Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File:                     NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier:          jsS5SD+TuVc81T3taUKJhNNrp06KYDByxYWRX6kIqnc=
Subject key identifier:   2F:B2:2B:AA:85:1C:60:BF:98:75:5A:92:38:7C:76:D3:69:6E:0D:B4
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer:       /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number:          0135
Signing time:             Thu 23 Jul 2026 07:13:28 +0000
Manifest this update:     Thu 23 Jul 2026 07:13:27 +0000
Manifest next update:     Thu 30 Jul 2026 07:13:27 +0000
Files and hashes:         1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: HI7O94tlSXw7fpDdaaA2wkd87mId52hRzDImRBYf/BE=)
                          2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
                          rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
        Validity
            Not Before: Jul 23 07:13:27 2026 GMT
            Not After : Jul 30 07:13:27 2026 GMT
        Subject: CN=6a61bf18-1a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:e0:c9:48:6a:0a:f0:7f:40:86:0f:03:de:
                    c6:32:6f:4e:af:c3:92:2b:c8:e6:21:e8:68:25:1d:
                    ff:a8:93:6d:6e:8f:da:c3:25:00:86:0d:9f:61:d5:
                    2b:43:1d:00:c0:68:22:25:fa:a2:f4:c1:c3:e5:31:
                    2f:31:8f:dc:e8:90:31:28:9e:04:6f:93:b4:b4:65:
                    5a:17:70:d0:a1:c6:23:d5:31:06:44:c0:cf:65:73:
                    e2:61:09:6c:9f:cb:bd:4a:6e:35:ba:06:f8:2a:46:
                    e3:f4:44:01:f6:fa:59:f5:9a:da:e0:69:b6:2a:cf:
                    a0:5d:1f:31:be:39:49:41:a6:3f:f2:a4:de:77:51:
                    cf:1e:1a:f4:15:d1:0d:a8:71:10:75:84:56:bc:f7:
                    20:ab:69:f3:a6:76:e1:6d:dd:03:ae:7f:a5:a5:fb:
                    f6:98:da:5e:ca:2a:ff:fb:c2:6d:90:9f:cd:2a:c0:
                    94:7e:a4:c0:a3:55:f7:45:3a:b9:21:07:d3:84:1e:
                    d1:db:5c:da:99:8e:06:b8:84:f8:86:7d:92:0a:7f:
                    0b:d4:55:01:47:0e:53:44:f1:c0:2a:20:ff:91:eb:
                    08:a3:30:0a:3a:6e:e4:12:3f:c6:e1:26:ba:b1:90:
                    01:cc:ec:75:4a:12:0d:0d:8e:cc:c7:97:69:0f:d5:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:2B:AA:85:1C:60:BF:98:75:5A:92:38:7C:76:D3:69:6E:0D:B4
            X509v3 Authority Key Identifier:
                keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:dc:ed:09:94:12:5d:e4:e5:6b:d0:87:42:22:f3:c5:a6:50:
         b0:c8:0c:fb:a6:e7:d2:fe:af:dd:53:48:76:ac:5e:b8:3e:31:
         88:60:76:b9:dc:2d:d0:11:51:a4:34:7f:be:84:3a:66:e5:1e:
         5a:3e:19:f2:83:b6:81:50:90:83:3d:b8:39:54:c1:0e:c5:42:
         4c:05:14:8e:f2:7d:63:76:50:7e:49:3a:91:83:0f:f9:83:b3:
         d7:3c:0a:4f:33:5f:5e:7c:2a:9d:5a:51:3a:5d:10:31:41:1c:
         19:0f:d0:01:61:1b:43:49:2e:1c:9a:ed:2d:35:97:04:74:51:
         63:7e:f0:ac:3d:d7:c6:b6:8d:d3:e6:64:40:ad:75:d4:0c:8d:
         fc:43:dc:71:c3:27:a2:7e:25:a0:6a:7f:dc:f2:97:ab:43:07:
         4d:f9:0f:c1:64:c0:1b:02:d6:45:53:26:75:fb:f7:67:d0:ff:
         f0:c8:bb:ca:17:a6:02:be:80:19:e4:67:36:20:19:58:4f:b2:
         8f:1a:ea:7c:5f:ce:cb:4c:8e:24:d1:13:87:e5:3c:91:07:8a:
         7f:de:af:ff:e8:4f:03:b7:a6:c1:50:23:d9:11:5c:d0:73:68:
         9a:12:30:b5:0e:53:93:b1:e0:6e:6a:87:f0:fe:20:51:0d:19:
         51:eb:e1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:40 2026 by rpki-client