Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File:                     NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier:          JeC23nCgR/YQUOtVzgsY/yBnWZtfZgwCPrTWK7FZ6Ac=
Subject key identifier:   4D:09:0B:08:F9:AA:E5:95:A7:6A:21:61:DC:4A:E9:41:4A:7D:1A:B4
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer:       /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial:       0454
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number:          044C
Signing time:             Thu 05 Nov 2026 00:27:29 +0000
Manifest this update:     Thu 05 Nov 2026 00:27:29 +0000
Manifest next update:     Thu 12 Nov 2026 00:27:29 +0000
Files and hashes:         1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: xzKjxpBzVxjbsxyPy/9W7e3mv2OA5ZCD/cA4565QfS4=)
                          2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: OhAzKBerxXTp038deHSgx6f20NkMAUKF1iAsoKTjbdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 00:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
        Validity
            Not Before: Nov  5 00:27:29 2026 GMT
            Not After : Nov 12 00:27:29 2026 GMT
        Subject: CN=6aebcd71-23e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:bd:4c:bb:1e:65:61:8b:f0:99:0c:3b:af:
                    13:5d:07:ee:21:a0:38:42:4c:30:e9:99:15:0a:f9:
                    81:2f:0d:d0:70:dd:fc:14:ae:ea:94:4b:b4:05:7e:
                    d6:38:f8:cd:95:ae:5f:3c:e1:ce:17:1b:54:c9:71:
                    c6:5d:69:ff:d8:b2:0f:4b:eb:43:86:26:5c:ba:b9:
                    c2:d4:ee:8c:d0:9e:37:0e:a8:d6:7b:56:75:b3:4c:
                    4f:85:75:71:65:0d:9b:9e:c3:a8:9d:cf:34:b8:11:
                    0e:8f:67:e3:10:e4:07:de:9b:61:59:e7:01:18:c3:
                    ff:8a:7e:c2:0c:1e:2a:f4:22:e9:bc:ad:55:b4:b7:
                    54:fc:0a:3a:2d:3a:3e:1b:02:78:6c:fb:c6:da:e0:
                    a8:74:02:d9:c4:77:83:aa:00:68:3e:ff:55:cf:0e:
                    30:05:59:33:65:73:fa:61:b3:09:d8:11:b7:ce:5d:
                    01:44:26:81:e5:88:80:19:34:80:85:8a:46:3d:4d:
                    20:f5:01:86:59:52:79:7c:70:8c:ec:30:6a:8b:89:
                    41:fc:8a:6c:d2:a7:4e:45:61:c9:0f:37:f1:66:ae:
                    03:a2:32:d3:10:87:a6:68:5c:ac:f7:98:f4:1c:9e:
                    44:fe:21:a3:8c:e4:a2:65:70:d9:05:16:31:c1:8b:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:09:0B:08:F9:AA:E5:95:A7:6A:21:61:DC:4A:E9:41:4A:7D:1A:B4
            X509v3 Authority Key Identifier:
                keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:ca:f2:cf:6b:6d:a7:d7:bf:d3:3f:e5:38:0a:99:0d:bd:
         33:81:6f:a3:83:36:2e:23:78:2a:87:44:ab:ef:f6:4b:7f:91:
         25:c2:9c:8a:4d:5f:57:8a:55:45:84:d7:37:cf:db:aa:c3:8a:
         49:4a:ec:2b:8c:af:53:84:f8:2e:87:35:c2:c6:40:70:c0:b1:
         b6:a1:fe:c3:88:b8:4a:f6:51:34:ea:35:32:ae:6e:88:b0:98:
         61:75:af:24:9b:f9:5b:bf:dd:ad:e8:e0:2e:0e:a4:9a:20:9c:
         b8:7a:bb:15:e3:fe:5a:6e:c3:77:d1:61:6c:4d:e3:1a:74:4f:
         37:68:32:42:09:b1:a6:56:e5:d6:61:73:9c:55:f5:7c:09:b6:
         c7:a7:51:f3:2b:29:4c:e7:df:15:f2:47:11:7b:1d:c8:25:8f:
         74:7d:79:21:f6:c3:77:2c:58:15:37:97:b4:42:a9:f3:91:c4:
         0a:63:2d:db:36:7c:6c:27:2a:6e:9f:d9:bf:b8:c8:e9:a1:3e:
         7b:f8:0b:e9:3a:6f:5d:55:ef:58:f0:1c:46:d0:be:47:b1:9f:
         89:7f:58:ae:35:64:a3:8a:e9:18:e1:39:ac:58:b5:15:87:d0:
         ee:5b:a7:18:f3:9f:36:01:50:57:9d:73:2d:37:88:48:b7:a9:
         30:b2:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:18 2026 by rpki-client