Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          +4rj5rHy2wWEH+p/ZR81Xhz37jSsK7v9aPbEsj/VG2A=
Subject key identifier:   7A:F4:0F:0D:DE:28:6B:3B:E7:77:68:FB:EC:2E:3F:DA:D9:6F:9D:4C
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          DE
Signing time:             Sat 13 Jun 2026 06:43:47 +0000
Manifest this update:     Sat 13 Jun 2026 06:43:47 +0000
Manifest next update:     Sat 20 Jun 2026 06:43:47 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: lgkbTW1CPDFDfRzUWnGRhJ/msfi20oQNIR87ql4YCsA=)
                          2: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
                          3: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Jun 13 06:43:47 2026 GMT
            Not After : Jun 20 06:43:47 2026 GMT
        Subject: CN=6a2cfc23-9355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:33:e5:b3:f5:2b:b3:ca:ae:de:b3:4a:41:
                    1f:d9:fc:2f:ee:8c:13:05:18:74:dd:5b:fa:6a:c5:
                    34:69:40:b2:7c:ac:ba:0f:1c:2e:0b:a8:49:78:4d:
                    26:fa:ac:ea:97:2f:55:11:a9:40:88:fc:20:38:9d:
                    c2:d6:4c:dd:58:c3:24:b6:e5:ed:4e:1a:22:36:cb:
                    86:d7:07:7c:6b:07:06:2d:a7:e1:2a:d2:3a:7c:16:
                    3d:85:c2:45:6e:a9:5b:ea:34:7c:99:47:8e:49:38:
                    bf:df:30:e8:62:74:b5:65:41:ba:9d:dc:e9:60:82:
                    d1:37:ff:26:8d:a0:b6:f9:b2:7d:b2:54:f8:26:db:
                    4c:3a:e7:c5:f0:97:34:1b:35:1e:fc:8f:0a:39:c1:
                    93:a4:0c:8b:b6:fd:f5:b3:5f:80:92:f7:35:d9:5d:
                    3e:55:78:eb:d0:3a:92:d0:4d:a7:fa:8e:49:40:c6:
                    8a:ca:87:e2:13:3c:0e:3c:f2:ca:93:e5:6a:2f:00:
                    f0:8d:fd:3c:75:1f:b5:52:dd:1c:1d:ef:80:af:ea:
                    5b:c4:c6:74:c9:60:2f:97:b4:2d:66:6c:8c:e4:0b:
                    3b:22:8a:40:ef:c6:b1:d9:00:49:ac:0c:b7:e4:f8:
                    04:a5:4a:3d:81:e0:c2:23:74:96:49:36:c5:8d:ea:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F4:0F:0D:DE:28:6B:3B:E7:77:68:FB:EC:2E:3F:DA:D9:6F:9D:4C
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:16:08:07:9c:e3:e4:51:9c:c9:02:e4:fe:2b:d0:61:3c:1b:
         23:64:e0:0d:c8:95:b4:19:06:c2:71:c6:87:0c:41:1e:a1:d4:
         d3:52:c9:bf:8e:b4:3a:28:f0:d2:49:54:fb:66:fb:9e:45:75:
         78:d3:f6:fc:f6:f1:9c:9c:9c:5c:7a:46:62:6c:12:d5:1c:27:
         a0:6e:f7:d8:42:23:9f:14:4a:e8:f5:44:e5:2e:9f:f7:c9:0b:
         5e:68:54:8d:9c:24:e8:70:fe:ba:95:ae:3e:19:ff:d8:33:3f:
         ef:ff:74:28:81:7d:9b:27:ca:ce:54:40:05:41:e5:2a:0f:fd:
         fd:2f:a5:24:b0:24:8a:af:56:f5:4e:09:db:a1:45:04:8f:73:
         8a:7b:45:d9:15:7d:6b:44:a3:68:34:a1:c2:eb:80:7b:77:b4:
         28:52:5a:64:f6:9d:d5:63:b4:7d:3f:cf:08:42:71:98:49:18:
         63:e8:fd:85:6c:80:a9:c9:82:64:da:28:bd:2a:37:32:65:da:
         84:86:bb:25:ce:f6:0b:19:c7:36:59:2f:c4:d1:ce:a3:d7:37:
         90:d8:8f:ce:97:4a:ed:7b:93:21:4d:31:5f:d2:ef:f6:67:9b:
         a1:04:d5:41:97:ca:9c:f0:e5:41:e5:77:ce:e2:9e:ca:83:a4:
         75:3f:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:45 2026 by rpki-client