Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
File:                     nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json)
Hash identifier:          9FWih6G2SewBIQv7rqvZc87bh1QJKK11/71NeG10QT8=
Subject key identifier:   BF:53:CA:CE:4D:34:42:E8:F2:A3:00:D5:3C:82:44:E9:63:CA:8A:4A
Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
Certificate issuer:       /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
Manifest number:          7F
Signing time:             Sun 15 Nov 2026 07:55:08 +0000
Manifest this update:     Sun 15 Nov 2026 07:55:07 +0000
Manifest next update:     Sun 22 Nov 2026 07:55:07 +0000
Files and hashes:         1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: J8G2U4l0wnfaReJ4h3OOMERsJT9r+s500vxaQeeuMIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
                          rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
        Validity
            Not Before: Nov 15 07:55:07 2026 GMT
            Not After : Nov 22 07:55:07 2026 GMT
        Subject: CN=6af9655b-c58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:42:26:44:c6:d2:f5:4d:57:f5:b9:49:0e:
                    f7:ac:d8:13:5d:2f:41:4c:ea:d8:92:06:49:a4:d2:
                    12:32:7c:38:ca:e8:d1:d5:c5:16:4d:05:cb:bb:3e:
                    36:55:02:22:43:41:ce:6c:e5:d8:13:da:dd:c6:25:
                    fd:ff:e4:76:33:af:86:82:38:01:5d:b2:85:46:c2:
                    ad:d1:13:5d:ce:b6:8c:87:7d:3e:e0:29:05:d1:d9:
                    c9:ba:c5:7a:33:cd:94:b2:05:9c:90:e9:ca:27:8c:
                    f0:ef:84:6c:63:d4:28:36:0f:fd:95:3f:40:d7:5f:
                    85:8f:f1:c0:ab:d1:c7:7d:b0:6f:64:9c:0b:3b:b5:
                    41:2d:39:27:b3:33:ac:48:f6:43:e1:14:6a:8f:bb:
                    79:0e:47:3d:5f:15:58:0d:7d:e6:30:6b:80:a2:22:
                    a6:bf:f4:e8:25:ad:8e:8c:39:99:ee:60:33:b3:ed:
                    03:f7:ee:38:f3:2a:62:59:9d:3d:e4:8d:46:2a:b0:
                    c5:65:72:34:c0:55:a6:94:9f:47:49:5c:de:13:86:
                    bd:64:1a:d0:2d:16:13:27:87:4e:68:0e:66:50:43:
                    c1:8c:3b:db:2e:72:e6:b5:ec:dc:a7:da:e0:de:73:
                    98:e8:45:6f:43:25:96:0f:ab:09:68:f8:a2:f2:4d:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:53:CA:CE:4D:34:42:E8:F2:A3:00:D5:3C:82:44:E9:63:CA:8A:4A
            X509v3 Authority Key Identifier:
                keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4f:cd:da:84:e2:5e:89:a5:23:be:16:ce:5e:d1:dc:62:d4:
         3b:b2:43:46:69:ff:58:58:b5:59:61:cd:38:bf:4b:b5:9e:2d:
         cc:07:03:e5:b2:fc:6e:f3:b7:33:83:08:3d:18:2c:17:17:ca:
         c2:a4:93:86:9a:ce:f3:22:f9:b0:e3:e9:86:1e:70:96:3c:ed:
         e6:4c:dc:e1:b9:1d:84:8b:d1:d5:7b:38:31:5b:6f:89:3c:29:
         ff:b1:1f:81:22:6d:99:04:70:84:b8:80:08:55:68:90:b2:5f:
         71:e0:53:5b:d2:d0:92:1c:8d:2b:40:2b:6f:bf:b8:80:d9:d4:
         03:ca:58:80:ca:24:d6:e7:7f:83:77:4d:3d:2e:b3:1a:22:6a:
         4a:9c:65:c1:f9:87:d9:f2:a4:03:79:06:8b:7c:91:76:fa:3c:
         83:37:24:d0:3f:e4:ed:94:4e:29:25:32:d6:8b:e4:f2:45:3c:
         32:8b:27:34:31:e7:3c:23:50:90:fd:ba:19:32:70:83:40:cd:
         99:79:54:16:0d:5c:8a:b8:c5:17:c1:cf:db:e4:14:6f:e4:73:
         0e:6d:3a:2f:d7:04:72:f9:85:e9:b3:70:75:18:bb:a4:9d:2d:
         cb:ad:ce:d4:64:e0:97:95:e2:8b:b0:ec:59:fa:5e:dc:67:9f:
         4d:ed:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:37 2026 by rpki-client