Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
File:                     NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json)
Hash identifier:          7xQ4T0IgDEBt42eLTbY6QTKh+taQcyTcUzdtwYLsXPA=
Subject key identifier:   77:21:26:99:4A:98:8F:F4:2F:A6:DB:61:EE:10:DC:44:97:E2:3C:EC
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Certificate issuer:       /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
Manifest number:          84
Signing time:             Thu 23 Jul 2026 09:37:48 +0000
Manifest this update:     Thu 23 Jul 2026 09:37:48 +0000
Manifest next update:     Thu 30 Jul 2026 09:37:48 +0000
Files and hashes:         1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: LXWAMwvB0QkLXddfrTX+C3kYJO6DyQaCtApXdf83sMU=)
                          2: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: CpQzWFpl+Gw/RBNLdgsUn2ZniQcwnVLZoguxqXTYKyI=)
                          3: 86227722C92A11F0872AB883C4F9AE02.roa (hash: OntMkkZwdIbl5SrNRK1u5UfChSdJYJCs+EVkHCslByQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
                          rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
        Validity
            Not Before: Jul 23 09:37:48 2026 GMT
            Not After : Jul 30 09:37:48 2026 GMT
        Subject: CN=6a61e0ec-6046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:a2:31:ff:34:72:fd:4f:27:f3:3b:2b:09:
                    3a:3d:55:02:68:dd:db:ae:17:c5:b5:8b:bf:6f:f2:
                    e0:40:ff:4a:41:a7:10:81:02:20:55:b8:1f:3f:47:
                    c4:cc:ae:0d:bf:6a:bc:81:40:7f:ff:47:90:98:04:
                    ad:e1:4b:de:2f:22:fb:fe:03:45:35:e8:93:44:50:
                    47:d3:a9:9b:3c:8b:da:36:15:f0:15:3e:98:9e:fa:
                    88:d6:16:bc:85:98:a8:06:0c:a7:90:5f:e7:af:a3:
                    95:5a:69:0d:8a:41:19:4e:08:7a:b9:22:e1:2e:6c:
                    1d:3e:3c:cc:b1:ac:07:ed:3a:08:66:2e:10:cf:a1:
                    ff:f3:95:a7:4e:f3:49:b1:0b:a6:ea:35:2f:f5:77:
                    5d:19:07:0d:b3:07:96:2c:c0:d0:d2:fd:e4:8c:e6:
                    26:b4:72:2d:92:e2:af:f1:5c:40:05:1a:97:1d:00:
                    5e:cb:79:43:56:65:ed:a9:56:31:d7:08:2d:a6:d2:
                    f9:06:b8:4c:58:4d:c3:6a:30:43:c2:44:90:48:ff:
                    11:b3:76:1c:74:57:e3:75:87:40:7d:b3:ec:0d:a6:
                    10:06:d3:0b:bc:a3:ba:75:6b:72:79:d1:5e:cd:78:
                    42:91:43:c8:b8:7a:c7:b4:3d:23:38:f0:c0:da:98:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:21:26:99:4A:98:8F:F4:2F:A6:DB:61:EE:10:DC:44:97:E2:3C:EC
            X509v3 Authority Key Identifier:
                keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e8:20:16:68:71:94:2b:02:83:c9:1e:bc:d2:83:fb:53:83:
         90:fe:b7:a8:34:00:3f:2c:6d:81:8b:a6:93:73:f6:de:16:39:
         9e:75:1d:f7:c7:a4:ab:05:22:8f:56:74:70:93:60:50:ca:38:
         c0:86:0b:97:1e:a0:99:19:49:bc:85:c7:91:a2:1a:be:e2:16:
         1e:cd:5e:89:22:5e:c7:2d:bf:de:20:a4:71:0f:e4:6b:62:5b:
         b1:5b:28:05:e4:2f:55:5d:3f:bc:14:a6:f8:75:4b:12:2e:3e:
         a4:7d:9c:a7:fa:9b:17:e0:3a:f1:a2:38:9c:af:64:1a:e2:7f:
         22:f5:b1:6e:43:66:d9:6c:6e:2a:74:48:8a:87:1e:7d:49:05:
         32:e8:fe:38:1f:66:ad:8c:78:bf:4b:a7:a1:9a:6a:e8:7e:03:
         6d:0c:a2:7c:0a:d1:83:95:2a:a8:e2:9f:5e:c6:ae:5e:aa:e1:
         b7:1a:4d:72:c8:50:96:74:d5:92:e9:b5:a0:10:dc:8c:4c:9a:
         f5:d6:f0:f8:db:1d:79:73:61:13:bb:dc:e3:65:e2:56:50:6d:
         1b:7c:7e:59:32:50:bb:c0:c1:c9:83:c4:3e:6c:72:89:10:b3:
         d5:e2:f1:47:62:a4:78:eb:5f:10:ef:2b:64:a6:39:fc:88:1c:
         5e:94:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:05 2026 by rpki-client