Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
File:                     nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json)
Hash identifier:          fhpZZcfy4coyolmEUSyWB5FUF7pJHdMuLN3rzSHVWDs=
Subject key identifier:   C9:1C:01:E5:A7:9F:B1:DD:CF:39:8C:BE:14:AE:F9:F3:95:0A:44:F2
Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
Certificate issuer:       /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Certificate serial:       086F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
Manifest number:          0868
Signing time:             Mon 02 Mar 2026 01:13:59 +0000
Manifest this update:     Mon 02 Mar 2026 01:13:57 +0000
Manifest next update:     Mon 09 Mar 2026 01:13:57 +0000
Files and hashes:         1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: Dfpcnesl/iL16i8bN4+9MvjuhgAS+ZlrDVMdwHFlX4E=)
                          2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: w9oY9c8wL2GIkYPTpV6Vy1fU7WK/sA5zrzu7eI6nJ9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
        Validity
            Not Before: Mar  2 01:13:57 2026 GMT
            Not After : Mar  9 01:13:57 2026 GMT
        Subject: CN=69a4e456-6f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a4:cf:5e:0f:e8:04:6e:e1:cd:25:47:2e:41:
                    a5:66:86:4b:fa:f9:26:bc:62:f9:6c:9a:c9:95:cb:
                    83:3e:47:24:f4:91:6f:e7:b1:4b:21:12:71:b3:ef:
                    c4:97:9a:aa:dc:7c:55:df:a5:b8:aa:ee:5d:fb:44:
                    07:b3:1b:32:2c:28:0a:87:76:48:b8:61:22:5b:91:
                    d9:d8:cf:0f:5a:0f:b1:be:e9:49:64:dc:06:b2:c5:
                    02:d2:91:34:a5:10:cb:3c:f4:19:a3:11:ee:1e:fd:
                    a8:a3:d1:b9:8e:23:0d:a5:78:33:58:7a:75:e0:f8:
                    63:2f:85:86:ca:8a:5d:78:b2:d8:8a:4c:61:05:b4:
                    a0:a5:4f:fa:28:82:9c:46:7e:e2:e1:1a:ec:d7:50:
                    02:7d:3b:4f:08:aa:8b:66:2a:0c:95:9c:68:ee:4c:
                    16:7e:8f:52:e6:0a:c7:36:03:cb:45:cc:b5:47:77:
                    fd:b7:0e:5e:b2:2a:b4:ec:a8:f7:65:a3:4e:5b:93:
                    c3:fc:b4:5d:d6:6e:87:a1:6d:40:d1:c4:89:22:38:
                    eb:6a:35:7f:e8:b8:0f:a0:05:7d:f2:ed:15:ae:ce:
                    26:6c:1d:ff:75:02:0b:c6:92:8d:2c:b9:a9:5b:e1:
                    89:99:a1:7c:5d:98:4d:17:55:9a:67:32:a8:a3:27:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1C:01:E5:A7:9F:B1:DD:CF:39:8C:BE:14:AE:F9:F3:95:0A:44:F2
            X509v3 Authority Key Identifier:
                keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:55:5d:5d:c7:34:0f:ad:9b:96:58:77:51:27:c3:d0:b5:4e:
         72:bb:73:c3:d3:69:e6:7f:f3:bd:24:62:77:90:1a:7f:b4:7b:
         53:6c:4e:41:76:71:74:db:7f:72:24:d4:ac:42:1e:5b:47:b3:
         32:52:30:9e:df:c7:8b:2a:b6:42:de:04:62:eb:f9:20:b2:03:
         54:2a:62:9a:61:d3:f9:78:30:b0:99:60:85:c2:75:20:03:4d:
         92:61:6f:5b:57:cc:ee:7b:7a:ee:70:a6:92:a8:8c:b1:74:fa:
         63:30:12:27:38:d9:77:c6:d6:4c:19:21:7d:cf:de:fe:6e:56:
         be:74:70:2f:45:7f:b1:b4:48:58:86:87:88:34:e9:e1:20:53:
         27:95:07:11:88:c9:c4:8b:b3:29:44:90:76:a4:b4:bc:ce:44:
         1e:b2:db:55:5f:4a:69:34:30:50:ec:e3:66:f9:53:85:41:65:
         da:00:dc:c8:01:a5:33:d8:cc:bb:8b:d1:81:aa:15:2a:44:9b:
         bb:41:90:97:6f:12:bc:6e:42:28:43:f8:8e:36:ef:e7:12:6d:
         bd:c6:0c:08:cb:81:1c:25:f1:ff:41:f5:ea:fc:aa:68:23:32:
         1d:ea:e1:cb:ff:cb:5d:7a:79:92:92:32:78:73:9f:d5:23:2f:
         fc:9b:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:59 2026 by rpki-client