Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
File:                     NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json)
Hash identifier:          ePGp8/RtWt43BTAp9JqwHjjE3DxV/LIholi8PEMS9ic=
Subject key identifier:   94:89:7F:1B:37:67:B5:DD:98:8D:D4:1D:73:AA:99:F5:D9:F5:A2:F6
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Certificate issuer:       /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial:       0D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
Manifest number:          0D32
Signing time:             Wed 22 Jul 2026 18:31:29 +0000
Manifest this update:     Wed 22 Jul 2026 18:31:28 +0000
Manifest next update:     Wed 29 Jul 2026 18:31:28 +0000
Files and hashes:         1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: NkaXooI3zyhTEznji4rRMnxKAaa/hMufuF0ui/esjnA=)
                          2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
                          rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
        Validity
            Not Before: Jul 22 18:31:28 2026 GMT
            Not After : Jul 29 18:31:28 2026 GMT
        Subject: CN=6a610c80-1c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:de:0d:2a:dc:53:0e:07:d6:34:8a:22:e8:
                    2b:68:e1:6f:f1:77:2b:ee:66:31:0f:56:68:e8:99:
                    4b:20:71:fc:c1:70:6d:1f:09:a8:9a:4c:97:a9:87:
                    c5:7d:2e:42:75:68:11:18:71:94:64:fc:0f:5d:15:
                    2e:10:32:70:58:51:53:32:6d:84:b8:1b:ab:2a:26:
                    49:3b:af:f1:fb:88:a1:f0:2a:bc:95:ed:b2:ef:e0:
                    55:b3:91:bf:26:b3:18:78:f1:eb:b3:f8:1b:e9:fb:
                    d8:d8:52:3d:8a:6d:97:5e:21:78:57:ee:40:4e:a0:
                    89:fa:56:07:db:61:38:f6:62:12:b5:93:97:a1:b3:
                    c1:ae:1c:e0:e1:a6:6b:bf:4d:e8:0c:00:16:ba:f9:
                    9c:3d:6b:5d:8c:af:fe:1d:b7:d2:70:35:9a:bb:f2:
                    da:6c:1f:5d:e0:7f:07:39:57:be:f3:df:27:8d:d7:
                    8e:83:13:6c:24:27:ad:7f:d2:77:e6:a5:d0:27:87:
                    5c:18:31:57:74:02:69:de:6e:a8:03:ab:43:0b:b6:
                    f4:0c:c5:3c:5a:4d:99:61:65:99:68:e4:b7:55:6c:
                    68:e7:a5:18:00:06:9a:6d:00:c7:87:08:ff:26:be:
                    d4:c4:e2:28:48:d3:ee:fc:df:ac:33:05:8f:f1:f6:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:7F:1B:37:67:B5:DD:98:8D:D4:1D:73:AA:99:F5:D9:F5:A2:F6
            X509v3 Authority Key Identifier:
                keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:ee:f7:b3:4c:16:57:7c:02:5e:64:8c:e8:58:eb:33:83:
         13:21:a8:1c:e1:92:99:54:c7:58:67:8d:07:24:93:a1:cf:be:
         01:7b:15:87:c8:30:3e:65:0d:4a:c2:fc:23:8c:fe:db:b2:e3:
         0c:2b:85:8b:b4:1d:b4:cd:a8:da:99:b5:52:48:bd:d0:aa:1a:
         d3:14:9c:07:36:bf:62:a9:3e:7a:be:6e:8e:40:96:88:75:6f:
         f1:28:23:00:b0:42:1a:91:f7:f5:84:c2:df:7b:53:68:70:cf:
         88:e0:f8:35:80:cb:c4:4f:ca:19:ca:8f:b8:48:13:e8:f2:be:
         8a:a5:87:5b:dc:87:e3:e7:f4:8b:75:d1:fd:84:83:5a:09:0c:
         c7:da:30:74:8d:a0:74:d0:cf:14:a2:29:c7:bc:f8:d7:fe:6d:
         e4:bf:40:c9:c6:8e:b4:53:50:68:0b:4a:af:7a:db:67:5c:83:
         ac:15:24:9b:b5:41:ed:f9:0e:a4:16:b4:96:00:64:80:4c:35:
         16:c7:63:7e:0a:13:6c:90:a9:ef:7f:01:51:6a:9b:81:36:df:
         0f:e2:4f:e4:72:6e:f2:0e:55:a7:d4:7f:8b:27:62:db:81:55:
         3e:90:30:ef:dc:1b:1a:83:a4:2a:aa:5d:b1:ed:78:45:94:be:
         5b:72:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:02 2026 by rpki-client