Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File:                     NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier:          CjRzCsDS5MB6yX60Wd1dzzlhWJSqV2Uy+ivm82egRGI=
Subject key identifier:   29:93:F2:21:10:F4:4A:7C:E4:F7:B0:51:55:E2:FA:D1:9B:C6:13:32
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer:       /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number:          AB
Signing time:             Wed 13 May 2026 00:54:50 +0000
Manifest this update:     Wed 13 May 2026 00:54:49 +0000
Manifest next update:     Wed 20 May 2026 00:54:49 +0000
Files and hashes:         1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: V1puqvR0nJ6Y5i5qvi27Mh9yyOvX9H3LwDnUkfng7/E=)
                          2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
        Validity
            Not Before: May 13 00:54:49 2026 GMT
            Not After : May 20 00:54:49 2026 GMT
        Subject: CN=6a03cbda-2ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:9f:a3:05:3c:29:ca:e9:99:fb:99:65:b2:
                    a0:55:15:c9:a8:16:fa:a1:10:17:86:60:9c:a8:db:
                    55:31:bc:f9:57:6d:41:90:a5:06:46:be:b0:c1:9a:
                    46:a0:f1:98:95:e2:c6:92:76:aa:4a:66:cb:44:58:
                    a9:ce:f0:ae:72:0a:e5:c7:eb:f6:14:35:8f:69:99:
                    6b:03:1b:62:5d:e1:8a:71:3d:f1:1f:57:66:a1:35:
                    8c:3e:dc:39:34:dd:b5:1d:19:6d:38:1d:47:d5:da:
                    29:01:9d:45:c8:72:b7:de:07:96:4e:da:59:81:ed:
                    2e:09:16:73:58:55:d3:30:1c:a6:3a:31:b7:73:09:
                    99:fc:b2:13:f2:17:d5:9e:12:93:8d:49:e1:b3:f4:
                    7b:10:d7:f4:dc:d4:78:b8:e4:c6:a7:a4:d2:ae:7f:
                    56:24:a5:4b:6e:60:e3:20:9e:81:a9:ea:c4:7a:76:
                    bb:7e:88:b7:11:9c:ee:f5:68:3c:0a:fd:e3:20:f3:
                    52:46:d7:6e:61:f0:28:77:b1:16:4c:5f:52:20:4d:
                    37:33:4f:de:c2:ef:75:51:9a:fb:29:c2:8b:ff:47:
                    a6:d1:2e:5b:c4:5f:1c:35:8d:c0:d1:dc:22:f4:2b:
                    20:26:74:da:23:bc:c9:1e:77:a1:53:95:ec:e3:a1:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:F2:21:10:F4:4A:7C:E4:F7:B0:51:55:E2:FA:D1:9B:C6:13:32
            X509v3 Authority Key Identifier:
                keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f3:34:9a:8f:a9:0b:21:9d:cf:33:b7:bd:4a:d2:9b:7a:1b:a3:
         13:b4:aa:1f:bb:ef:21:e0:52:64:ec:1f:32:fd:4d:80:97:be:
         bf:99:79:65:17:ed:6a:67:15:76:ee:ec:1c:5e:35:ab:03:cf:
         39:b9:72:68:c0:4c:d7:d2:13:1a:93:70:a5:13:a6:1f:4d:a8:
         4b:82:23:ee:c5:bb:89:3d:37:fe:34:6e:70:2c:df:b1:db:68:
         a2:fb:c7:dd:7c:8b:48:4c:84:ab:9e:50:8d:24:89:68:5c:a6:
         1d:d1:da:0a:78:21:26:36:4f:c1:f9:ac:8f:e9:f7:16:f0:8d:
         a4:bf:21:3e:21:bb:ef:2e:0e:a1:45:de:eb:6c:09:23:e5:90:
         89:27:63:3f:27:75:be:a1:58:c1:1c:66:b5:46:0b:db:19:08:
         e3:6a:c7:4a:df:7d:7d:93:2b:2d:6d:fd:4b:41:d6:89:bc:c5:
         d1:84:e9:f6:80:38:5c:27:d4:cb:47:ba:03:29:70:d0:48:11:
         4f:a2:4a:2e:03:2c:0c:23:05:31:44:c7:3d:ea:81:08:94:40:
         9d:60:3e:02:f7:c7:db:55:43:c4:c5:91:02:92:ce:ce:7b:b2:
         94:36:b6:06:06:74:87:c3:68:f1:17:01:8e:a9:23:c4:1a:54:
         4a:ee:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:50:58 2026 by rpki-client