Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File:                     njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier:          v8i1uGEwSvsP5IEh06D8z3hQ558htY5rhak1ZtqVigw=
Subject key identifier:   94:81:8C:07:A2:1A:BC:CC:61:34:32:BD:48:5B:CD:FE:C4:CB:66:B8
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer:       /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number:          355D
Signing time:             Tue 28 Jul 2026 15:03:34 +0000
Manifest this update:     Tue 28 Jul 2026 15:03:33 +0000
Manifest next update:     Tue 04 Aug 2026 15:03:33 +0000
Files and hashes:         1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: rvUfcNdwRvW7SwNPyvM/PnBB/kB5svsMC43syTJMrFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
                          rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
        Validity
            Not Before: Jul 28 15:03:33 2026 GMT
            Not After : Aug  4 15:03:33 2026 GMT
        Subject: CN=6a68c4c6-b82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:54:99:fd:82:b4:20:1b:c1:1c:3d:bf:a9:
                    00:70:48:be:e1:33:60:d1:d9:e7:9b:ef:eb:e0:c1:
                    59:73:36:ca:b6:59:a4:41:00:1e:1b:0e:c7:cd:65:
                    07:b1:43:a1:75:a0:1d:25:64:3f:da:68:f7:09:bc:
                    0e:48:25:11:cf:48:cb:d1:5f:fd:bc:09:8b:a7:e9:
                    4d:18:23:48:5c:c3:f3:31:7f:20:14:81:9f:97:87:
                    0c:7b:6b:b8:70:b5:62:1e:b0:b6:bc:22:5e:31:04:
                    04:45:6e:e5:c9:91:2c:97:88:6b:d9:b5:ee:bd:54:
                    85:9f:e3:01:51:d9:a0:dc:15:21:50:55:c2:de:00:
                    89:d7:e6:39:50:c6:3a:a1:7d:db:c2:a6:19:d1:f3:
                    50:ea:ad:24:3e:ca:37:d8:2e:c1:a6:b0:21:8b:b6:
                    f9:82:86:8d:4e:c2:e9:0c:1d:25:bd:52:dd:78:68:
                    86:a6:bb:33:72:06:c9:ea:29:fd:04:ee:96:74:a2:
                    70:c5:9a:f1:00:30:72:9b:f2:84:03:db:20:c1:09:
                    87:93:40:55:c1:60:f9:0f:21:e4:b9:75:4c:3b:fc:
                    72:f3:a3:f6:52:c5:4e:b4:9f:34:36:5a:09:1b:26:
                    95:fe:55:0b:22:e5:20:49:67:8d:be:b2:5a:3a:8b:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:81:8C:07:A2:1A:BC:CC:61:34:32:BD:48:5B:CD:FE:C4:CB:66:B8
            X509v3 Authority Key Identifier:
                keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:d9:4a:2a:b2:25:d8:86:5a:de:cd:f3:68:c4:89:2a:8a:6d:
         82:9a:f5:83:ae:80:bc:e4:b2:62:69:3a:12:77:53:f2:20:2d:
         78:38:68:89:e1:4c:bf:36:fe:75:08:85:06:7d:cb:91:87:f9:
         8a:90:57:34:c3:1e:e9:04:62:7d:b5:42:9b:17:58:70:91:67:
         0e:27:d9:1a:27:45:cd:5c:9d:61:14:4d:6f:88:98:35:99:c0:
         76:47:05:86:db:75:38:20:73:b3:27:a8:20:50:f1:ba:6a:5f:
         70:d7:67:94:a5:82:b9:25:95:af:fc:51:d0:d6:b0:20:be:7c:
         d5:26:b3:60:26:ae:1a:46:82:5f:a7:99:cb:55:12:27:94:a8:
         42:40:71:86:cc:c3:3c:5f:68:db:62:7a:27:16:51:0a:b2:6f:
         51:14:11:a7:39:5e:db:4c:26:0f:2b:b1:67:a7:c8:3c:28:81:
         08:0d:0b:e0:ad:27:ea:45:76:35:2d:11:58:aa:24:d5:4f:89:
         dc:0f:0e:67:ff:91:72:59:c3:25:f6:14:42:0e:be:92:50:57:
         dc:2d:b9:c6:30:02:aa:e1:ee:50:11:e6:73:2a:87:b3:ed:1f:
         c4:f9:3f:b5:12:06:1c:50:f4:8c:2e:37:3f:67:65:52:fa:d0:
         bf:88:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:46 2026 by rpki-client