da:da:3b:df:a1:30:4c:
         4c:7d:c7:b6:af:fa:d2:fd:0b:56:27:ad:58:9a:59:ac:1b:22:
         4f:b7:44:28:48:0d:bf:7a:c1:a3:76:42:e6:0a:53:1f:cc:e2:
         b4:c9:d1:d5:5f:c8:19:0c:a0:64:e2:70:e0:57:f0:2b:a7:08:
         fa:00:b3:1f:dd:16:db:45:74:bd:c3:cb:30:fc:d2:84:b8:70:
         c2:25:80:a6:34:49:21:d1:d6:a6:32:5f:f8:d7:c0:43:35:27:
         c5:3e:85:7e:ae:43:76:3e:42:d4:3f:c3:c3:7b:67:64:aa:da:
         0b:32:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:57 2026 by rpki-client