Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          xnlxgw/I2n6jq/bgr5dOGytBBRbRHQtk2vQKE2G9Ybg=
Subject key identifier:   F2:00:FC:A0:E3:C2:FA:F6:A4:0C:40:45:F0:E0:26:1A:65:94:39:7B
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          0634
Signing time:             Tue 12 May 2026 22:50:12 +0000
Manifest this update:     Tue 12 May 2026 22:50:11 +0000
Manifest next update:     Tue 19 May 2026 22:50:11 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: xyP9iuisLNwCwif4GxwemqVtVzZDLp8DamvoHL7cfIY=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: May 12 22:50:11 2026 GMT
            Not After : May 19 22:50:11 2026 GMT
        Subject: CN=6a03aea4-7c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:fc:9f:ca:3f:99:f7:81:49:f4:c5:73:8f:
                    13:68:3c:e5:f1:06:0b:56:7d:87:57:ad:43:ec:6d:
                    ff:d3:3a:72:70:3b:57:1a:f6:31:a0:0b:1a:85:85:
                    07:c3:f7:3c:2e:8e:dc:8d:18:c2:de:c4:ac:f6:55:
                    f3:e7:ee:bb:02:aa:21:d1:27:21:89:57:18:34:9a:
                    9d:4b:8b:73:c8:c8:32:c0:b1:e6:72:23:f4:22:8b:
                    82:53:a5:01:9f:9a:b0:1e:7c:bd:4c:8a:29:25:b9:
                    f1:f4:0b:cd:e0:50:fe:ca:e4:b0:b1:08:92:42:12:
                    1e:29:72:09:11:04:22:32:da:56:ed:3a:d7:e9:43:
                    b1:87:77:d0:5a:64:d0:f3:60:6a:3f:6d:77:b1:8c:
                    d6:42:cb:72:a4:76:d2:0e:a7:2d:bb:ef:ad:9d:b3:
                    e7:fa:2f:69:26:d5:1a:2c:2d:82:13:46:6f:99:00:
                    04:03:0b:b0:1c:c1:37:49:26:32:71:e4:bb:58:21:
                    b5:d4:02:94:8a:34:d4:d8:04:d5:49:ab:5d:9a:a6:
                    4e:b7:7f:15:77:66:4d:cb:3a:98:38:d5:68:b1:77:
                    c7:d9:94:df:c3:a5:52:f0:f8:a7:8e:1f:66:33:39:
                    e1:fc:0a:25:c8:30:17:37:fd:5b:34:c2:8c:64:e3:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:FC:A0:E3:C2:FA:F6:A4:0C:40:45:F0:E0:26:1A:65:94:39:7B
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e4:0e:24:35:55:d2:2f:1f:cd:3f:9c:65:58:42:4a:e2:06:
         a1:14:d5:52:44:37:76:86:65:05:82:61:2c:91:6d:b5:8d:87:
         72:4d:49:38:93:7f:fc:c6:62:45:1f:72:07:4d:ed:3a:98:c8:
         9f:8c:a5:eb:f2:fc:96:88:59:af:11:9e:75:b9:eb:ab:73:5c:
         5a:fa:2a:48:9f:77:e4:2b:c4:9b:0c:6a:96:c7:ca:1d:53:a3:
         20:f5:fd:30:24:95:4b:ab:9b:87:47:3d:a6:e5:60:a0:d6:b4:
         8f:5c:27:c8:0e:15:f6:c9:17:fc:a1:51:d4:eb:dc:da:80:b8:
         18:80:f0:9e:39:dc:90:9f:0a:95:75:0d:83:e7:94:9c:50:d0:
         79:6e:71:96:39:ab:04:60:d2:27:5c:5c:5d:7c:77:32:42:03:
         29:3d:1a:a6:c9:5d:ce:37:ce:e1:3d:ce:00:27:bf:fb:ff:e9:
         76:56:03:3d:6c:5b:b7:20:3e:61:66:ae:c3:85:f9:c5:e8:93:
         0a:92:6b:f3:c3:eb:57:6a:d0:14:3c:c7:49:89:8c:86:87:6d:
         c2:d7:db:b2:56:5a:85:2f:57:e2:7b:87:82:60:43:6f:d5:20:
         2a:d0:e6:1b:b8:a4:26:a9:9e:db:b7:f9:67:c6:0b:75:61:97:
         11:b5:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:38 2026 by rpki-client