Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File:                     Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier:          c+x4YZZMu+a0319kUiR8mtSvvgGlixw2tw9x07taZIs=
Subject key identifier:   B4:E1:19:A2:30:C2:E3:04:E1:C8:43:66:B3:EA:7D:C2:D5:11:4C:79
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer:       /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number:          02C8
Signing time:             Mon 02 Mar 2026 02:07:24 +0000
Manifest this update:     Mon 02 Mar 2026 02:07:22 +0000
Manifest next update:     Mon 09 Mar 2026 02:07:22 +0000
Files and hashes:         1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: pCHlE5A2hzUmoIathalNWnvBSOTRWl3KLWsEbOcR/Wo=)
                          2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: pcUI164QP94dET6vxGqZiMWs2E97pOagQxpOZq2263A=)
                          3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
                          rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
        Validity
            Not Before: Mar  2 02:07:22 2026 GMT
            Not After : Mar  9 02:07:22 2026 GMT
        Subject: CN=69a4f0dc-8c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:fd:22:1c:35:79:df:9d:ff:2d:07:24:05:
                    20:24:b9:be:e0:9b:06:1d:c5:9b:f5:21:53:e4:08:
                    b6:93:b7:96:8c:91:fa:3a:70:70:82:41:5d:07:de:
                    c7:b1:78:07:da:aa:d5:8e:55:e0:53:6f:ea:32:fb:
                    99:6e:7c:61:2f:49:6c:a3:69:53:f0:e8:1b:cf:b4:
                    e3:45:86:11:3b:fd:93:da:25:d9:04:37:4e:22:fc:
                    2a:35:28:76:52:6d:2e:70:c5:f0:ea:df:5d:5b:9d:
                    3c:a6:1c:bd:3a:d3:26:4d:ac:42:bc:5b:6f:d2:27:
                    23:05:d1:16:e6:46:d6:fa:41:99:27:3e:e3:a4:43:
                    e5:cd:94:32:3d:4a:ca:56:a8:f8:1f:8c:75:ca:f1:
                    a4:d9:cf:fa:a4:bc:2c:97:09:2b:26:43:e8:b4:7b:
                    03:45:31:c7:bd:95:4e:0b:a3:b9:1e:4c:8f:69:68:
                    74:05:1c:6c:23:56:f4:bd:82:64:22:31:b6:f1:f3:
                    37:da:27:47:a8:c3:1b:cf:00:eb:a2:a7:bc:04:12:
                    56:62:75:ad:7a:e1:ab:da:9c:f5:39:24:13:28:7b:
                    09:c3:95:6e:4e:fd:11:ad:82:92:b6:65:3c:00:04:
                    b6:d4:69:e7:df:13:15:fa:28:f8:a4:e2:8b:fa:5a:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:19:A2:30:C2:E3:04:E1:C8:43:66:B3:EA:7D:C2:D5:11:4C:79
            X509v3 Authority Key Identifier:
                keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0d:cf:b3:7a:30:89:5c:44:f4:e9:b6:da:c2:87:96:3d:3b:
         17:d1:7b:ca:2b:b2:83:f3:12:16:f0:58:ff:06:c6:51:d6:2b:
         3c:04:86:3d:b4:1b:71:9b:c8:ac:02:59:dd:70:3e:d6:b6:c9:
         16:31:96:6c:8a:4a:80:b4:cb:af:b9:43:55:1e:04:75:79:55:
         d0:7f:a6:de:da:f7:ee:4a:25:8d:3c:66:cc:e8:c0:9a:ae:0d:
         a3:f5:2d:50:ce:1e:ce:8a:8e:e4:80:8e:21:a6:f6:88:4d:de:
         c8:9e:fc:8a:4e:c0:18:10:d0:f7:dd:56:7e:68:62:14:f1:30:
         33:2c:1a:0d:10:56:73:5b:0f:15:93:8e:d0:42:bc:71:76:4a:
         18:47:0b:a3:a8:db:5e:c8:32:b9:d7:81:97:f1:b6:18:f3:ed:
         d5:5e:41:a2:89:40:73:46:08:1c:e3:38:ed:ed:a6:1c:6f:24:
         85:dc:ae:17:90:35:5f:84:e0:08:18:15:88:b5:ba:a9:57:0b:
         e6:c2:08:24:ab:50:60:76:57:b5:fc:20:af:79:cb:fe:f7:cc:
         33:ca:b1:7f:ce:a6:ea:93:af:b5:5a:e4:cc:13:e7:36:b7:84:
         f1:4b:79:53:3e:9c:0d:9e:e4:01:52:66:91:3f:7f:a8:15:d6:
         e0:7c:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:51 2026 by rpki-client