Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File:                     nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier:          52HuNjc0epX+4OOWL64UgQL2TVNn3neL62RL/J7gPRA=
Subject key identifier:   E6:E6:F6:35:E9:51:16:91:66:23:68:20:22:7C:15:68:61:F6:C7:31
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer:       /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number:          01DB
Signing time:             Wed 13 May 2026 03:39:43 +0000
Manifest this update:     Wed 13 May 2026 03:39:42 +0000
Manifest next update:     Wed 20 May 2026 03:39:42 +0000
Files and hashes:         1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: KRhUnt5ohpRXXVGbWy3bxYuRG7j3o7I5WnuxzCqjdnA=)
                          2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
                          rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
        Validity
            Not Before: May 13 03:39:42 2026 GMT
            Not After : May 20 03:39:42 2026 GMT
        Subject: CN=6a03f27e-05cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:ef:93:b4:ef:f9:a8:b6:7a:c7:57:3c:77:
                    8b:ab:4f:fe:b3:ab:5c:e4:83:eb:c9:07:c3:1e:5c:
                    2f:09:92:7c:2e:75:55:2c:f6:f7:01:f9:72:a7:24:
                    e2:68:e7:ef:f0:35:9f:29:ef:a5:18:76:cd:95:2f:
                    cf:aa:93:5b:c0:c3:1d:64:3c:9d:7a:94:aa:26:ae:
                    49:25:ee:e1:dc:b3:de:12:fc:f1:55:fe:df:f3:d4:
                    3d:6f:f3:8c:9a:43:63:bc:d5:01:ef:c1:34:3e:67:
                    89:c3:3e:a5:ce:04:78:97:b9:c3:6d:4d:48:cf:f1:
                    dc:2f:de:d6:76:98:97:d2:7a:e7:14:ab:f0:20:88:
                    f4:8f:a8:8f:1c:14:88:e4:c1:a4:14:09:ba:d7:72:
                    e8:40:ab:02:8a:3c:61:c6:a6:d3:d3:a4:d8:3b:8a:
                    bf:3e:60:e3:09:9d:f9:89:14:1b:3d:ea:5a:b0:d5:
                    12:4e:6b:df:f3:1e:bd:2d:f5:c7:ff:e3:87:1f:2c:
                    1f:36:ae:12:c8:55:ea:78:02:1f:18:44:1d:da:82:
                    90:9a:41:58:9b:8e:47:54:c3:f8:3a:1b:76:b0:af:
                    f2:a7:f0:80:ab:5d:9e:f3:15:2a:58:b2:e4:a4:07:
                    3a:97:6b:b9:04:5c:5a:8b:f3:23:ac:87:96:e3:ad:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:F6:35:E9:51:16:91:66:23:68:20:22:7C:15:68:61:F6:C7:31
            X509v3 Authority Key Identifier:
                keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:53:2e:57:eb:b2:e6:67:43:44:5d:9d:eb:9b:d2:65:a8:fb:
         c1:ba:c7:1e:df:03:26:c3:55:da:b5:0e:67:f2:ab:4b:26:70:
         82:31:eb:3d:17:8c:32:8a:2e:16:ec:62:e9:c4:e8:78:33:71:
         dc:4a:28:06:d6:f4:37:bf:73:76:be:1b:48:0b:76:0f:b7:c6:
         a7:4c:79:08:1b:d8:40:fb:80:1e:81:f5:d5:68:55:b4:31:f4:
         ad:3d:b1:26:ac:0e:84:3d:9a:ec:9e:f7:d5:5c:5d:a5:01:08:
         11:79:e0:a2:ae:bc:f0:50:f4:68:f3:49:91:e9:26:8c:d7:fa:
         a6:f4:21:97:a6:2e:d4:73:7d:83:78:1a:93:c5:fd:b6:af:a9:
         20:11:7c:94:4e:3f:28:2e:17:12:b2:ae:d2:10:40:d3:6f:a2:
         b5:06:2a:f0:de:a1:f4:f1:82:df:5f:6a:2c:a4:df:80:a4:b4:
         5b:ee:54:cb:03:d0:79:67:11:86:53:4e:16:9f:d0:14:4a:d3:
         a9:c0:9a:9c:07:fb:a7:1c:3d:bf:84:7b:80:1a:48:5d:61:e5:
         e0:9b:1d:6f:70:75:3f:60:57:f8:5a:5d:cc:e5:17:4b:b1:53:
         c5:a6:97:28:ee:8e:8d:e4:aa:9e:a6:a4:cb:f5:97:c3:63:2e:
         cd:e6:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:42 2026 by rpki-client