Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File:                     njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier:          +sXahGQMul70gFGta7DMMA7Szb2XrqYybBZ2gcdNtIs=
Subject key identifier:   9C:53:27:2E:4E:5F:77:D0:AB:AA:74:A4:15:52:3E:E7:43:40:24:9C
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer:       /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial:       352A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number:          352A
Signing time:             Sat 18 Apr 2026 14:58:19 +0000
Manifest this update:     Sat 18 Apr 2026 14:58:19 +0000
Manifest next update:     Sat 25 Apr 2026 14:58:19 +0000
Files and hashes:         1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: wgQxR7AT9h3mfLvOAa2e8aLs1RTS8SXRozFErKoePks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
                          rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13610 (0x352a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
        Validity
            Not Before: Apr 18 14:58:19 2026 GMT
            Not After : Apr 25 14:58:19 2026 GMT
        Subject: CN=69e39c0b-24ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:28:da:94:b2:f2:51:7e:d9:fb:e6:51:42:
                    77:a6:af:51:01:1b:d7:2e:74:96:d8:9c:92:f0:e5:
                    85:c5:77:fb:ba:7e:0e:9d:f5:da:e3:b0:a8:e1:4d:
                    b0:c9:ae:6a:ab:2d:a2:a2:59:77:9c:6b:72:71:43:
                    16:2a:7b:bb:c0:ef:c2:a2:6c:3a:a0:90:ec:08:bd:
                    4e:a3:8d:99:14:2b:5d:61:a1:7c:30:7e:8e:8c:c7:
                    1b:a8:50:c3:29:0d:4d:41:2f:0c:69:f7:22:4c:27:
                    53:52:a2:71:c9:60:2b:d3:24:1a:a8:43:4f:ac:45:
                    7a:af:07:bc:82:a0:f4:80:9c:75:fb:6e:74:61:bc:
                    d0:eb:62:24:2e:19:fb:1c:b4:ca:5b:33:1a:b0:13:
                    4d:d2:9b:86:69:6d:9a:7c:ac:0b:92:92:df:cd:46:
                    47:b0:f4:db:77:21:fc:13:06:3c:b7:38:42:8c:b9:
                    5b:69:62:9d:f9:8c:f6:cd:00:11:05:08:52:7f:62:
                    f3:94:e4:33:38:b1:5f:f8:f3:76:02:2e:af:e4:1e:
                    a1:d8:39:63:78:7f:a6:c0:89:18:2e:d1:77:58:c4:
                    07:93:39:6e:59:f2:38:27:a4:b0:86:a0:07:cf:83:
                    8e:6f:40:68:f3:16:b2:98:5d:37:9e:be:f3:13:b3:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:27:2E:4E:5F:77:D0:AB:AA:74:A4:15:52:3E:E7:43:40:24:9C
            X509v3 Authority Key Identifier:
                keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:12:de:97:35:f5:f5:42:52:33:5a:4e:08:dc:a9:cf:e5:
         85:b6:e8:f2:e5:0a:9d:1d:5e:81:31:d5:0f:c7:88:4a:f7:0a:
         3e:4b:ce:a8:f7:2c:d3:04:88:7a:a9:36:92:e8:9a:96:d0:91:
         9f:15:cd:64:34:a2:f2:23:dd:26:20:1b:be:9c:5f:70:1c:80:
         78:59:f5:cc:f1:ad:2c:cd:da:a8:3f:aa:17:4e:d2:99:57:01:
         5a:00:62:4e:56:b5:3f:06:f0:dd:75:1a:39:b9:bf:60:8d:ac:
         8b:f1:57:de:ac:21:17:16:85:7c:7d:38:c5:76:dd:ab:3a:9d:
         80:e8:93:08:b5:e0:62:83:f0:a2:51:b0:79:a5:16:50:e7:cc:
         9a:58:66:28:fa:1a:fd:ca:4f:ac:15:20:e7:70:94:27:e5:8b:
         a1:36:9e:be:a0:8a:f1:7a:b7:4b:2b:65:27:2b:ff:41:1e:d4:
         ae:45:91:4e:ba:5d:c0:85:6e:7e:6b:72:4d:cf:c1:fb:ee:16:
         c1:8c:e5:12:04:40:aa:a7:94:fa:d0:37:23:9e:7d:6a:5f:a8:
         64:26:7b:ef:2f:cc:a4:7e:f0:f6:67:6c:88:13:af:98:9a:72:
         32:ab:19:12:47:b8:04:0d:58:0a:c5:57:f6:ea:e4:09:09:34:
         74:aa:bc:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE
QjJCMzc5NjYwHhcNMjYwNDE4MTQ1ODE5WhcNMjYwNDI1MTQ1ODE5WjAYMRYwFAYD
VQQDEw02OWUzOWMwYi0yNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqf4o2pSy8lF+2fvmUUJ3pq9RARvXLnSW2JyS8OWFxXf7un4OnfXa47Co4U2w
ya5qqy2ioll3nGtycUMWKnu7wO/Comw6oJDsCL1Oo42ZFCtdYaF8MH6OjMcbqFDD
KQ1NQS8MafciTCdTUqJxyWAr0yQaqENPrEV6rwe8gqD0gJx1+250YbzQ62IkLhn7
HLTKWzMasBNN0puGaW2afKwLkpLfzUZHsPTbdyH8EwY8tzhCjLlbaWKd+Yz2zQAR
BQhSf2LzlOQzOLFf+PN2Ai6v5B6h2DljeH+mwIkYLtF3WMQHkzluWfI4J6SwhqAH
z4OOb0Bo8xaymF03nr7zE7PBMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxTJy5O
X3fQq6p0pBVSPudDQCScMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE
OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa
U0lmOUxXOXNhVGJiS3plV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALg0S3pc19fVCUjNaTgjcqc/lhbbo8uUKnR1egTHVD8eISvcKPkvOqPcs0wSI
eqk2kuialtCRnxXNZDSi8iPdJiAbvpxfcByAeFn1zPGtLM3aqD+qF07SmVcBWgBi
Tla1Pwbw3XUaObm/YI2si/FX3qwhFxaFfH04xXbdqzqdgOiTCLXgYoPwolGweaUW
UOfMmlhmKPoa/cpPrBUg53CUJ+WLoTaevqCK8Xq3SytlJyv/QR7UrkWRTrpdwIVu
fmtyTc/B++4WwYzlEgRAqqeU+tA3I559al+oZCZ77y/MpH7w9mdsiBOvmJpyMqsZ
Eke4BA1YCsVX9urkCQk0dKq8qQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:49 2026 by rpki-client