Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File:                     NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier:          qrxUZrmjYMxea9nn4izvey6CffYSAaJPOIau06ExBh8=
Subject key identifier:   7D:D8:EC:B2:36:49:6F:6E:6A:23:94:B0:B8:6B:3D:67:78:65:07:90
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer:       /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number:          C2
Signing time:             Sat 13 Jun 2026 07:03:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:03:20 +0000
Manifest next update:     Sat 20 Jun 2026 07:03:20 +0000
Files and hashes:         1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: 15FG/zYwVtzD3ekLhxXc7kZ26zS+g+28jddJ0wuS6pA=)
                          2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: FsNpTkM6+3f8KZot7Stoju/dwRXl0OyRylfjVSJP04M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
        Validity
            Not Before: Jun 13 07:03:20 2026 GMT
            Not After : Jun 20 07:03:20 2026 GMT
        Subject: CN=6a2d00b8-f692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:dc:fc:00:40:71:91:49:60:85:78:12:f8:
                    aa:71:4f:a6:db:84:db:7b:0c:19:d9:93:96:08:fd:
                    13:40:af:7b:0a:92:e9:eb:da:b3:c8:58:8d:fe:2d:
                    e8:41:3e:d6:01:16:95:76:51:71:e8:98:07:0f:4f:
                    ac:c8:cb:fe:68:04:a9:90:4c:f2:17:47:c4:0c:77:
                    f5:97:2f:c8:a4:b8:99:c1:14:3f:8c:7f:40:9f:32:
                    fd:d9:d3:d2:4e:7b:84:86:fa:c8:54:dd:23:f0:84:
                    39:63:b5:76:5a:55:a0:eb:7d:1d:13:3f:f1:18:8f:
                    5f:b1:0f:e8:57:78:c7:3a:ce:a5:ef:e6:1d:fe:d4:
                    b2:94:fc:b4:b2:72:aa:01:b0:48:07:a3:8a:83:eb:
                    0a:bd:01:65:19:52:80:85:db:1e:80:76:61:d6:eb:
                    b4:42:38:70:e9:4e:b2:a8:f8:23:0b:75:0c:ba:e9:
                    cb:42:69:85:11:01:0f:dc:19:e5:c4:13:a3:bf:a4:
                    28:ed:55:48:7b:c2:6e:2e:5a:34:1c:97:09:68:a1:
                    bf:7b:4e:d3:0c:16:9a:c7:76:9a:0c:35:0a:83:ee:
                    4e:47:3e:bc:c5:b0:67:ab:bb:5c:6c:c4:bc:37:68:
                    27:02:7c:b7:8b:8a:b7:31:28:72:d4:db:ed:bc:74:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D8:EC:B2:36:49:6F:6E:6A:23:94:B0:B8:6B:3D:67:78:65:07:90
            X509v3 Authority Key Identifier:
                keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:9d:a4:97:de:02:9c:0f:ee:d7:ef:2c:72:cc:00:23:97:
         cc:e1:b9:18:ed:4b:3c:8a:9e:94:8d:37:08:4b:ae:79:ac:6d:
         c4:bc:32:72:46:b8:89:35:8f:49:fd:7d:64:bb:f1:ea:94:c9:
         2e:b6:c6:a9:e2:84:b9:ee:99:54:a7:ad:5d:2b:f2:f7:bc:87:
         f5:62:0a:2c:96:5a:44:42:f6:3d:96:2a:44:1e:37:3d:c1:b6:
         00:d6:08:bb:21:c7:da:e6:70:e3:1a:73:10:72:9a:6e:48:f4:
         ca:8a:1b:c4:5e:be:26:9d:c4:36:ac:1b:ed:94:3d:d3:2d:3e:
         05:ee:7c:0c:32:9b:3c:b4:de:33:af:5d:3e:41:27:d0:45:29:
         49:d7:7a:bb:e6:b3:81:59:0c:fd:db:84:13:cd:be:49:7e:2e:
         e4:20:70:54:2f:b0:ad:2f:36:ef:2e:20:2b:e8:fc:c3:c4:23:
         7d:ab:61:fa:53:02:ff:d2:7e:b7:10:da:2b:f7:05:14:84:b5:
         32:75:55:d0:b6:dd:ff:d9:84:d9:f6:99:d7:e6:51:32:a1:b7:
         07:cf:5c:e4:7e:ef:e9:92:47:1a:7f:95:e5:a6:4f:ba:32:06:
         93:cc:49:11:5d:ee:61:05:04:b9:c4:b2:58:eb:67:96:05:55:
         c5:af:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:27 2026 by rpki-client