Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          Tq2ibdt/3QeDe1Xqi5l6BqaIdD9OBprFDveyWH+EI+M=
Subject key identifier:   C0:CC:37:51:EE:EB:B6:C4:25:6C:3E:B2:CE:D0:66:43:9E:78:F1:C7
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          0658
Signing time:             Wed 22 Jul 2026 23:21:30 +0000
Manifest this update:     Wed 22 Jul 2026 23:21:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:21:29 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: Hk6tiAVWPrZQFXPFi9oTswNu7PpFaV7U4H7Sgf6oVjA=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Jul 22 23:21:29 2026 GMT
            Not After : Jul 29 23:21:29 2026 GMT
        Subject: CN=6a61507a-a5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:67:b2:e4:c1:92:2d:b7:db:0a:3d:7a:12:
                    83:65:51:e8:ed:23:4a:71:ef:35:11:f1:a2:2d:6b:
                    d3:c1:bf:7f:1f:81:a2:ad:c8:d3:a5:69:7b:1b:fe:
                    ff:87:e1:c2:a7:18:0d:7b:1b:b9:6c:5c:3d:74:be:
                    1c:37:60:fe:43:65:74:f8:eb:70:71:fd:ee:b4:ba:
                    35:75:b7:e6:d3:9c:1c:77:f8:73:2d:e9:7f:2e:25:
                    ef:36:d4:66:cd:81:75:4f:e3:2f:2f:f0:ca:96:42:
                    af:3d:a4:20:6b:aa:91:0d:c1:24:48:61:c9:73:a5:
                    56:1a:72:a8:df:a6:71:a0:2d:e8:72:e0:da:9a:30:
                    c9:14:f2:da:d1:db:e2:3b:26:39:8e:c7:bf:69:21:
                    b5:b2:0e:e6:2c:0f:79:97:8f:3f:d1:ac:2a:e5:13:
                    47:03:b3:64:9f:96:3f:15:da:3c:ff:25:44:cc:5b:
                    bf:08:58:b2:73:be:cf:63:41:8f:40:95:f6:c9:fa:
                    f3:ea:86:9d:9c:af:4e:70:99:73:56:73:6a:d5:33:
                    c5:8b:da:9d:55:26:df:47:f8:7c:37:3c:ac:e6:9a:
                    e4:1a:7b:32:e4:52:44:a4:4d:73:83:5e:69:c6:ed:
                    de:7b:ad:0a:47:a7:40:7e:fc:4f:dc:e6:c1:eb:d2:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:37:51:EE:EB:B6:C4:25:6C:3E:B2:CE:D0:66:43:9E:78:F1:C7
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:29:44:ee:98:58:6b:05:d1:f1:79:70:fa:50:87:b0:b7:
         ec:bc:86:ea:9b:37:ef:35:0a:ae:71:31:0e:7e:54:3b:45:ef:
         19:d3:e8:47:3e:50:27:b9:70:08:2f:a3:37:7f:08:a4:b0:c9:
         04:aa:da:dd:a3:15:bc:94:42:36:46:3a:ce:02:ed:1d:2a:3a:
         12:b9:d0:bd:95:db:27:c3:a3:d6:b3:59:7d:63:31:90:75:08:
         69:82:7c:a1:70:6a:cd:80:51:2c:26:bb:7c:d6:95:09:40:99:
         21:1a:f2:56:06:cf:c8:c6:81:d3:35:9e:28:ac:4a:36:8d:83:
         d1:29:8b:51:bf:d8:49:56:00:1f:c6:97:bb:62:37:6d:e5:35:
         06:54:79:26:c5:48:48:a1:db:b5:8f:04:19:36:b1:1d:df:fc:
         8e:1a:01:71:75:10:ac:ed:77:f9:02:0d:15:5f:17:36:fd:89:
         3d:19:b6:df:0d:22:e1:1a:19:49:ae:46:7f:18:29:90:09:0b:
         51:67:cc:a3:d0:a7:81:37:ab:95:59:cb:da:bf:be:62:78:ff:
         c5:bf:f7:a2:de:8f:a5:9a:4b:a5:55:5c:cb:d0:27:a0:41:f8:
         82:92:ef:0b:1c:88:cc:fd:b8:3a:50:31:6e:74:51:b2:60:b7:
         cd:75:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:28 2026 by rpki-client