Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File:                     NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier:          zaZlDaSciEaRM2dAxOuVn27Mhc76TpoBJLOfbVmdk2E=
Subject key identifier:   4D:06:95:32:DF:DA:AD:46:8B:F4:07:02:C2:CF:EB:89:54:47:09:79
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer:       /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number:          0237
Signing time:             Mon 27 Jul 2026 04:06:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:06:17 +0000
Manifest next update:     Mon 03 Aug 2026 04:06:17 +0000
Files and hashes:         1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: lsGXOWSqgUU3SGGvB1PJLz+ynNZf4yyHbFro1N0Y+TY=)
                          2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 7y4oXNer6WsBPlefm0aDOGxXKn0I4ZDBbQhKmEfxFC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
                          rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
        Validity
            Not Before: Jul 27 04:06:17 2026 GMT
            Not After : Aug  3 04:06:17 2026 GMT
        Subject: CN=6a66d93a-22bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:4a:ac:56:c8:0e:82:0e:1b:4a:0d:53:22:
                    46:e9:83:12:79:d1:01:6a:62:82:e7:6d:11:7f:8c:
                    9d:42:d1:cc:09:9d:fe:7d:b0:b9:12:7f:eb:49:8f:
                    74:d9:27:62:64:1a:0e:6d:25:17:e6:9d:4e:bf:8f:
                    78:74:b6:5d:25:4c:8f:68:e3:a8:ab:7c:1f:c6:5f:
                    07:df:99:43:44:00:c7:6c:52:05:4a:cc:ef:15:3b:
                    42:b8:08:ac:f1:f0:e0:0a:08:c9:2a:c3:c1:96:c1:
                    13:16:da:ca:85:90:a9:87:99:e8:b7:85:36:c4:e4:
                    29:26:c5:15:94:f5:8a:12:84:a0:6d:29:f4:47:9a:
                    e2:9c:d9:4b:74:f4:cb:13:19:08:9f:2c:1b:71:3b:
                    25:0c:67:f8:2e:4f:5c:8a:1c:9a:b7:3d:ff:d8:46:
                    25:18:6c:df:3a:8b:de:56:81:83:c0:32:c3:f2:d4:
                    62:1e:ba:22:66:f5:2b:d4:d6:62:9a:08:c0:ae:69:
                    15:5a:49:04:59:ea:c9:06:50:de:e0:4b:50:94:0c:
                    73:4b:08:dc:28:bf:54:a3:de:e2:da:b1:ff:14:2d:
                    b2:98:8c:2d:7b:aa:54:0c:3b:e8:4b:fd:1e:02:9d:
                    3e:e4:de:4e:66:63:62:c8:a8:4a:75:cc:bf:c7:a4:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:06:95:32:DF:DA:AD:46:8B:F4:07:02:C2:CF:EB:89:54:47:09:79
            X509v3 Authority Key Identifier:
                keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:40:e6:1a:c2:0b:8a:69:fe:3c:6b:0b:a8:d1:28:00:72:d3:
         38:29:5a:0a:d2:58:df:a5:84:c6:16:f0:4b:66:e9:81:b2:24:
         f6:d1:bd:13:75:c0:58:c5:b1:f4:01:93:47:0f:e1:75:76:0e:
         d8:c1:2c:e7:9e:c6:e1:bd:45:98:a3:e9:19:8d:a4:42:67:03:
         f0:b6:3b:c2:2d:78:d4:4a:ea:3d:2e:a7:b6:a4:8d:db:dc:6a:
         ab:72:18:21:7e:0a:e4:06:30:a4:ee:86:a1:2b:a1:81:85:8c:
         64:ba:5c:c1:b6:a6:0a:08:d7:71:79:95:30:ec:0b:2f:3b:9b:
         70:41:c4:d5:b5:c0:f9:db:fb:62:1b:df:fa:83:8e:10:20:87:
         e2:e4:de:56:b0:46:7a:6c:a0:73:2e:25:eb:9b:36:dc:cf:85:
         84:ce:68:9e:e3:98:28:ce:a9:f7:06:68:a6:6e:46:63:df:93:
         50:20:b6:e0:3d:08:5d:cf:1c:cd:2b:4f:57:42:34:ab:72:80:
         03:dd:ef:22:1c:22:21:21:5d:ca:22:d9:7a:68:56:ca:d2:56:
         e4:3f:11:36:65:bc:96:77:f2:d4:e6:ea:be:7a:44:ec:a8:6a:
         0b:e1:f0:2d:bf:71:a8:53:79:6b:74:4e:e5:74:ca:cf:6f:e5:
         b3:c0:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:51 2026 by rpki-client