Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File:                     neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier:          hWAeusg3M/+B5GkET9VBFMD2LKgM66Mzt8gBaHEYhcU=
Subject key identifier:   A9:25:A8:12:60:55:3A:A6:DA:B0:49:1A:31:47:4C:A3:02:B6:51:E7
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer:       /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial:       0CEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number:          0CDC
Signing time:             Thu 16 Apr 2026 18:20:04 +0000
Manifest this update:     Thu 16 Apr 2026 18:20:03 +0000
Manifest next update:     Thu 23 Apr 2026 18:20:03 +0000
Files and hashes:         1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: VWLtBAZME+IA/5YE4Q3N8KAqPrdh9cA/DnEmgxUxCb8=)
                          2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: 510GpCnNhZrFSfKUYJRjGWFtGydNMPzOMZZI1kU8Y5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
        Validity
            Not Before: Apr 16 18:20:03 2026 GMT
            Not After : Apr 23 18:20:03 2026 GMT
        Subject: CN=69e12854-7530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:db:ec:ee:e8:68:cf:75:4b:e1:06:49:74:
                    25:c0:8f:b0:54:27:34:6b:e9:4d:01:a8:ef:98:43:
                    cd:11:ac:86:57:ff:ed:02:d0:73:b7:5b:c0:4c:be:
                    a0:06:70:93:89:e7:61:4d:bf:36:23:3e:f5:65:a4:
                    6b:9f:66:fb:20:2d:5d:66:61:d1:b4:0d:7f:d5:34:
                    d0:37:bb:11:ee:d1:d0:d7:37:f1:3d:1f:77:60:3e:
                    d4:a2:05:03:bb:25:0f:ea:a5:56:06:ad:1e:30:5d:
                    c8:48:0a:50:82:fd:04:88:02:0f:29:9b:e0:37:95:
                    87:03:6c:1b:f2:22:fd:53:6e:d9:68:7d:39:b4:b9:
                    a5:1b:fb:5e:e0:9c:08:5a:cd:ff:4d:fa:80:8f:2b:
                    e4:df:7c:7f:4d:b3:d2:52:e3:29:f6:80:58:9f:06:
                    d9:1c:d5:2c:c9:a7:c0:46:87:99:54:34:d8:38:dc:
                    4a:63:0c:dd:3a:3f:45:b9:dd:05:f9:a7:86:52:f5:
                    e9:fd:7a:05:4a:3d:05:dd:da:68:89:5f:09:a8:1a:
                    00:0e:4c:46:ad:7b:33:d4:a1:43:97:b8:8c:55:fc:
                    30:1f:db:3e:8a:22:d0:50:1d:bc:3b:67:9e:9a:45:
                    ac:df:f9:0b:0d:39:2f:8b:e0:15:8a:ef:f6:8e:2b:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:25:A8:12:60:55:3A:A6:DA:B0:49:1A:31:47:4C:A3:02:B6:51:E7
            X509v3 Authority Key Identifier:
                keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3d:a4:91:51:7c:78:da:36:a9:6e:85:69:59:d5:1d:b1:0d:
         cc:08:11:9a:1d:44:fc:bb:93:cd:da:06:78:da:42:9e:6f:9b:
         1a:29:30:bd:fa:62:5a:83:36:3b:78:7b:e7:11:1b:b8:5f:5c:
         bb:a8:8b:c6:7e:17:0c:6c:2a:61:bb:6d:f8:30:3f:4d:e5:04:
         28:46:81:dd:4d:9a:56:cf:fa:47:7b:6a:94:36:50:20:2e:f3:
         76:f2:38:2a:c6:bf:76:d9:1c:e8:7e:1c:82:e6:71:2e:a7:6c:
         8f:ab:f0:2c:57:c5:05:05:26:e8:ad:36:ad:cf:04:4c:d1:8f:
         fc:5d:3a:0e:dc:58:8d:6d:3b:ec:fe:0b:8b:90:eb:d6:9d:cd:
         e9:a2:15:69:ce:66:78:b6:f7:23:6b:e6:cd:28:d0:f9:af:9b:
         37:1a:bd:7d:ab:2c:cb:b0:e3:c4:74:cb:f8:c5:11:5b:12:cf:
         fc:91:7b:4d:be:59:83:a2:0c:e9:f2:72:bd:a8:7a:51:09:22:
         3a:fc:12:d4:af:6b:8d:0d:40:df:f2:be:bd:9a:ce:f2:78:43:
         42:27:32:aa:98:12:a7:c0:a8:16:c0:04:e0:46:32:d6:6b:95:
         e2:69:7f:99:38:58:b8:0a:1e:af:97:7a:99:9d:71:14:4e:ed:
         ca:0b:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:19 2026 by rpki-client