Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
File:                     NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft (raw, json)
Hash identifier:          Fb1VSoXGE3ZsPPZEgsVdjKtncy57+XBxgPvu++2HQ3A=
Subject key identifier:   BF:25:3C:92:3E:D3:B5:C7:3C:9B:67:63:93:B3:DB:94:48:FD:1D:78
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Certificate issuer:       /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
Manifest number:          0235
Signing time:             Sat 13 Jun 2026 02:38:39 +0000
Manifest this update:     Sat 13 Jun 2026 02:38:38 +0000
Manifest next update:     Sat 20 Jun 2026 02:38:38 +0000
Files and hashes:         1: NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl (hash: DGQkm60zLWJOv5Z1JFjbFWUL0Ym78nrr8u5l8zYFLwU=)
                          2: 7588035C913E11EFB46E9A72C4F9AE02.roa (hash: dL/U4UhMZabXz3OJx25MIDSywgaSKV+Fyuq3FcC4oxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
                          rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327
        Validity
            Not Before: Jun 13 02:38:38 2026 GMT
            Not After : Jun 20 02:38:38 2026 GMT
        Subject: CN=6a2cc2ae-21d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:07:32:b3:39:64:45:33:95:3c:67:22:42:
                    a4:cb:c3:d5:ba:55:40:24:0b:94:04:17:84:cb:d3:
                    8f:9e:6b:48:0c:23:ed:e2:30:6d:b7:e8:c3:75:55:
                    61:ab:ae:e6:f3:b8:7f:8f:93:39:37:3a:d2:0e:84:
                    6d:ec:9d:97:36:d7:24:13:15:10:8a:c4:b8:62:c8:
                    0f:c0:34:41:de:c7:de:de:78:c7:48:36:00:ea:cf:
                    1e:a6:2e:50:e3:13:41:05:a8:5f:83:03:da:b0:4e:
                    1f:81:0a:54:0a:a7:f7:7e:21:b1:7a:31:af:8d:73:
                    20:0e:92:54:84:5c:a8:41:06:78:9f:5c:d8:1d:08:
                    48:53:e2:d2:c6:e6:19:6a:5d:6c:69:5d:9a:29:a3:
                    ec:b5:29:32:8e:e4:57:83:a5:c0:e4:b8:a1:10:94:
                    03:75:b4:8d:a4:10:b5:c4:e5:11:11:e7:78:73:f6:
                    5a:e2:d0:4a:5b:c0:f1:c1:31:8e:ad:2b:7d:4c:2e:
                    93:67:21:bd:c2:5d:48:c9:cb:4c:c9:35:6c:50:ab:
                    3a:16:95:0b:11:e0:17:9f:3e:b0:57:06:99:67:86:
                    e3:cc:5d:a3:c5:cf:aa:68:7f:7c:86:f7:00:b8:8c:
                    55:85:82:0b:fc:d5:16:6f:e8:33:1c:41:36:38:9b:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:25:3C:92:3E:D3:B5:C7:3C:9B:67:63:93:B3:DB:94:48:FD:1D:78
            X509v3 Authority Key Identifier:
                keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:36:9d:e6:8e:e1:91:6d:2a:4c:3c:b8:bd:fe:23:6e:32:87:
         11:01:fc:fe:b6:43:3a:6a:14:f3:1d:46:48:81:6b:c8:2b:08:
         ba:03:29:f6:45:a9:b2:93:cc:c1:d1:c8:10:9b:7d:43:40:db:
         e9:b3:11:7e:a6:ad:bd:4e:e8:50:e5:bf:cf:88:af:10:53:72:
         c1:68:14:0a:c5:7c:c0:b3:36:ee:29:22:ff:05:a3:73:93:cd:
         b0:9c:9d:86:09:3c:fd:62:b7:87:a3:a5:fa:bf:e9:76:5c:48:
         8c:ca:de:62:0d:d1:53:3a:55:f1:77:7c:62:13:47:2f:21:b6:
         70:6b:3c:95:1a:66:c9:21:52:9e:01:e5:53:50:99:91:36:97:
         ff:b4:60:7f:ad:18:74:5f:1d:34:9e:3d:c1:18:e0:6c:17:67:
         b6:42:b9:4f:c3:1f:b1:cd:9c:d3:d0:ed:86:1f:3b:7a:06:f4:
         0f:1d:14:83:46:36:35:72:d0:bc:52:96:1c:94:d5:ed:12:16:
         59:ba:ee:fb:bd:ea:4b:4f:0e:80:59:c1:a0:6c:b9:11:aa:cf:
         ef:d3:05:a0:76:60:62:2e:66:3a:d4:00:0a:22:bf:24:1d:ae:
         a1:d4:fd:44:99:ef:bc:4f:b7:a5:e7:40:db:53:ce:32:55:ac:
         a3:4b:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:58 2026 by rpki-client