Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
File:                     NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json)
Hash identifier:          QwB/FmpKDGBZ2d3GnbkrDxRIh6VVFQr5d07xzIkdDuA=
Subject key identifier:   57:AF:E3:1E:81:9B:C5:72:AA:F1:EB:4A:3D:11:71:0E:77:3C:6A:61
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Certificate issuer:       /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial:       0B1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
Manifest number:          0B14
Signing time:             Tue 12 May 2026 19:21:42 +0000
Manifest this update:     Tue 12 May 2026 19:21:42 +0000
Manifest next update:     Tue 19 May 2026 19:21:42 +0000
Files and hashes:         1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: Lz3WUlTeZn3Rd1WI9BpDzqFFExcrAWBZsVgAI/tB/4A=)
                          2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: Dk339imNFOip5Ywpt/0EfK35LYjSFKAUXhrmv8n0CpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
                          rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2846 (0xb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
        Validity
            Not Before: May 12 19:21:42 2026 GMT
            Not After : May 19 19:21:42 2026 GMT
        Subject: CN=6a037dc6-cfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:6a:42:10:0f:cd:b3:6f:b2:c4:31:b9:eb:
                    ab:72:b3:b4:c8:e9:49:9f:43:dd:eb:b0:91:2c:00:
                    12:ce:b8:ee:6b:0b:e9:50:04:fd:ae:c7:c4:d5:bf:
                    50:4c:1c:7d:c6:9c:46:d1:a6:69:d1:7e:2f:d2:90:
                    00:2a:f7:9a:00:52:40:5b:87:62:dd:08:64:38:8c:
                    fe:f8:97:9e:c0:b3:3d:fd:20:25:2d:6b:ff:93:4a:
                    bb:34:9c:9d:87:e1:ba:5b:c0:3d:22:ce:c8:f1:0f:
                    d7:59:a7:42:7c:65:9b:d8:76:e5:4c:48:f6:ec:ee:
                    00:f3:bd:39:38:62:48:1c:a9:71:b0:c7:8f:8b:00:
                    90:28:0b:cc:59:9e:52:0d:4a:0f:b6:2d:0c:3a:00:
                    82:e7:a8:98:16:b8:31:af:1a:25:c0:6e:8b:62:d5:
                    2c:b8:4f:c1:e5:7b:81:20:85:6c:3e:01:c7:ac:be:
                    6e:a8:53:a0:f6:6f:1b:97:c0:bc:23:a1:e9:dd:45:
                    83:db:58:91:70:37:8a:54:81:61:66:4f:18:2d:57:
                    98:89:df:f3:c6:f9:60:0b:c8:49:e0:a8:41:5e:ca:
                    44:ab:95:bc:fa:28:6b:c4:6c:b7:46:f2:e9:c6:aa:
                    8d:e8:1d:7d:c3:79:d3:f9:67:35:29:d7:07:76:c3:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:E3:1E:81:9B:C5:72:AA:F1:EB:4A:3D:11:71:0E:77:3C:6A:61
            X509v3 Authority Key Identifier:
                keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:9d:98:40:2f:3d:60:ab:f4:53:16:4e:78:a1:9d:d3:d0:
         83:0a:5d:ce:f4:be:d9:66:4f:8f:6c:1b:1e:cc:b7:89:d4:07:
         46:4f:f3:86:98:e8:0a:86:17:6f:43:db:73:d7:8c:1a:f8:0e:
         da:17:54:8d:da:e6:9c:79:0d:61:2b:90:3e:e0:68:25:e6:66:
         fe:1a:8e:f2:23:8d:37:f6:54:ea:21:bc:ba:38:08:17:36:f5:
         b1:66:c4:92:d3:92:c5:8e:1b:14:93:ea:9d:36:de:67:13:da:
         cd:fd:c1:06:92:cf:e5:5b:8f:0e:10:2c:46:8e:93:08:59:81:
         3f:b8:de:7a:d0:95:53:11:dd:96:b3:2f:55:1a:ce:a2:2f:ca:
         bf:d4:93:ab:ec:2d:d8:5a:a5:6b:b8:d3:d0:73:5b:c8:4e:58:
         60:f1:41:9a:69:a0:89:4f:7d:4b:b7:e1:b1:8b:86:f9:3a:19:
         0d:b3:46:d2:36:d3:cb:89:a1:bb:df:52:9c:36:91:70:ef:26:
         48:e2:c0:a8:f6:9d:da:05:38:bd:43:6c:ff:fb:03:07:9a:8b:
         2e:65:8c:2f:e8:d8:a6:24:74:d6:b7:e5:4f:03:b8:01:0b:4e:
         5a:0a:58:54:ef:06:4d:48:78:6e:8d:0b:40:d5:8f:fa:49:05:
         c5:e0:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:26 2026 by rpki-client