Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
File:                     NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json)
Hash identifier:          IC8JE8NDZQ8Brc3KE53C2Pw5uGc4wUoFspu0fLV3gSE=
Subject key identifier:   B1:FE:59:A8:81:B4:19:BF:2E:9E:82:55:BE:24:8A:67:87:E0:91:6C
Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A
Certificate issuer:       /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A
Certificate serial:       129A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
Manifest number:          1268
Signing time:             Tue 28 Jul 2026 17:13:06 +0000
Manifest this update:     Tue 28 Jul 2026 17:13:06 +0000
Manifest next update:     Tue 04 Aug 2026 17:13:06 +0000
Files and hashes:         1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: 8Bop9cWLov7leKeW6fcl9LX9dLA50dvABUqG8HsjS4g=)
                          2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl
                          rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4762 (0x129a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A
        Validity
            Not Before: Jul 28 17:13:06 2026 GMT
            Not After : Aug  4 17:13:06 2026 GMT
        Subject: CN=6a68e322-7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:5c:b1:3f:90:5d:17:d8:c3:99:1c:d6:4d:
                    72:c7:df:c4:28:60:df:50:3f:f5:1a:e1:92:bf:26:
                    7f:14:71:f8:3c:cc:40:66:c2:85:be:bc:ac:82:ce:
                    38:6e:28:78:9d:80:1a:1b:f5:cd:99:4a:db:d0:a3:
                    fa:56:4e:e8:3c:2b:66:51:e4:5d:d9:c5:a3:4b:f1:
                    e7:34:34:9f:26:42:19:df:2c:d8:83:c7:f6:1d:1d:
                    0e:0e:88:03:8e:f1:6f:4f:46:fe:35:28:2b:7c:e6:
                    20:7c:af:8d:6c:0a:a8:25:80:df:ee:a7:08:61:59:
                    bd:95:66:81:ab:b6:aa:90:72:4f:07:3c:37:0b:05:
                    7b:90:d4:15:9d:ec:c8:5b:e4:4c:92:9b:4f:af:9a:
                    93:79:05:5c:26:b1:35:32:1e:60:32:9d:2e:59:fa:
                    38:41:51:1a:87:61:2f:ea:21:31:7d:b6:9f:ea:f4:
                    80:f6:4f:70:c8:3d:7e:d8:e2:71:4a:c9:ea:dc:64:
                    78:66:88:b8:79:e9:6a:f7:95:c8:fa:75:38:f6:4a:
                    d8:fd:fc:f5:23:26:84:3b:a3:24:2c:45:cf:2b:89:
                    44:24:92:c0:08:b3:f4:97:79:1c:4d:40:70:3c:4c:
                    e9:85:bd:76:71:8b:d2:91:55:5d:95:58:e8:4f:84:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FE:59:A8:81:B4:19:BF:2E:9E:82:55:BE:24:8A:67:87:E0:91:6C
            X509v3 Authority Key Identifier:
                keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:e5:dc:e0:ef:57:ba:9b:bd:23:5a:41:3e:fe:d8:a1:eb:
         87:c8:97:9d:a4:45:fb:45:97:78:af:b0:a8:70:60:8d:cc:4e:
         a9:29:b7:49:a9:f4:64:2a:e0:0e:e9:cd:f9:41:d8:c1:c7:f4:
         66:3d:2a:27:ab:6f:fd:9f:32:c9:67:6c:c8:66:cc:3e:70:cd:
         1a:a4:8b:7b:1c:46:23:39:bb:f4:92:5a:2a:5e:58:58:6e:be:
         8e:d4:89:28:59:c4:64:44:04:aa:b3:7f:3c:9e:1a:80:8d:25:
         bb:a4:4b:7c:2a:f0:fc:ae:b1:c7:f6:bb:42:01:d9:f6:6d:fb:
         b4:e8:ee:1f:f6:1d:6a:b7:f9:7e:24:75:0d:e1:4b:aa:b1:be:
         b5:a8:80:d8:11:58:02:f7:c2:51:3c:87:8c:15:cd:4e:07:c8:
         5b:e8:34:57:77:89:b6:98:d4:04:19:42:26:95:7d:b1:64:e5:
         5a:f8:20:47:59:ae:05:4a:ae:85:b9:1f:ec:7a:71:23:03:7f:
         a1:44:ab:c3:a5:04:a2:cb:5c:0c:73:5f:9b:32:98:2a:71:37:
         c3:39:79:a9:2b:50:92:61:3c:60:00:26:a5:dd:ac:ea:a6:75:
         8d:be:e5:0a:99:c9:70:4d:ff:03:98:96:bd:35:49:d4:01:47:
         23:55:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:33 2026 by rpki-client