Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File:                     N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier:          ePh3UFuQuQibO4mtDqhGo5dPrFmEbTjlOPN31hAJ6+s=
Subject key identifier:   23:19:10:2A:C1:F4:50:D4:AB:0B:18:F6:64:00:00:BD:CF:01:D9:1D
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       0471
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number:          0469
Signing time:             Mon 27 Jul 2026 01:11:24 +0000
Manifest this update:     Mon 27 Jul 2026 01:11:24 +0000
Manifest next update:     Mon 03 Aug 2026 01:11:24 +0000
Files and hashes:         1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: lavLRphnIi4MuYrf0ISEbLfKRMFxFR2cCE8S2La0ZxI=)
                          2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: 9lzXvcPlg/l/tlAmlqyfga76fKpdYYXjmSDlWTcG17o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Jul 27 01:11:24 2026 GMT
            Not After : Aug  3 01:11:24 2026 GMT
        Subject: CN=6a66b03c-6be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:d1:8d:77:b8:ff:b5:08:fa:23:2c:85:68:
                    3d:f5:c0:ac:22:ab:66:b4:2c:50:15:35:4b:7c:0d:
                    9f:fd:d6:84:24:3b:6f:5f:2c:8d:3b:2b:da:72:bf:
                    1e:1f:33:fd:5b:5e:8b:5a:7b:06:49:c9:b4:9c:4a:
                    89:15:75:22:fe:5e:61:a9:13:b5:8c:4d:c0:2c:85:
                    cd:c6:3d:e2:2f:60:e0:b2:0e:00:c6:da:22:c1:11:
                    ea:cb:60:30:19:4b:fa:1e:86:e5:89:ee:d0:b0:6e:
                    fa:86:33:f2:37:69:aa:a8:f6:b0:e4:e1:cd:b1:fe:
                    cd:35:c9:18:7f:0d:04:00:2a:1a:5a:5a:8f:10:bc:
                    b4:a7:98:86:82:12:a9:bc:60:ba:22:34:46:b8:78:
                    24:8b:be:e8:05:37:b3:ae:b4:6e:b9:03:44:13:ef:
                    7c:8e:10:79:5a:94:eb:8b:cb:fe:ca:4a:92:75:00:
                    80:b1:3d:a8:e1:a6:59:66:91:23:73:e1:33:ce:f1:
                    22:43:78:a8:e2:0a:25:90:43:63:b6:4f:dc:10:f6:
                    10:5c:63:b0:be:9b:8c:ab:72:b7:2f:41:03:b4:44:
                    c1:f0:35:ac:be:46:9e:43:66:51:3d:3b:5f:9c:0c:
                    de:cd:7d:98:7a:a7:8b:c8:ab:50:d3:54:44:ab:3d:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:19:10:2A:C1:F4:50:D4:AB:0B:18:F6:64:00:00:BD:CF:01:D9:1D
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:57:ce:4c:57:f0:21:ef:a2:c6:97:1d:46:c1:27:d2:46:
         79:7f:3c:b3:b9:9a:c1:c4:c5:9a:e2:b0:01:d0:13:28:55:a1:
         ef:4d:00:b4:b6:e4:10:c9:98:cd:8f:35:52:c3:33:6e:7f:50:
         7c:f4:4b:aa:17:e3:77:35:6a:b5:5a:0e:3f:de:f4:f8:ad:ac:
         03:6a:d6:d6:75:69:7d:d9:44:eb:62:34:fd:34:2c:eb:c4:e8:
         bc:69:24:45:97:be:b9:a3:af:5a:43:8f:d1:1e:a4:ee:d8:68:
         8b:68:d6:40:90:56:76:7d:27:af:e3:9b:0d:da:96:53:e1:1e:
         7f:b9:f2:8a:4c:ae:19:91:1f:03:45:56:18:f9:7e:e1:50:d1:
         4b:f7:4c:de:ca:f2:fe:a8:d0:e1:5c:e5:d9:28:f2:80:f2:d0:
         81:a1:2d:d8:9e:ed:24:5b:00:dd:f8:0c:ee:11:10:ee:37:e2:
         4d:b2:8a:aa:7a:f3:1b:6d:9c:ec:09:95:f7:43:bc:17:91:62:
         a5:74:6b:01:6e:80:1a:38:82:e9:5c:0f:f5:3b:07:18:0c:36:
         17:71:fe:7a:a6:5f:a2:04:95:a2:5a:bf:e6:95:ac:66:c2:d5:
         79:e5:22:75:dd:f0:a4:26:92:fe:42:65:1f:df:d3:46:6c:88:
         6f:36:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:15 2026 by rpki-client