Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
File:                     NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json)
Hash identifier:          DP7adwZejRw0uhIg4lKdjv2TknL6z1BUZ9iPrdKqy88=
Subject key identifier:   17:95:26:CC:0C:0A:8D:FB:E8:7F:29:30:C7:EB:B7:9E:ED:1B:91:A5
Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28
Certificate issuer:       /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228
Certificate serial:       04B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
Manifest number:          04AB
Signing time:             Wed 13 May 2026 00:01:36 +0000
Manifest this update:     Wed 13 May 2026 00:01:36 +0000
Manifest next update:     Wed 20 May 2026 00:01:36 +0000
Files and hashes:         1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: km1qjj7OAXyzEvsvHvKLxlFgzgviOqlgepdPxW+zgcQ=)
                          2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl
                          rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228
        Validity
            Not Before: May 13 00:01:36 2026 GMT
            Not After : May 20 00:01:36 2026 GMT
        Subject: CN=6a03bf60-aee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:58:78:90:fd:91:dd:4f:79:04:f4:e4:44:
                    c5:c0:84:ca:3b:79:bb:fe:25:19:07:6f:4a:8d:f4:
                    d9:b1:bd:a1:ab:72:1e:75:bb:1b:70:b9:69:31:bf:
                    c1:3d:f8:fb:1c:7b:8f:d0:56:d4:95:02:e3:f7:d9:
                    07:54:f9:fe:50:db:79:42:7e:e2:00:94:e4:45:5c:
                    4d:39:de:bb:30:d2:69:86:c5:b4:dd:e3:b0:af:78:
                    39:65:42:bd:7c:00:6b:13:97:84:04:33:93:58:bb:
                    b4:d7:42:97:3f:d2:79:2c:3b:c9:9f:da:dc:41:93:
                    0c:c1:86:71:8f:bf:4a:18:e4:48:b0:39:e5:8b:ef:
                    ed:70:69:26:ed:4a:28:3e:46:70:1f:99:3e:f9:22:
                    0b:84:a3:df:0f:31:d0:52:ae:ae:c3:06:0e:f7:50:
                    6c:8d:64:a0:54:90:03:40:03:6f:0f:5e:57:ca:32:
                    6f:8f:f4:f5:02:fc:6b:13:45:4c:e6:d7:8d:87:f5:
                    41:3e:a4:59:5d:18:7f:c2:4d:b3:93:62:07:11:fd:
                    c0:e4:91:99:bd:60:b4:93:79:b1:09:40:f6:c7:19:
                    58:b5:73:14:92:19:63:3d:cc:86:f2:cf:8c:dc:bd:
                    f6:9e:de:81:8c:a1:1f:6a:b3:bf:85:d9:4b:e7:fd:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:26:CC:0C:0A:8D:FB:E8:7F:29:30:C7:EB:B7:9E:ED:1B:91:A5
            X509v3 Authority Key Identifier:
                keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:d9:f9:f4:eb:4f:66:69:76:be:03:f4:88:c8:d4:0b:b2:
         b1:81:68:a9:d6:67:f3:3b:02:70:06:31:c7:00:ea:ca:d2:8a:
         18:a2:f8:cf:ec:50:da:be:9d:17:83:0a:0d:32:71:af:4b:b6:
         0f:7b:79:98:ab:04:48:e0:97:a3:d4:06:0d:e3:27:5f:69:08:
         cf:3c:a7:15:57:0a:49:69:28:77:be:2b:46:70:10:6b:c1:f4:
         73:7f:64:c7:b7:da:21:c2:f0:98:a2:a4:39:64:0a:b8:fe:15:
         76:ac:11:09:02:fc:61:e8:e7:1f:57:ca:21:97:d8:b6:a2:f3:
         9f:36:18:f5:5c:4b:40:ce:58:d4:eb:92:b1:5f:29:19:b9:8e:
         9e:af:1c:37:a0:9d:b6:39:8c:a0:b5:27:e0:b5:79:b4:01:fd:
         0d:2d:02:35:89:ba:0a:a6:5b:02:df:60:db:0a:64:6e:dc:99:
         9d:2b:65:cf:d5:9f:7e:67:19:1e:f2:81:5c:49:0d:5f:ea:cc:
         bb:f0:40:90:e8:44:fa:2d:65:f9:4f:2f:bb:1d:43:a0:a2:36:
         b9:39:9c:2c:0d:70:68:42:b0:7a:f0:88:91:ec:32:e6:07:24:
         42:02:ba:82:11:1d:88:5a:09:62:4d:96:b7:f7:8c:09:ba:2b:
         bb:e9:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:11 2026 by rpki-client