Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File:                     NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier:          xaON3rGWARiNV2nSNAlmIgR895VjKUefs63aYs0Wv2Y=
Subject key identifier:   23:4E:49:0A:6C:25:03:2E:A8:8B:75:5C:FF:7F:FA:A4:7F:DD:60:36
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer:       /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number:          0416
Signing time:             Mon 27 Jul 2026 01:23:32 +0000
Manifest this update:     Mon 27 Jul 2026 01:23:32 +0000
Manifest next update:     Mon 03 Aug 2026 01:23:32 +0000
Files and hashes:         1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: ek6loCj8GReYobf5Au789t6y6/mQpsA/NYLAHwSlRyg=)
                          2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
        Validity
            Not Before: Jul 27 01:23:32 2026 GMT
            Not After : Aug  3 01:23:32 2026 GMT
        Subject: CN=6a66b314-1c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:fc:a6:da:ea:07:b5:6b:5e:b5:5a:31:24:
                    ee:c8:f6:5c:0f:ae:97:8b:78:33:f0:e3:00:d6:3f:
                    34:7e:25:da:9c:22:3e:3f:95:a9:3c:13:b3:85:97:
                    08:40:01:f1:75:70:b9:14:a0:e1:cb:bc:9d:e1:81:
                    34:9a:3b:1f:b6:cb:46:ca:cd:59:44:a4:c4:46:2f:
                    e3:a7:82:5e:8e:8b:62:78:bd:22:82:59:83:e5:fe:
                    f0:2d:27:fc:65:16:17:4a:a5:00:75:22:17:41:68:
                    ab:8f:be:77:54:bc:35:42:18:23:dd:3d:a8:61:b2:
                    37:25:28:6e:09:e6:f2:46:05:d0:7d:69:4c:7e:c6:
                    c2:57:62:69:76:d9:ea:1e:ae:fe:07:85:6e:a2:4b:
                    a1:f7:11:58:31:f2:35:ee:f5:b3:8d:bb:64:00:11:
                    77:c9:40:9c:46:b4:44:9e:01:c0:e0:fe:5a:e2:c9:
                    aa:c4:63:f3:78:99:f7:92:aa:f6:44:41:ff:e0:fa:
                    80:77:e8:25:bb:12:62:3f:96:15:0b:a0:65:87:ef:
                    99:2f:d3:7f:06:ce:01:5b:3e:0e:26:d0:64:47:5f:
                    e2:f1:4b:5e:9f:a8:1e:e4:23:cd:ad:9b:a2:89:9c:
                    a4:07:11:1f:59:3c:71:ed:10:f1:f1:84:29:fc:05:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:49:0A:6C:25:03:2E:A8:8B:75:5C:FF:7F:FA:A4:7F:DD:60:36
            X509v3 Authority Key Identifier:
                keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ba:25:7e:9f:ea:90:dd:c9:eb:7a:92:06:d3:16:16:1d:01:
         d7:a6:3f:4e:ee:65:32:79:00:59:1a:77:9b:03:6e:af:d2:7a:
         f0:25:ce:1c:3b:78:49:e7:4d:59:04:00:7f:57:82:f6:94:5d:
         ae:64:47:8f:96:e0:ca:7c:20:1a:1d:de:98:2e:70:91:75:a4:
         25:ad:3b:33:99:40:e2:74:63:b6:c9:ab:ae:cc:34:a9:40:27:
         ea:fe:22:1e:95:ce:ea:f0:83:78:66:c4:d4:66:65:c2:82:2d:
         6d:33:ff:bf:ff:b6:4f:46:f9:ab:c2:fe:c7:10:1f:4c:90:f0:
         08:29:a5:66:58:98:73:bf:4f:20:0a:8c:b3:ae:bd:82:4a:82:
         99:52:6d:ec:cf:c4:73:45:c9:bd:4d:d9:3f:04:07:a4:d8:89:
         73:42:2f:ff:57:63:ea:19:89:8b:54:6e:13:d7:e5:39:fd:7e:
         54:62:5f:77:07:9d:48:40:21:0f:89:a1:12:5c:1c:4d:d2:91:
         ff:c6:94:8b:ea:69:9a:7f:8b:5a:8c:b7:62:b6:91:f1:a0:3c:
         9e:0f:19:c5:81:25:cb:df:16:f1:c9:f4:bc:62:d8:d1:e3:41:
         fe:cf:c9:8f:df:9b:f3:ae:53:d8:d1:6c:b4:d3:74:e2:b2:90:
         a4:cf:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:21 2026 by rpki-client