Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
File:                     nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json)
Hash identifier:          GNz2+hSEVjGF2w/Tokkx3KTzTHcMAIaN4ESaSAyEyrQ=
Subject key identifier:   54:3B:7E:64:DA:00:DE:03:A8:B2:73:03:2D:C6:CE:F4:DA:C5:FC:13
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Certificate issuer:       /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial:       0A8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
Manifest number:          0A7B
Signing time:             Tue 28 Jul 2026 19:56:25 +0000
Manifest this update:     Tue 28 Jul 2026 19:56:24 +0000
Manifest next update:     Tue 04 Aug 2026 19:56:24 +0000
Files and hashes:         1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: /66cBZE8LvTxM6iBr8oM4qXGtZnMd4hrFECS/EUcKJA=)
                          2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: rUdJq8ubToO+Jf95JCEVcx4+sMHgtZ/vn08eLBUGR54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
        Validity
            Not Before: Jul 28 19:56:24 2026 GMT
            Not After : Aug  4 19:56:24 2026 GMT
        Subject: CN=6a690969-5252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:48:5a:02:0e:3e:08:51:93:b0:c8:a6:e0:
                    ad:a7:bd:88:e0:47:c9:06:71:e6:f3:6d:cf:6a:78:
                    0c:07:bc:21:b2:38:10:1a:19:ec:5a:8e:10:44:9e:
                    36:50:23:3b:a0:44:6c:8f:d8:e3:fd:ce:28:90:7b:
                    c5:d8:69:bd:78:51:b2:e1:6b:38:1f:5c:15:b8:1e:
                    9b:40:79:c0:05:98:d9:1c:6e:4f:2c:18:33:32:fa:
                    29:ea:fe:31:4b:78:34:c6:d2:a1:41:ea:26:22:05:
                    d4:27:31:40:12:dd:34:c8:b1:d0:90:d9:0f:80:fb:
                    66:62:42:18:ae:d8:ae:60:c9:34:3d:c4:1c:37:cc:
                    e0:f7:6d:a2:f4:6d:d9:a9:b2:c1:0c:4d:bc:38:de:
                    e2:77:f2:05:cc:3e:ad:28:dd:93:15:03:b1:16:2c:
                    76:e0:89:75:9b:70:f3:61:78:ae:3b:57:fc:fa:e8:
                    ec:b3:60:a6:b5:30:00:a0:1e:74:9b:92:93:33:0c:
                    4d:e3:df:c7:49:31:08:fa:fe:12:55:91:54:42:03:
                    6f:75:2f:15:79:14:e0:d8:c0:be:43:4f:ac:65:a8:
                    f9:5f:51:e3:0b:a7:1f:bf:79:44:d2:3a:b9:87:e0:
                    54:2c:e7:ab:05:b9:af:f6:9e:1e:7e:f7:91:ce:66:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:7E:64:DA:00:DE:03:A8:B2:73:03:2D:C6:CE:F4:DA:C5:FC:13
            X509v3 Authority Key Identifier:
                keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:f7:cf:d4:8a:5e:be:48:90:db:48:79:b1:c2:a5:2a:73:
         06:5f:1f:5b:bd:64:50:a3:ba:5e:da:91:4f:f6:2a:ca:65:cd:
         bc:fc:e9:65:64:8d:6f:b1:09:e2:f4:6c:68:e6:c1:54:af:14:
         21:41:89:47:15:ca:f2:5b:8f:1f:35:47:a8:f1:d9:58:b9:fb:
         44:f8:a6:c1:9f:62:e3:b6:80:6a:89:ec:1e:92:99:c0:54:31:
         95:85:ce:16:79:1a:b3:f1:5c:f5:ce:d7:ea:23:73:7e:e5:45:
         51:41:46:45:43:a6:50:f0:d5:dd:db:e2:ad:5f:59:80:8e:2c:
         f0:6b:01:4b:92:05:a1:f9:9b:2a:cd:22:ac:7d:68:f2:37:ba:
         9b:22:33:d6:ef:47:06:d6:98:b6:3a:b0:b2:93:63:75:47:42:
         6c:78:60:f1:bd:f1:de:02:a0:ab:81:c3:e5:da:4b:e5:fd:96:
         74:ac:8a:13:93:a5:96:8e:93:74:b7:9a:91:3c:1f:84:7d:ab:
         ae:a9:63:e7:36:8f:1b:3b:60:1f:d6:29:db:42:cc:65:d9:e1:
         37:1d:d3:02:e3:0e:e4:c5:6c:99:69:2e:f1:ad:92:bc:11:a3:
         b4:19:a3:ea:93:30:0f:65:4a:df:23:8f:ea:14:ab:32:ea:96:
         34:ee:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:12 2026 by rpki-client