Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
File:                     NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json)
Hash identifier:          d5mamKz4P/6rBUs3+lwvBSFODyQjctlh9OtkrLBaaX0=
Subject key identifier:   DC:D7:F5:59:B4:56:87:B7:E7:D2:04:8F:85:4E:49:5F:38:8B:DC:20
Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
Certificate issuer:       /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Certificate serial:       03E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
Manifest number:          03DB
Signing time:             Mon 27 Jul 2026 01:36:47 +0000
Manifest this update:     Mon 27 Jul 2026 01:36:47 +0000
Manifest next update:     Mon 03 Aug 2026 01:36:47 +0000
Files and hashes:         1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: tP3OeU6adZzTDESaZ3vcltxDZUlg96dh6qJgOvz8WZU=)
                          2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: G58s+WAEg4C4LutKoAsZWg3Gtc1DpCuEN4PtWpnwCRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
        Validity
            Not Before: Jul 27 01:36:47 2026 GMT
            Not After : Aug  3 01:36:47 2026 GMT
        Subject: CN=6a66b62f-76c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:86:e7:7e:74:2b:bd:f2:25:7e:33:b0:5d:
                    2c:43:58:96:13:8e:b2:d7:8c:fe:a8:39:f7:54:bb:
                    9c:06:a7:b9:1a:ec:21:2e:61:1f:3a:51:f8:6e:d6:
                    b6:44:f6:9f:de:12:c8:29:d5:c2:90:c3:46:e9:f3:
                    bf:36:8a:9a:9c:7a:ca:3c:d3:1f:20:52:93:7e:a7:
                    fb:85:16:32:af:bf:39:66:43:5a:34:b7:7d:30:11:
                    5c:f7:71:cc:0f:80:15:8f:12:2b:91:66:f9:05:86:
                    1e:6b:64:72:e8:2a:9e:b3:ce:b8:a4:dd:47:16:89:
                    5e:f6:60:3f:f7:bb:19:dc:8e:a5:bd:c8:d1:35:9b:
                    c3:b8:ef:3b:50:64:71:fc:61:1c:0a:a5:cf:32:75:
                    09:cb:63:e7:0c:0b:2f:db:d9:4a:2a:fe:f9:c1:60:
                    1c:99:f8:b1:c2:76:74:08:1c:3d:e7:2c:8d:9f:c2:
                    91:54:1b:83:68:6b:8f:b5:0b:e9:c3:ba:0f:ae:12:
                    f3:5d:09:f9:15:da:2d:8b:00:a9:ba:17:1a:65:79:
                    1c:b2:d9:37:09:94:65:05:24:50:96:b2:9a:69:1b:
                    13:a6:bf:92:45:b3:cd:de:12:f1:82:77:80:91:78:
                    72:46:df:70:0c:49:53:d1:74:50:f3:fe:73:a9:64:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D7:F5:59:B4:56:87:B7:E7:D2:04:8F:85:4E:49:5F:38:8B:DC:20
            X509v3 Authority Key Identifier:
                keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:82:48:6b:02:f7:8b:ca:50:8f:71:4b:e6:31:fb:3f:95:39:
         84:ee:71:bf:b6:a2:d9:78:23:c5:17:86:02:74:0c:ef:bb:82:
         55:98:8d:9c:b8:84:bd:af:1b:fa:06:7a:11:f0:1d:e3:d7:34:
         a3:f7:b6:c0:b2:06:e2:db:36:3d:64:41:9f:bd:aa:66:dd:9b:
         94:01:c7:1d:8a:2c:36:88:3a:14:ba:e7:64:73:01:29:7e:a9:
         be:70:78:0a:3b:43:52:97:49:ca:fb:90:27:d3:bf:cd:f5:b8:
         f2:8e:ca:e2:90:ea:5a:c0:fa:ef:61:12:2f:ee:a1:0e:2b:51:
         1c:e0:50:1f:10:0e:45:07:35:11:a9:4e:cb:2b:f8:b9:a9:14:
         23:db:8f:f7:90:a4:e2:0b:4f:7c:df:3c:5d:22:7d:6e:9d:8d:
         08:28:2f:78:0c:06:40:0b:fd:ad:ac:f7:2e:79:11:30:b3:01:
         96:13:e3:77:ca:7c:ae:96:3f:2f:b7:dd:d5:41:48:5b:04:ce:
         d3:2b:74:6a:ff:6c:4e:e5:82:97:ad:4e:6f:11:a8:b7:85:3c:
         e1:e8:78:b4:0a:11:82:06:bd:97:57:17:bb:e5:56:38:18:38:
         46:fb:4b:d1:3c:28:1a:5d:a0:78:33:db:f4:3c:b2:9a:7a:3a:
         87:0e:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:33 2026 by rpki-client