Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File:                     NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier:          7P5eXazjoU0pYzDnzZxKlroD27YJgkugrPCq1GMZAbs=
Subject key identifier:   F5:42:A4:CC:EF:4D:0A:FA:36:B4:13:06:40:54:1E:39:87:6E:CC:C6
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer:       /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number:          01B1
Signing time:             Wed 15 Apr 2026 03:46:31 +0000
Manifest this update:     Wed 15 Apr 2026 03:46:31 +0000
Manifest next update:     Wed 22 Apr 2026 03:46:31 +0000
Files and hashes:         1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: akB2DYcWCwiaLX3a/YV375cPMW67YuZxYEclIRt27Q8=)
                          2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: XTrd0la2N5I2OpA4IDj9faZYSv0BZWTOPeQogP74+8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 03:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
        Validity
            Not Before: Apr 15 03:46:31 2026 GMT
            Not After : Apr 22 03:46:31 2026 GMT
        Subject: CN=69df0a17-99b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b3:8c:e6:00:e1:e0:a8:63:07:0a:b8:72:5b:
                    2e:40:19:09:f7:34:2c:3a:70:43:76:2c:d3:74:a5:
                    5a:4d:fb:5f:5f:9b:9c:a9:79:97:24:6f:47:d6:10:
                    a7:1d:de:8c:b2:88:b2:b0:e9:93:99:32:22:e4:3a:
                    8a:37:b9:5f:2d:40:4f:36:d9:29:f4:49:25:0b:05:
                    71:05:38:e9:eb:d7:38:a2:41:f8:a1:da:54:e0:1b:
                    59:24:89:7d:b0:a8:94:69:1e:da:c3:a9:d1:9a:5a:
                    6c:89:bc:a1:e2:f3:eb:87:74:e4:ef:de:58:ed:04:
                    f3:45:4f:c8:0c:b4:be:9e:b7:b9:06:94:ad:5b:9a:
                    0f:6c:80:08:4f:6c:22:8b:58:c2:7e:e9:b8:42:fe:
                    f6:57:8c:b4:a7:9e:ef:cd:01:a6:af:d3:30:7e:12:
                    93:d0:b1:d2:7f:d8:65:a5:0c:d3:6a:59:05:5d:6e:
                    fa:4a:c0:cc:bb:fd:30:98:ff:fd:cb:ee:3f:95:f8:
                    a7:56:6b:ca:1c:61:ea:95:be:5f:6c:65:9c:34:d4:
                    4e:a6:81:01:8a:d1:dc:5a:cc:c3:3e:11:a5:1c:8b:
                    08:7b:cb:10:a4:29:f6:17:99:3e:a9:26:30:97:d7:
                    1e:9c:db:ce:0f:1d:e3:d7:3d:95:19:fd:9c:65:df:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:A4:CC:EF:4D:0A:FA:36:B4:13:06:40:54:1E:39:87:6E:CC:C6
            X509v3 Authority Key Identifier:
                keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:ea:0e:0a:99:0f:92:c5:b4:bb:e2:86:90:49:f4:aa:63:
         ec:bc:65:82:bf:f6:8c:35:7f:62:2a:05:56:24:40:29:b7:05:
         49:13:8d:f9:bd:94:b9:6a:36:b1:e4:cc:a7:d6:50:75:dd:cf:
         d2:c1:9f:cb:42:ba:08:7c:e9:89:f8:a8:71:88:62:a1:61:42:
         c9:79:0d:dc:e3:2f:82:ac:27:83:be:34:88:a0:d3:d3:f5:74:
         c5:7b:3f:af:39:87:79:25:7e:ce:7d:80:b3:bb:7a:fa:ca:9f:
         ab:b3:fe:2c:9e:c9:90:f7:c3:9e:b6:a1:c2:69:0a:47:c8:fd:
         0f:96:21:3b:b6:35:0f:dc:34:22:93:2d:2a:b0:fd:d0:9b:f5:
         71:3b:9f:b7:ec:7c:ea:1a:90:9b:4a:00:43:71:36:8d:72:0f:
         a1:cf:2b:6d:51:a5:af:8d:ed:ac:63:3b:d4:d5:0f:76:5c:c9:
         9a:50:d3:2a:71:6f:93:4b:ee:cd:c8:6a:89:6a:ab:5d:3c:2f:
         4d:41:a5:3c:0d:fd:43:59:69:56:fd:46:b6:26:d6:25:ca:46:
         cf:c3:d7:eb:be:64:6c:4c:77:e7:0a:3f:ff:43:fb:80:a4:94:
         29:fb:6d:52:a9:9c:d9:d4:c4:48:e5:3d:5a:5b:80:f7:d7:9d:
         06:0c:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:26 2026 by rpki-client