Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
File:                     nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json)
Hash identifier:          aHXjY2d1RcKK7Y1ezjhviTif74NgQq2fG3XffibU8Kc=
Subject key identifier:   D2:16:D6:85:AC:F6:8A:C1:BC:C8:94:3C:20:FA:D2:AA:81:8C:F0:F9
Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
Certificate issuer:       /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
Manifest number:          0882
Signing time:             Thu 16 Apr 2026 20:30:26 +0000
Manifest this update:     Thu 16 Apr 2026 20:30:25 +0000
Manifest next update:     Thu 23 Apr 2026 20:30:25 +0000
Files and hashes:         1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: c2u0VnFEf0Gofw6gJYORvVF1Emg6rrXuRpc14+Q2n5A=)
                          2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: LUaN4gZzeCu+6hLjhK4iqrKCCaOku7QO2IiWVTIsojE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
        Validity
            Not Before: Apr 16 20:30:25 2026 GMT
            Not After : Apr 23 20:30:25 2026 GMT
        Subject: CN=69e146e2-d002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:eb:76:de:bc:df:1c:d5:b0:a0:55:88:ce:
                    a3:c5:22:96:4c:16:be:61:97:c7:18:03:d6:71:eb:
                    1c:71:ac:74:c1:a2:a9:d4:dd:9e:00:2d:0e:10:04:
                    9c:40:ef:40:0c:59:1f:73:c6:45:7c:4f:60:6d:4f:
                    d1:63:b8:fc:14:88:59:ac:e6:81:7b:4a:9e:d2:0b:
                    ac:d4:27:c4:7c:41:44:7d:cf:a6:45:d9:08:81:87:
                    01:0d:86:f4:40:61:d3:d5:c4:a7:aa:8d:cc:f9:1c:
                    ff:ee:ae:6c:2c:2d:0c:f0:cf:13:66:97:2a:76:58:
                    7f:99:d3:9a:89:9f:4d:5e:db:e2:57:8d:20:c3:8a:
                    d0:a5:c2:d6:d2:ab:18:86:c1:21:0e:bb:60:0a:6a:
                    f3:13:09:7b:91:00:cb:1f:7d:6c:90:86:dc:8a:47:
                    4c:e5:37:d7:9a:98:d1:f0:04:ad:1a:21:2a:10:1e:
                    a4:16:b1:45:95:42:8c:fb:3a:43:8b:41:bb:9e:dc:
                    84:e7:fc:61:a3:7c:a6:d0:52:b0:05:3a:7b:5d:c9:
                    ea:eb:40:37:db:92:0c:5f:a0:5c:61:bc:c5:f5:6f:
                    f3:1f:4c:ef:c8:56:0e:56:0e:6d:25:02:ed:55:51:
                    fe:f7:c7:80:01:c6:3f:62:7c:81:2f:37:27:1e:a6:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:16:D6:85:AC:F6:8A:C1:BC:C8:94:3C:20:FA:D2:AA:81:8C:F0:F9
            X509v3 Authority Key Identifier:
                keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:2e:4a:c3:71:8b:55:38:08:a1:52:6f:76:3c:cb:6f:32:
         66:6a:d9:9c:b5:8c:f8:a6:8f:1a:db:3c:f7:2f:01:84:19:02:
         93:93:c8:15:5e:ad:88:f7:f8:74:11:35:b9:e8:58:69:9d:8e:
         be:c2:ed:fd:4d:40:b5:ed:bf:ff:e3:a1:82:19:65:d1:a1:96:
         91:db:49:b8:ed:fc:21:1f:15:2f:3e:ad:00:89:cd:c3:73:b9:
         58:88:8f:af:60:fe:96:d5:f5:76:49:93:cd:a0:fc:7a:fa:d0:
         19:3e:34:35:71:8b:5c:12:4f:c2:8c:35:cf:66:19:3b:c8:4a:
         21:08:b6:c3:b6:04:54:46:74:0d:c9:4c:ba:74:cf:24:e6:02:
         4a:f4:2f:da:ea:bc:f4:40:59:61:3c:b9:cf:45:a1:08:eb:dd:
         17:5e:bd:ac:3a:86:ea:88:38:bc:ca:de:f7:14:5b:ba:d8:7c:
         04:39:84:1b:ff:69:ef:ba:4e:07:06:5f:5d:d5:79:14:c6:4e:
         01:e5:43:d7:a9:e9:44:cd:17:5d:26:7d:d1:b9:24:4e:46:88:
         7a:4c:4e:ac:3b:fb:e2:b4:a7:a3:f9:a2:c9:c8:c8:d1:9f:90:
         d6:47:b3:0a:f9:05:09:ac:2a:78:65:39:34:55:b1:3e:ec:2f:
         46:19:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:16 2026 by rpki-client