Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File:                     nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier:          aLM04InMR1ZlHk1k6pFwfaaiByOnnp9YYpBEGaxRU68=
Subject key identifier:   D1:29:94:A3:47:42:A8:06:9D:CA:20:9D:73:9C:00:73:FE:D0:7C:4A
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer:       /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number:          0211
Signing time:             Thu 23 Jul 2026 04:45:32 +0000
Manifest this update:     Thu 23 Jul 2026 04:45:32 +0000
Manifest next update:     Thu 30 Jul 2026 04:45:32 +0000
Files and hashes:         1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: bjmcWHzxO6Oqwc6fcDf4ZfhDHKM7Zmia/XldfrR9bUE=)
                          2: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
                          3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
                          4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
                          5: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
                          6: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
                          7: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
                          8: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
                          9: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
                          rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
        Validity
            Not Before: Jul 23 04:45:32 2026 GMT
            Not After : Jul 30 04:45:32 2026 GMT
        Subject: CN=6a619c6c-6a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:ca:f1:7e:af:22:ec:df:ff:b6:41:fc:b9:
                    88:6e:f8:4c:14:19:50:83:0b:8d:f1:1f:a7:eb:f2:
                    d6:11:63:c8:dc:69:f4:76:4a:7b:20:dc:05:7f:13:
                    dd:fa:31:10:a7:91:0f:75:53:79:82:d4:47:11:f0:
                    58:f3:bd:58:72:ac:b8:68:f2:67:35:d4:7e:3c:72:
                    44:62:72:91:90:99:4e:99:7d:6a:40:6e:7f:f5:d3:
                    bf:68:8c:74:31:8d:76:c2:4b:07:e8:cb:0a:b5:e8:
                    78:b8:64:1c:a7:1e:28:6b:c2:e5:d9:64:50:79:86:
                    08:71:97:37:bc:44:aa:f4:1e:4b:cd:27:9a:f5:b0:
                    70:58:58:98:b5:17:23:53:f9:d0:b5:4f:95:23:d9:
                    9f:bb:62:87:f2:6d:30:33:db:d0:68:95:6d:51:79:
                    26:7a:6c:2a:88:25:51:0e:6e:68:bc:87:fe:ee:18:
                    db:df:c4:a7:84:ab:3c:c6:58:67:cd:c7:12:9b:c0:
                    d3:43:8f:8f:ff:f4:88:59:8a:2a:8c:24:a7:39:44:
                    74:77:51:46:8f:34:7c:1f:4f:e0:b0:df:00:a7:7a:
                    d8:0e:76:48:68:ac:4d:e2:91:1e:6c:70:bb:47:a1:
                    7c:67:33:f3:6b:63:67:07:5e:29:01:d7:3e:37:f7:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:94:A3:47:42:A8:06:9D:CA:20:9D:73:9C:00:73:FE:D0:7C:4A
            X509v3 Authority Key Identifier:
                keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:13:e2:9a:dc:06:be:e6:36:7e:33:49:d4:35:d5:88:83:46:
         6c:55:b6:f0:2c:91:d0:90:54:56:c1:d0:fb:e0:a4:72:4e:f9:
         07:62:cd:a2:7f:8e:e7:e9:2f:93:91:c9:be:9e:ed:b0:c7:dc:
         d1:e2:49:8b:08:4c:d5:20:2f:50:cb:61:6a:02:b9:04:c9:f8:
         9e:7e:18:f5:70:bd:36:02:32:00:0b:a9:18:61:9c:22:c5:25:
         c9:6f:48:70:55:fc:d2:ec:bf:56:02:da:4b:f7:19:83:35:9a:
         a1:a2:0c:c5:b7:a4:78:c5:5b:00:a4:90:6d:ec:52:97:46:d9:
         58:bd:e8:f3:4e:e2:ab:34:60:26:58:bb:78:e3:2e:7a:f6:02:
         5d:8b:f1:cc:c5:e6:a7:c4:68:a0:e9:6d:55:08:c6:7b:ec:0d:
         42:02:54:ab:6f:f8:6a:bf:40:2e:a1:e4:ef:31:50:35:c9:b4:
         fa:5d:ee:26:dd:ac:c0:34:10:60:8e:53:8d:42:01:b8:51:7e:
         28:c0:5c:3e:50:c8:47:d5:2a:fa:e2:e6:0f:8f:80:70:36:94:
         2c:32:0f:c6:92:32:3f:61:81:83:07:fb:d1:76:5c:b1:5e:fe:
         53:a4:3c:1b:b3:a8:96:0d:37:78:6e:17:96:95:5e:e0:78:41:
         4b:96:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:13 2026 by rpki-client