Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File:                     NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier:          bxXaraMbMvcmvRVLcc/Bg5E4z1F1ZHXHvDUl2zfmZ7Y=
Subject key identifier:   16:23:25:E0:71:BD:B6:CE:8B:9B:5E:D8:71:A8:06:12:AC:9A:0B:CF
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer:       /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number:          018D
Signing time:             Fri 17 Apr 2026 04:11:10 +0000
Manifest this update:     Fri 17 Apr 2026 04:11:09 +0000
Manifest next update:     Fri 24 Apr 2026 04:11:09 +0000
Files and hashes:         1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: 9BNFm4CHAgnxTJT4BQmVDshB4eK/G8hqxtIA9TGOwi4=)
                          2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
        Validity
            Not Before: Apr 17 04:11:09 2026 GMT
            Not After : Apr 24 04:11:09 2026 GMT
        Subject: CN=69e1b2dd-ff47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:ec:48:34:35:c0:3a:88:28:c0:0d:81:b2:
                    44:07:b0:3d:bc:c6:8c:26:26:ff:dc:e2:27:74:cd:
                    17:d0:47:79:80:58:38:fd:08:2a:46:6e:92:4b:40:
                    a8:bf:c9:fa:54:19:e1:35:6c:6b:e9:c5:d9:e7:c2:
                    e8:fc:d4:ec:a6:50:15:62:66:66:19:eb:6d:32:ae:
                    a7:05:a4:21:e8:f2:1e:13:34:69:a6:d2:7f:66:a8:
                    6a:99:00:01:1e:e5:19:ba:81:cb:d4:6a:73:41:27:
                    f2:27:89:9b:dd:c6:49:45:0f:a4:d9:40:57:9f:bf:
                    3b:f9:c1:66:28:3b:b5:1e:9b:bd:e4:e3:cb:be:ae:
                    ce:f2:5b:87:64:0c:02:a0:d4:58:a0:32:0f:84:55:
                    37:3e:12:07:27:75:cb:c9:71:d6:8c:cd:27:23:06:
                    99:c7:70:a4:bd:b2:5d:4b:86:27:e3:ef:5e:95:87:
                    42:eb:22:a1:3b:d8:74:c1:50:84:c7:54:7e:ee:1e:
                    48:f9:b6:2e:62:82:bb:ea:e4:8f:db:dd:cb:5a:6f:
                    c9:e2:9c:cd:69:90:29:03:67:8e:9b:96:7a:1a:01:
                    36:d8:8a:1b:70:92:38:cf:52:4f:43:6e:ad:a0:30:
                    31:d6:95:28:c5:20:f3:84:9a:64:5a:d9:4f:68:c5:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:23:25:E0:71:BD:B6:CE:8B:9B:5E:D8:71:A8:06:12:AC:9A:0B:CF
            X509v3 Authority Key Identifier:
                keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ef:b3:4f:65:c3:f5:d0:6f:e5:10:f6:4d:0b:8c:20:7f:78:
         08:ac:b8:e2:12:41:8e:f7:58:32:06:40:25:17:2d:6c:74:91:
         e9:00:ff:ce:1b:74:ea:0e:de:02:c1:be:b2:a5:a0:4b:81:f3:
         9b:6a:03:5f:4a:98:d0:1b:b4:a3:6b:cf:de:ab:ca:7f:fe:44:
         8c:10:93:43:b4:70:03:b2:e5:d2:bc:57:09:8d:76:62:9c:08:
         fd:52:77:08:a4:a2:77:33:ae:49:da:9f:be:78:90:d4:36:45:
         92:6f:ec:ab:30:4f:14:5c:42:89:10:2d:14:25:86:ce:3a:55:
         a3:2a:93:5d:ea:f6:86:de:24:7f:a2:4c:e2:7c:fa:77:94:c4:
         b2:46:7a:b9:4e:27:7c:4c:f0:72:ff:ee:4b:87:42:2d:f4:41:
         4d:99:6f:62:d7:fd:02:f5:ed:98:7f:d9:e2:25:ce:a2:c1:d5:
         94:c9:a2:63:30:e7:32:82:6b:ee:e9:1a:84:34:a2:9a:fe:20:
         00:69:2a:b8:67:89:9b:74:1d:8e:1e:4a:57:0e:4a:31:11:1f:
         2e:ff:89:5c:fe:e6:21:3a:a2:a5:6b:8b:1c:6f:88:11:29:84:
         f1:33:71:09:b1:12:9a:91:b0:2a:26:cd:95:61:90:d4:b3:d9:
         e5:ae:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:42 2026 by rpki-client