Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File:                     NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier:          1IUjAHLdDCjhcw8fReTRbPYsqACtYfwW+CBhZRaNloU=
Subject key identifier:   DD:8C:42:10:8A:13:05:D1:04:CF:D5:1F:28:01:87:DF:5F:93:E5:EA
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer:       /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number:          07C3
Signing time:             Fri 12 Jun 2026 21:34:50 +0000
Manifest this update:     Fri 12 Jun 2026 21:34:49 +0000
Manifest next update:     Fri 19 Jun 2026 21:34:49 +0000
Files and hashes:         1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: +L75rHw0tjS1nuBat6W/JzbG62POzVnrPfUE39A5th4=)
                          2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
                          rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
        Validity
            Not Before: Jun 12 21:34:49 2026 GMT
            Not After : Jun 19 21:34:49 2026 GMT
        Subject: CN=6a2c7b79-257b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:16:08:36:47:86:1e:f3:46:ec:fe:a5:0b:
                    6b:b8:98:d2:5f:f5:ba:54:88:23:55:00:e2:a1:ac:
                    5d:6d:b6:d7:ef:ba:52:78:58:4c:fb:78:11:77:b7:
                    7e:cc:a2:8e:f7:18:08:2e:8c:a0:2c:64:f8:f9:c6:
                    1c:29:04:42:bc:91:12:19:46:0e:b2:cc:c0:8d:68:
                    e4:52:d4:ac:68:40:08:f1:99:41:ca:6f:e4:4c:1a:
                    3f:47:f3:ff:12:64:65:03:73:4d:e4:0b:23:f1:9d:
                    9f:7c:17:e6:ac:53:05:2c:19:00:9e:ca:57:e6:27:
                    c6:2e:ad:bd:e9:c9:52:5f:81:f8:b6:18:ad:47:69:
                    db:c8:31:db:6e:93:71:38:60:8d:49:c7:ba:0a:88:
                    0f:86:94:e9:cf:98:2b:95:f9:6c:a8:47:de:e9:35:
                    49:42:9e:8a:1c:dd:52:5f:0c:c0:7b:ef:84:3c:19:
                    2d:49:8f:79:cc:71:d5:06:86:9d:b4:3e:8f:93:99:
                    63:14:7d:02:3f:cd:2f:85:b8:fc:34:e0:c5:4d:6b:
                    5c:f7:2e:ab:da:34:2f:b2:b6:9f:5c:f1:cd:76:d7:
                    26:52:28:2a:d3:b5:9e:98:c0:7f:4a:7d:af:4f:e3:
                    5c:f2:c1:f2:d2:7f:36:89:5b:85:64:99:9e:fa:ec:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8C:42:10:8A:13:05:D1:04:CF:D5:1F:28:01:87:DF:5F:93:E5:EA
            X509v3 Authority Key Identifier:
                keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:f7:58:8e:c4:b6:70:e1:3d:b1:9f:76:43:ee:2b:cc:6e:
         fe:06:cd:cd:5d:28:46:3b:a7:19:5d:48:ef:2a:49:4a:62:86:
         e2:d0:bc:82:28:c9:6c:fc:31:e1:ba:82:53:1b:26:8d:e0:1a:
         f5:4d:58:1f:76:ea:56:67:0d:ff:1e:c8:8d:4e:9c:79:39:32:
         4e:e8:bb:98:f4:3e:bc:99:9b:d2:8d:ac:f6:81:1b:b5:4a:93:
         fd:2a:83:eb:f9:55:f8:f8:c0:35:96:76:56:38:d8:67:c5:89:
         2a:3a:a1:29:84:1f:78:1e:45:ab:c1:e0:da:dd:07:b2:4c:b7:
         d1:c7:80:06:21:97:ba:37:2c:fd:5f:57:d1:a7:29:9c:25:43:
         3a:99:7f:69:c9:79:dd:6f:69:9d:91:53:ce:69:33:bf:1a:56:
         98:e3:72:3d:61:08:5d:88:b8:bf:0b:87:bb:61:d4:d1:73:cd:
         34:e1:44:b0:de:22:d8:c2:9b:43:f8:cf:05:35:15:ef:61:05:
         72:ab:cb:4d:dc:be:1b:ab:fc:7f:b3:b1:1f:4c:e8:e5:cd:4e:
         34:ab:bf:9f:97:30:94:fc:8d:b0:e4:95:8f:5d:da:cd:aa:6d:
         23:a0:47:65:40:c2:8f:f9:a1:81:4f:7e:72:a7:25:97:79:c9:
         f6:59:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:41:42 2026 by rpki-client