Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
File:                     N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json)
Hash identifier:          44G6dmfEyU4uyM9zPUB08T78I3JWGQ5daE91Eo/QJyE=
Subject key identifier:   8A:A8:90:BD:66:38:1C:1B:E2:F8:2F:49:7D:2C:0F:AA:1B:A2:9A:7A
Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
Certificate issuer:       /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
Manifest number:          2E
Signing time:             Wed 13 May 2026 08:54:25 +0000
Manifest this update:     Wed 13 May 2026 08:54:25 +0000
Manifest next update:     Wed 20 May 2026 08:54:25 +0000
Files and hashes:         1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: n1DUlnM8C59lJMRJKhDYsJNDUjlIer702PTmb/l3GWM=)
                          2: CD7290AA136F11F1982A4804323D8C67.roa (hash: CCP9/OeftiKfulV8qYHt+suPF/2fOVKP+J3q0O5BU9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
                          rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
        Validity
            Not Before: May 13 08:54:25 2026 GMT
            Not After : May 20 08:54:25 2026 GMT
        Subject: CN=6a043c41-2dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:83:2c:00:c9:56:97:45:d5:07:9f:1f:85:
                    ae:b5:21:fa:d8:d2:0a:af:a6:71:69:7a:48:a9:41:
                    a5:5d:c4:23:e2:75:74:0d:fc:72:2e:4b:55:84:3b:
                    0c:29:07:03:35:11:2f:73:32:c3:5e:be:b6:ff:79:
                    5b:e1:48:6a:48:a1:a8:22:b3:1d:ee:bc:10:9e:0c:
                    96:45:0f:1c:07:b1:c7:2d:11:55:bd:45:23:6f:55:
                    13:3b:fc:96:2c:9b:bb:10:01:73:20:6e:ea:1b:de:
                    b3:d4:59:c0:a6:6b:67:06:5f:72:b3:94:aa:02:ee:
                    28:f9:5d:69:07:2e:ea:99:e7:b2:7d:86:1e:83:06:
                    45:0e:9e:1a:e1:a0:da:c3:db:09:a3:a0:aa:99:07:
                    2d:d7:ba:83:ed:68:c6:2c:34:63:07:ce:8b:7a:b2:
                    e0:65:30:6a:75:a6:a4:b9:d9:a7:53:6c:e1:fc:7b:
                    b7:a0:b3:66:58:f2:5d:0a:fc:cd:a7:a0:db:9c:b2:
                    8b:b9:06:b2:dd:74:61:7b:b9:53:c8:06:68:97:0b:
                    86:9a:30:33:1c:d1:7c:6a:70:9b:a2:a4:db:da:78:
                    3c:fa:80:f1:fd:6f:fa:d0:66:10:20:80:dd:ce:fb:
                    1f:d8:a6:3d:47:42:2f:d0:9b:10:fa:2a:1f:60:f1:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A8:90:BD:66:38:1C:1B:E2:F8:2F:49:7D:2C:0F:AA:1B:A2:9A:7A
            X509v3 Authority Key Identifier:
                keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:a3:64:90:82:7b:9d:86:5e:05:a8:6d:4d:9a:9d:d1:b6:
         87:06:14:63:96:db:28:48:12:0d:22:73:a8:49:4b:f3:63:f2:
         5d:ab:be:a7:93:44:5a:d4:dc:b7:3b:4b:43:2f:24:8a:92:79:
         2b:3c:84:59:7b:e2:f6:cf:dd:65:7d:65:73:8c:c3:27:7b:22:
         d2:d0:5a:04:30:4b:93:94:1a:3a:31:e6:55:d4:89:a9:d5:c3:
         17:05:f4:7d:ef:0f:5f:aa:de:a6:57:7a:da:bb:3a:cb:09:46:
         24:83:67:db:df:5d:9f:3c:bd:e9:e9:3d:2e:72:e8:44:f9:de:
         a4:d7:f1:ac:c6:05:1c:6e:ef:89:da:12:6f:b7:43:9a:cf:22:
         64:a2:24:c6:c9:7e:ac:96:34:06:4e:9d:92:7d:2f:bc:89:b9:
         6c:f4:d7:87:f5:7d:f3:a4:4e:cb:b9:c2:9e:2d:36:72:9e:83:
         10:c2:64:45:26:d2:ce:f6:5a:1a:12:54:0a:2b:b7:67:a8:a6:
         3b:a0:af:49:d5:dd:ab:6a:56:0d:29:c3:34:a3:e8:d1:e0:d9:
         0a:21:fe:f0:46:da:e0:eb:76:2e:e3:a6:93:f1:d9:f5:6e:92:
         4b:f3:60:1b:ec:8d:d0:05:d3:ba:5f:0c:89:84:6d:97:98:69:
         01:98:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:44 2026 by rpki-client