Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
File:                     Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft (raw, json)
Hash identifier:          QYvtOU7OAdkDGl6aTfAAfYeutJB3LcxmB7J+t1UfsR8=
Subject key identifier:   CA:F2:5E:D6:6C:BE:19:85:ED:9E:BF:8E:FC:69:B3:64:88:9F:5D:4B
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Certificate issuer:       /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
Manifest number:          35
Signing time:             Thu 23 Jul 2026 10:38:56 +0000
Manifest this update:     Thu 23 Jul 2026 10:38:56 +0000
Manifest next update:     Thu 30 Jul 2026 10:38:56 +0000
Files and hashes:         1: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl (hash: 5XmzlV3TxehwMlO/WmkNOcZuORNAqACZztv34ghWGD4=)
                          2: 49C3A0F43AAD11F18ABD7390C4833773.roa (hash: M3Bb6K66672mLJWoFirlzgaQZknuy9ibLFZWuZIc970=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
                          rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
        Validity
            Not Before: Jul 23 10:38:56 2026 GMT
            Not After : Jul 30 10:38:56 2026 GMT
        Subject: CN=6a61ef40-ebb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:aa:e1:38:ca:02:a5:df:5b:fc:7a:44:d7:
                    a9:e0:bd:aa:f0:26:dc:7f:02:f8:69:6b:15:23:d6:
                    b4:53:84:8a:70:6a:d5:f8:c8:54:b8:3b:53:41:70:
                    77:03:5d:9e:f8:76:24:6f:1a:0b:22:d8:1e:e4:94:
                    6b:64:39:5c:31:77:73:38:4c:04:25:71:56:af:53:
                    d1:94:37:1e:ad:d0:85:c5:97:db:bd:ee:ea:40:31:
                    92:50:66:79:16:90:7c:c1:b6:e7:0e:09:93:0b:03:
                    7c:e2:a3:56:0f:43:bb:8b:60:3d:8b:ea:58:13:9d:
                    d5:be:46:18:2f:70:ba:f0:10:7c:93:53:9f:53:af:
                    22:dd:61:17:b6:a3:40:1c:26:eb:04:7d:d7:29:12:
                    08:ca:6d:de:d1:77:0c:03:96:2b:a0:28:a0:0b:36:
                    3a:7b:e7:75:69:6a:3b:73:1e:7b:2e:45:6c:8c:c5:
                    7c:51:f0:b7:cb:36:77:9e:df:8f:d9:8d:c7:3d:e5:
                    f2:6e:4f:0b:bf:bf:97:bc:f0:70:21:32:0e:d8:51:
                    dc:ee:3a:e9:10:84:c4:85:7d:3f:47:93:f4:ea:54:
                    50:1a:5d:27:ed:72:ba:a4:81:eb:40:10:d3:d8:d1:
                    31:6a:b8:5e:6f:4f:df:c7:d1:e1:e1:f4:f9:86:09:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F2:5E:D6:6C:BE:19:85:ED:9E:BF:8E:FC:69:B3:64:88:9F:5D:4B
            X509v3 Authority Key Identifier:
                keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:54:f5:d9:92:69:52:80:5e:74:78:4d:31:65:af:6a:5a:96:
         3d:78:47:4c:1b:72:56:43:f6:2e:cf:c4:19:77:19:af:84:e1:
         16:9f:d5:ca:43:2d:06:d7:49:45:8d:94:ea:e9:db:25:00:4b:
         52:9f:fe:8d:88:f5:85:c2:fe:5e:4c:58:da:28:53:ec:e1:c6:
         b4:d3:90:6f:3e:c6:cc:5c:6c:3b:b1:73:e0:90:4e:b6:d6:00:
         35:78:fe:6f:99:ed:ba:64:c1:be:a2:d2:d2:c7:ea:81:bc:5c:
         0f:ff:0f:36:23:3a:d4:5c:37:d0:76:95:ca:59:fe:9b:61:23:
         ec:89:72:8f:6d:f7:05:e4:56:f7:86:b4:87:fa:ef:8c:6c:40:
         81:54:d8:12:b4:ad:dc:d5:96:8a:f9:0e:6a:47:ce:75:df:6b:
         c5:cb:a3:26:e9:da:3c:f5:42:31:a0:f0:76:b2:8e:27:6d:56:
         25:0b:3d:67:b9:ee:39:49:83:0d:fc:3f:cc:0e:b5:a3:02:a7:
         c8:c7:57:27:db:87:67:4c:f3:0e:64:f2:ef:5c:2f:32:5e:67:
         a0:20:46:61:ed:a9:c2:d3:a7:42:40:82:08:b3:5e:b0:92:f0:
         1d:25:d4:53:71:b0:c5:53:d9:ff:93:9d:e8:d1:bd:eb:95:23:
         54:96:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:19 2026 by rpki-client