Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File:                     NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier:          GCTGXVpDJBETkKMrDhzKWCq630fV4CbCojJzcG4KCGY=
Subject key identifier:   3D:7D:CC:3A:72:99:85:B8:83:E4:06:8B:87:BF:81:B7:5D:E2:A2:08
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer:       /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number:          01ED
Signing time:             Mon 02 Mar 2026 00:30:13 +0000
Manifest this update:     Mon 02 Mar 2026 00:30:12 +0000
Manifest next update:     Mon 09 Mar 2026 00:30:12 +0000
Files and hashes:         1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: G3z0S3f7wWBV5mfNQOzyrFzjMOsFsVcSKcvgXJL7kPM=)
                          2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 7y4oXNer6WsBPlefm0aDOGxXKn0I4ZDBbQhKmEfxFC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
                          rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
        Validity
            Not Before: Mar  2 00:30:12 2026 GMT
            Not After : Mar  9 00:30:12 2026 GMT
        Subject: CN=69a4da15-cbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:89:69:e8:f5:ed:c1:0b:e9:dc:05:4b:4b:
                    04:43:61:77:24:99:e2:80:ef:25:a5:45:fe:f6:14:
                    3d:f3:66:54:c8:47:1b:79:ad:18:85:d8:d4:22:e6:
                    f9:3e:76:30:11:fa:18:2e:7d:02:e7:d3:1c:47:df:
                    5b:8b:ea:1f:4b:df:29:2e:0e:71:b3:a8:35:62:6c:
                    63:1b:fa:84:8e:5f:f4:60:80:03:16:10:2f:47:20:
                    6f:73:d3:bd:46:46:a9:9b:67:28:dd:16:8c:e8:c2:
                    40:5a:f1:30:ac:80:44:f5:94:9b:eb:da:6b:d3:06:
                    7b:b4:84:a6:d7:68:17:00:7c:6b:c1:a8:7c:b7:4b:
                    dd:54:d2:a7:39:7d:cf:66:cb:c1:bb:ec:35:ae:9d:
                    b0:f6:b9:c3:39:64:ed:44:e7:09:ba:64:dd:06:d7:
                    11:2f:3e:a5:91:95:ec:a7:5d:75:3e:23:c6:f1:04:
                    c5:56:e5:ad:e9:6b:9c:1f:4a:a1:57:53:e2:36:86:
                    59:ad:a1:48:06:08:cd:4f:8c:ee:45:4c:6a:2f:42:
                    57:e6:76:b6:7e:a2:14:2d:58:d3:0c:cc:7d:53:8a:
                    76:76:a4:d5:1d:fe:7c:c8:14:54:72:04:88:22:f2:
                    08:e4:f7:47:b0:a5:6c:77:61:51:8d:12:71:b4:54:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7D:CC:3A:72:99:85:B8:83:E4:06:8B:87:BF:81:B7:5D:E2:A2:08
            X509v3 Authority Key Identifier:
                keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:e2:84:5e:8f:c7:08:60:5a:4f:01:f7:7e:26:43:48:a8:
         b9:37:1d:f7:39:fa:67:9c:63:cd:b9:96:13:9a:26:59:26:6a:
         e0:6f:87:82:7a:a5:8f:cd:b9:e5:79:93:f7:32:6b:a8:51:e6:
         11:60:f9:65:d1:6e:10:b8:d6:23:32:d1:4a:c0:23:2b:ef:46:
         81:b4:12:5b:8d:f2:5a:ff:77:76:6e:d4:15:d7:e3:80:05:16:
         f4:b5:a2:93:88:fa:fe:d6:c9:1e:e2:3b:9e:45:03:70:40:cd:
         7c:e4:54:06:fa:1d:fa:78:af:74:79:90:f3:6d:ac:dc:23:1d:
         9f:9f:6f:51:6f:10:00:ad:f5:a7:99:fd:75:69:b4:52:30:8b:
         d1:e8:e1:e5:73:0b:a3:51:87:1b:19:1b:b0:1c:a5:bf:c5:e7:
         66:35:67:41:de:77:45:ec:bb:9c:b9:b5:da:fe:9f:c5:49:a1:
         83:15:7a:f9:e0:5b:5a:97:7f:8a:34:5b:91:14:36:34:e2:7f:
         4c:b9:68:92:bc:f5:f6:fa:47:b5:d8:3d:67:2a:bc:ba:3d:5e:
         41:2a:63:18:ff:40:06:8f:f1:ce:98:66:3b:86:37:5b:20:7a:
         3d:18:86:70:06:13:90:89:aa:f2:6c:51:8a:17:11:8a:a1:e2:
         e4:ce:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:00 2026 by rpki-client