Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          113ly965sAuSRb/jnVTx9Da30ZD1Y3lS1vV7KGXxANU=
Subject key identifier:   29:AC:D1:3A:34:50:E1:79:72:AC:BB:F5:37:34:CD:AD:8C:9D:56:F6
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          C5
Signing time:             Mon 27 Jul 2026 09:03:16 +0000
Manifest this update:     Mon 27 Jul 2026 09:03:15 +0000
Manifest next update:     Mon 03 Aug 2026 09:03:15 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: hlShNMtSlFT9qnq7jhg4uiI+3sSAztpdhKMscGsg0os=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jul 27 09:03:15 2026 GMT
            Not After : Aug  3 09:03:15 2026 GMT
        Subject: CN=6a671ed4-9347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:a1:83:23:81:49:41:a3:52:45:e2:8e:64:
                    b6:cc:35:c6:58:7d:d7:e6:4c:29:e4:ec:9a:83:1c:
                    33:95:c4:47:61:5f:c6:8f:2a:3b:c6:c4:e2:8b:11:
                    b5:39:08:66:e2:a1:e2:96:cb:17:6b:6d:3a:a1:35:
                    02:4f:3c:f7:f8:a6:27:fb:c1:68:7d:05:0a:f2:a3:
                    15:1a:bb:0c:3f:3b:dc:ed:ad:7c:84:53:57:57:31:
                    bb:3e:2d:7a:59:7d:c7:63:c6:6e:79:a8:c9:15:17:
                    3d:f4:ab:8f:d6:67:ca:44:e1:6d:b3:b5:52:37:59:
                    d2:9f:25:ec:13:7c:1a:bc:cc:30:7d:2b:50:9e:55:
                    b1:9a:1f:2f:4b:22:e9:97:0b:9d:f1:ad:b7:48:50:
                    4f:71:ac:46:b1:c1:91:8e:7c:9b:cb:9f:f9:5f:01:
                    39:d2:9a:78:51:41:e7:90:cf:d4:c1:c6:bc:a3:b0:
                    b5:bb:54:d8:39:d2:7c:eb:9d:f7:70:27:5e:44:ec:
                    03:94:8b:5f:e8:19:fd:ed:aa:22:9b:7c:97:68:be:
                    7f:7f:33:70:23:65:a0:68:90:91:c4:54:8a:de:15:
                    07:dd:b5:6a:4b:6e:5e:63:2f:0f:af:ec:74:11:79:
                    2f:c6:07:91:b9:87:cf:95:3e:96:25:40:e7:51:a2:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AC:D1:3A:34:50:E1:79:72:AC:BB:F5:37:34:CD:AD:8C:9D:56:F6
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:fb:d7:49:a5:96:4f:c2:d8:f3:aa:aa:12:5e:5e:30:6f:65:
         38:45:f3:9d:dc:9f:a8:58:0c:ff:57:5e:7c:4a:eb:8d:c4:22:
         ad:2a:5f:87:5b:0d:3e:53:b2:50:ae:8a:05:5c:e3:f5:23:f9:
         78:9a:86:2a:60:89:2c:eb:87:ff:ff:bf:04:ea:d5:61:49:28:
         fd:94:e4:01:a3:b1:e5:55:53:c0:40:c0:f6:63:c2:ee:bc:09:
         87:9e:c7:5c:a3:35:38:01:4f:28:08:91:9d:fb:f5:6d:3f:1b:
         b2:2a:6c:a2:ae:05:90:f0:20:f9:4a:86:6c:a3:91:d1:e0:96:
         0d:e0:06:12:38:cc:98:3c:84:d2:53:83:18:b2:9e:cc:95:ee:
         0d:3a:a8:25:ec:6d:c2:91:20:af:dc:f9:e6:81:3c:9b:4d:59:
         87:78:29:7c:e0:2d:61:fa:22:f2:e1:72:f5:40:03:c7:5a:3c:
         89:34:7c:c3:25:6c:f0:85:b1:ee:d6:e2:cd:38:1e:14:8a:b0:
         ea:2a:17:ab:8a:7e:f5:cd:35:4a:db:ba:3a:59:f0:b0:b9:48:
         4b:14:de:64:aa:f7:a7:87:bc:16:ae:77:9d:27:a4:92:f1:c9:
         c7:41:d2:0b:fd:40:45:e6:27:db:b7:5a:f8:32:9c:47:11:d9:
         41:ad:ee:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:12 2026 by rpki-client