Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File:                     NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier:          P7+1QdCJ4XwQIdTOSXSKZWRNOz84i9nOZstskO6qZ9k=
Subject key identifier:   E9:BD:1C:AA:FF:38:93:87:21:27:CF:EB:82:3F:AE:05:D1:BC:B5:89
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer:       /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number:          92
Signing time:             Wed 25 Mar 2026 00:31:21 +0000
Manifest this update:     Wed 25 Mar 2026 00:31:20 +0000
Manifest next update:     Wed 01 Apr 2026 00:31:20 +0000
Files and hashes:         1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: vA0szcrg9Aj74y6g4661aqWxg7TJCJbLBXdeLO2TuV4=)
                          2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
        Validity
            Not Before: Mar 25 00:31:20 2026 GMT
            Not After : Apr  1 00:31:20 2026 GMT
        Subject: CN=69c32cd9-ad17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a9:29:c1:f0:0c:76:72:a3:5a:fa:d1:13:f5:
                    46:58:0d:13:7b:75:ac:18:25:88:17:7c:07:50:97:
                    1c:d7:91:5c:14:a1:a7:a6:d1:a3:b9:6b:13:cc:2e:
                    b9:33:61:d2:93:9f:0f:ea:e2:95:e8:df:55:23:2c:
                    8d:06:f9:fb:46:4c:57:ac:7e:fd:ba:6e:69:94:58:
                    55:fc:23:0e:f1:72:9e:c8:8b:d6:6f:b2:b7:da:0a:
                    93:8f:7a:5c:38:20:ef:ee:02:be:fa:cc:84:6e:22:
                    3f:74:ce:11:36:88:17:23:c9:a4:cb:4a:cb:7f:5e:
                    df:ed:42:8a:45:f0:41:2d:16:c1:bf:4e:9c:f0:04:
                    ab:1a:c0:64:e2:51:a2:dc:c6:6f:d8:72:80:31:87:
                    6f:77:e7:0d:48:ae:3c:e3:b4:22:e8:ae:13:9d:33:
                    90:91:a5:e6:f4:85:84:c7:01:fb:55:9a:d5:86:b5:
                    d6:e6:57:3d:f8:9f:c0:dd:40:e4:39:45:df:9c:df:
                    e6:37:11:d9:73:05:1b:c1:b2:2b:a6:7b:c3:64:b7:
                    98:f2:fe:8c:26:16:fb:4d:80:af:c1:6c:b5:44:64:
                    41:fe:7d:f4:43:85:24:ef:06:61:8a:79:32:55:68:
                    5a:6a:44:8d:f7:78:43:fb:6f:bc:e8:18:bf:dc:52:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:1C:AA:FF:38:93:87:21:27:CF:EB:82:3F:AE:05:D1:BC:B5:89
            X509v3 Authority Key Identifier:
                keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:9c:0f:58:cd:02:53:3c:d0:06:9f:ff:12:70:3d:1e:10:58:
         e4:24:be:46:6b:90:56:62:5e:fa:a8:a3:5b:1b:12:4d:42:2e:
         60:f3:5f:81:82:a6:97:10:cd:fc:cc:6d:7d:94:cf:39:70:f3:
         12:0a:e9:3f:69:48:31:71:ab:a5:97:50:97:6f:82:50:ff:6d:
         21:67:54:94:f1:4b:5f:09:e4:0d:b6:f1:fa:82:2d:e2:d9:56:
         fc:93:31:bb:95:ec:c5:7f:83:e6:47:ab:af:05:1a:1f:7a:3e:
         04:81:a2:95:3f:e0:85:df:ea:bf:78:bf:e5:c6:98:03:9a:37:
         c6:ad:ec:62:65:bf:62:65:e3:fb:f2:25:4f:12:59:05:84:dc:
         ef:15:79:4d:44:b7:8e:fb:d6:c6:10:d2:6f:3a:d6:4b:a9:98:
         fc:fd:61:07:14:dc:5f:7c:d5:f5:89:c1:ef:b2:b6:6f:e5:5e:
         b8:0a:2e:fa:96:9f:9b:ef:cf:d8:67:25:00:d0:67:6a:ce:8c:
         49:5f:f4:c3:90:01:8e:53:ce:b1:55:9b:e4:f1:95:0b:70:5d:
         58:ef:7e:98:4a:8c:89:70:1b:5c:c8:20:fe:dd:bf:76:28:f7:
         21:07:f5:ef:39:3c:36:58:ea:2b:74:fb:74:f0:0e:5f:5a:43:
         d5:9f:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:49 2026 by rpki-client