Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
File:                     NXR5DY34KztVHjtwJXG69VqemWE.mft (raw, json)
Hash identifier:          G8MnSllRNFiLulyLJdJRERx8cxyzQQEEkSxFVIpGMfE=
Subject key identifier:   AF:99:E1:36:54:9B:C3:5A:4A:03:2D:70:C3:6F:8B:16:A3:0B:E4:9C
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Certificate issuer:       /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
Manifest number:          0150
Signing time:             Sat 13 Jun 2026 05:22:53 +0000
Manifest this update:     Sat 13 Jun 2026 05:22:52 +0000
Manifest next update:     Sat 20 Jun 2026 05:22:52 +0000
Files and hashes:         1: NXR5DY34KztVHjtwJXG69VqemWE.crl (hash: kqux2dwJVFxBKx2pcLUlRMBiZrP+kA7G2psasGvVFHQ=)
                          2: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (hash: KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
        Validity
            Not Before: Jun 13 05:22:52 2026 GMT
            Not After : Jun 20 05:22:52 2026 GMT
        Subject: CN=6a2ce92d-f35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:d9:ee:15:52:87:b0:6e:24:7a:13:9c:b3:
                    2b:fa:c3:0d:65:25:13:f8:5e:10:ae:78:99:b1:6f:
                    1a:f8:34:c2:6a:37:87:63:2b:8e:ec:52:8e:2e:f6:
                    c6:b1:b6:9f:e8:fc:50:b7:c7:16:79:08:07:29:bf:
                    e3:38:95:4c:46:69:52:aa:cf:d0:cb:ea:ab:e0:e8:
                    1b:ee:b9:08:ba:82:9a:9d:dd:9d:4c:d4:fd:df:31:
                    8c:2c:65:d9:99:ea:61:90:af:ae:6f:c7:47:ee:1e:
                    d7:99:1c:55:e2:44:a8:d9:c5:f6:aa:7f:0d:bf:04:
                    b2:2f:09:f9:1a:74:17:81:0e:b9:29:c5:99:89:42:
                    bc:f9:a7:58:23:1f:33:06:b6:6a:8c:19:59:be:d0:
                    b3:df:59:b8:12:ee:c7:a4:95:33:d9:aa:da:c7:a2:
                    de:54:44:33:e8:ef:b9:6d:06:07:e0:6f:df:00:9b:
                    5d:19:e1:0d:e0:a1:72:9d:59:07:49:de:b5:86:8c:
                    82:e1:9b:ef:3f:65:61:01:1e:62:c6:6d:44:26:dd:
                    01:fb:f9:52:63:b7:34:0a:8d:21:14:27:2e:f9:77:
                    ee:ba:ab:12:05:90:a2:0d:33:fe:fc:b0:6e:53:17:
                    c1:22:99:7b:41:54:6e:5c:13:f7:49:ad:6f:f0:4a:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:99:E1:36:54:9B:C3:5A:4A:03:2D:70:C3:6F:8B:16:A3:0B:E4:9C
            X509v3 Authority Key Identifier:
                keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:7b:8a:74:cb:cf:cb:86:03:25:2c:31:a5:97:2f:af:4c:
         3b:1a:e3:42:8e:72:55:fe:cf:c3:48:47:17:2c:be:f0:d3:9d:
         a7:ce:5a:ee:44:01:22:04:b0:2a:15:38:5a:a9:7d:47:e1:4a:
         2d:03:96:97:e8:9c:54:84:f5:2c:f4:d7:f7:69:71:49:cb:6c:
         af:78:2b:17:26:92:75:9a:cf:dc:eb:06:05:38:44:9d:25:06:
         10:4e:df:0a:30:35:57:54:a0:6b:36:81:2b:d1:39:b8:bf:49:
         54:e8:13:c9:b0:d9:50:77:92:0e:99:e9:41:37:b5:88:65:55:
         3e:90:5c:65:a1:6f:22:c0:b6:57:6d:44:01:44:e1:58:2f:9e:
         90:86:60:a3:a3:1e:0f:2e:61:38:67:9f:b1:09:9b:5d:5d:b9:
         b9:90:e2:be:a5:0a:ff:e8:52:f5:84:9a:99:64:76:9e:ae:77:
         08:59:7a:b8:a9:1f:ca:36:a6:94:ba:c6:df:0b:08:22:b2:aa:
         c6:a4:29:f9:22:8d:37:c3:a2:50:96:09:5e:2f:aa:4d:e6:39:
         a2:0b:a0:42:1a:5f:c8:ec:04:58:a7:2e:c8:37:4b:53:fa:b0:
         15:3f:74:6c:fb:12:5d:13:11:56:2f:62:de:8f:b5:09:57:fd:
         aa:16:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:00 2026 by rpki-client