Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File:                     NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier:          +t02umY5EMabc1NYTPWXDav4VCbIVSqEm01M3skMvlE=
Subject key identifier:   57:94:D6:44:D1:E0:50:6C:AF:49:8F:F3:25:B3:2B:F9:28:78:5C:41
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer:       /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial:       080D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number:          07DA
Signing time:             Tue 28 Jul 2026 21:57:00 +0000
Manifest this update:     Tue 28 Jul 2026 21:57:00 +0000
Manifest next update:     Tue 04 Aug 2026 21:57:00 +0000
Files and hashes:         1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: bSlsKqiVriZHSm7veBWRevd8Cn1jeHIKV4dZWGSrU5s=)
                          2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
                          rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
        Validity
            Not Before: Jul 28 21:57:00 2026 GMT
            Not After : Aug  4 21:57:00 2026 GMT
        Subject: CN=6a6925ac-75a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:6a:ff:37:29:d4:b2:fc:25:93:9c:81:1e:
                    e6:8a:51:8b:a2:1c:39:f3:ab:42:67:02:84:96:55:
                    3d:4c:cd:54:80:69:4d:bc:fd:af:c5:f3:37:36:27:
                    b5:c0:8d:c0:20:42:0d:ea:00:41:86:aa:4f:51:75:
                    23:6e:c6:0a:87:54:1e:f1:f1:b4:ca:68:58:5a:5d:
                    c0:2d:46:42:cb:19:3c:f6:74:0a:33:99:75:cd:67:
                    ba:36:24:c0:79:da:e1:cf:4e:e9:d9:54:93:f9:e0:
                    03:5a:cc:f1:a8:1c:ee:f0:0d:76:e1:1c:be:7a:5c:
                    a7:20:df:19:79:98:11:3b:73:be:08:36:36:48:b4:
                    dc:71:bb:2d:26:6c:68:2b:57:19:da:0b:e7:2b:12:
                    33:73:88:7d:a4:79:5f:e6:bb:c5:2d:d4:57:aa:b3:
                    f6:a5:e2:29:3a:50:5f:6e:6d:1a:5b:aa:8a:a3:f9:
                    8d:9a:0c:5a:28:21:12:e8:26:6a:1f:50:b1:4c:25:
                    75:81:9b:60:37:46:20:fa:d2:2a:44:53:56:aa:20:
                    0b:ec:20:fb:ad:c6:1b:0f:85:9b:34:32:4c:9f:81:
                    ee:c6:c2:69:c3:45:16:0e:56:52:29:64:46:18:0e:
                    3a:5d:0e:07:73:37:d2:da:5e:1d:36:9f:6a:3d:5b:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:D6:44:D1:E0:50:6C:AF:49:8F:F3:25:B3:2B:F9:28:78:5C:41
            X509v3 Authority Key Identifier:
                keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:96:60:91:81:c8:4a:66:b4:d5:27:ff:00:6b:07:97:96:80:
         a5:67:d7:00:50:7b:ca:ef:2a:79:de:2f:76:3a:3f:7a:a8:ff:
         2f:c9:39:9c:c6:05:65:44:9d:61:1f:21:32:82:29:91:f2:54:
         5a:1e:99:0a:2d:d8:99:56:3e:5d:1e:d2:2a:ed:9c:92:33:fd:
         56:50:55:8f:eb:fa:4b:0c:7e:26:3b:f1:99:00:24:1b:7b:69:
         39:b9:f5:cc:95:69:d5:7a:9f:93:10:db:1e:76:8d:92:33:dc:
         34:4c:45:f5:3f:a4:0d:71:09:87:3f:75:3e:6f:5a:96:71:42:
         8b:7f:61:69:f5:c0:79:16:33:bd:7f:53:ba:a1:04:8e:fb:0c:
         ac:1b:e5:66:90:3f:db:c9:0c:58:54:f9:8f:b2:2b:1f:92:7e:
         79:18:3f:c2:93:be:67:97:a6:9f:81:a8:50:2b:69:13:75:f3:
         60:a6:dd:d0:e0:d2:f6:6f:a9:6c:a7:94:16:13:1e:24:ee:76:
         27:d1:01:f0:2a:4b:9a:a0:d9:8f:6d:db:6c:8a:72:25:5f:95:
         1d:4c:1c:cc:f5:e0:ff:6f:c5:1d:12:df:59:6c:ee:2a:a7:44:
         64:02:2f:f5:7a:60:d9:06:ce:72:33:9e:8c:2f:76:45:bd:a0:
         8a:c3:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:12 2026 by rpki-client