Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
File:                     NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json)
Hash identifier:          +ebJCRiqw+GP2nO6Kaqp4snFOjzCib6Fz7/1NKBN2ac=
Subject key identifier:   F8:20:59:84:A5:50:3F:42:A9:8A:E8:86:42:34:26:37:98:30:A3:0C
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Certificate issuer:       /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
Manifest number:          5E
Signing time:             Mon 11 May 2026 08:18:04 +0000
Manifest this update:     Mon 11 May 2026 08:18:04 +0000
Manifest next update:     Mon 18 May 2026 08:18:04 +0000
Files and hashes:         1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: p2LtLdn2uPf6hKdhcyvfEuquDaED5rk90bdH5Ih6BlQ=)
                          2: 86227722C92A11F0872AB883C4F9AE02.roa (hash: OntMkkZwdIbl5SrNRK1u5UfChSdJYJCs+EVkHCslByQ=)
                          3: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: CpQzWFpl+Gw/RBNLdgsUn2ZniQcwnVLZoguxqXTYKyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
                          rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
        Validity
            Not Before: May 11 08:18:04 2026 GMT
            Not After : May 18 08:18:04 2026 GMT
        Subject: CN=6a0190bc-2735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:64:ba:51:b1:59:7d:60:6d:35:06:2a:2d:
                    aa:af:8f:62:57:43:a2:fc:0a:cc:e3:f2:b1:8a:dd:
                    6f:af:0b:57:1f:99:34:f7:55:68:13:74:20:85:e5:
                    27:a9:65:2d:ff:e9:32:34:68:c4:5b:77:31:5f:fa:
                    ce:05:35:db:53:aa:4d:fd:6e:62:c5:3a:27:21:09:
                    db:6b:01:7c:9e:7a:ec:a1:2e:4f:9a:6d:fe:66:d6:
                    93:03:c4:2e:95:2e:b1:f8:81:41:ef:86:cb:b4:24:
                    b5:3b:59:15:87:25:a3:06:de:65:b4:b5:e2:44:4f:
                    1c:0b:c8:c7:85:76:0d:b6:c9:26:29:09:29:65:95:
                    d7:a2:ac:76:60:58:38:8d:f0:62:4d:10:5a:e1:62:
                    06:8b:c5:d7:a7:50:8e:d5:5a:0a:cb:85:11:2c:6d:
                    d4:3c:3c:7a:cf:ff:59:eb:bf:7c:e5:6c:79:42:18:
                    e1:24:2f:f3:35:9e:6b:9d:bc:67:f3:6d:5f:09:fa:
                    c0:0a:a8:aa:28:72:33:f1:c8:ae:e5:bd:0d:a6:1a:
                    e2:30:2e:eb:c0:67:42:29:a0:36:87:72:4e:46:cf:
                    74:46:21:80:c6:ef:c3:4e:de:e8:4d:c2:fe:c7:03:
                    81:8f:db:a6:80:03:9e:25:c7:f2:27:43:ee:77:2a:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:59:84:A5:50:3F:42:A9:8A:E8:86:42:34:26:37:98:30:A3:0C
            X509v3 Authority Key Identifier:
                keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:03:4a:55:68:6c:44:fa:78:76:5f:94:0c:65:91:7f:4e:
         a4:98:66:e1:42:12:2f:39:41:0a:9c:76:e0:81:e1:a9:d2:55:
         b9:93:ba:73:67:eb:35:26:de:24:ba:b8:9b:f8:c9:49:fa:70:
         91:cf:01:62:69:50:52:db:2a:bb:dc:93:cb:16:73:32:98:17:
         f7:e9:f9:05:70:8c:ad:02:85:91:45:7d:c8:48:26:4c:4a:94:
         42:9f:e8:84:5c:29:9c:9e:b1:2d:3f:0f:c8:d9:f4:b7:10:9a:
         7e:db:23:22:00:2d:f2:34:a0:c7:87:e3:66:cb:26:ce:83:3b:
         39:12:a8:c4:70:6a:d3:1e:20:bf:76:9c:f6:f0:bb:8a:bf:16:
         40:4f:17:af:ae:36:25:c7:6e:45:ca:34:1a:ae:49:67:d6:d5:
         1d:a0:6e:bf:94:15:a8:30:b7:e6:86:b0:25:99:94:bf:ee:a8:
         5e:2c:82:94:a5:67:e3:bf:70:ba:09:57:fe:a2:79:21:0a:3e:
         15:aa:74:27:90:0c:1d:5e:97:11:c3:c1:12:c7:2f:f0:55:c1:
         a7:fb:2a:d5:17:19:c0:11:ef:eb:a1:cd:e7:1e:da:b4:32:50:
         85:91:3e:2b:b8:c4:5d:21:78:c6:f6:4d:ba:4b:e0:6d:69:9d:
         81:98:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:17 2026 by rpki-client