Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File:                     NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier:          x1ElWFvWVgm/f1Komr4laknh9L+e+W8P3HbmN9iMChA=
Subject key identifier:   C9:75:5E:15:89:3A:20:AB:06:F8:B4:7C:0C:39:19:D0:A9:57:8D:2E
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer:       /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial:       1E89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number:          1E7A
Signing time:             Tue 12 May 2026 16:04:40 +0000
Manifest this update:     Tue 12 May 2026 16:04:40 +0000
Manifest next update:     Tue 19 May 2026 16:04:40 +0000
Files and hashes:         1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: JLqDCHREI9Pxte5kdOojJV1xVq3WOT5x7khg3tfKNt0=)
                          2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: gQzb1U7meIgu9bThPWgr8GqCZnh7L5ZruQYTrZjl8iA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
                          rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7817 (0x1e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
        Validity
            Not Before: May 12 16:04:40 2026 GMT
            Not After : May 19 16:04:40 2026 GMT
        Subject: CN=6a034f98-c7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:0c:57:c3:35:e2:26:9c:9b:16:1f:03:fe:
                    bc:11:34:fb:69:4d:86:a8:f8:2b:96:6a:68:b3:d5:
                    d5:0d:e3:fd:e3:eb:e5:c8:e1:42:1f:7b:fc:e1:21:
                    37:d8:c2:9b:ce:ae:6e:70:41:d4:52:be:f3:3a:41:
                    d6:42:2c:0e:82:fc:8e:50:c2:64:26:54:13:01:ef:
                    30:34:dc:c8:fe:e8:4c:12:12:5a:33:51:27:0f:4e:
                    e9:1b:a7:0d:02:d0:57:f7:9c:77:4b:da:df:8a:5f:
                    d1:31:ab:41:cf:6f:37:70:10:0e:aa:b1:d7:bd:36:
                    5e:dc:84:3d:d4:f2:04:03:38:4b:a5:09:bf:a2:be:
                    fa:7a:d8:4c:74:a7:d4:cc:f3:c8:e9:4e:54:bd:f7:
                    89:57:19:92:f0:0d:b6:d6:18:e6:be:33:6e:bf:6b:
                    80:6d:d5:d1:4f:35:f0:4a:f9:0a:e9:ef:c0:e7:81:
                    1e:1f:d4:82:63:21:73:92:ad:5a:42:cd:0c:5d:f2:
                    0c:4d:12:dd:4e:b2:70:44:4c:44:ca:bf:09:30:80:
                    77:10:bc:ec:40:d5:b5:cf:24:61:7d:52:af:9f:b5:
                    5e:81:cf:bf:87:e1:06:74:40:0a:c9:93:48:8b:36:
                    7b:58:10:cf:2d:58:a5:ce:7e:6e:71:4d:75:37:42:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:75:5E:15:89:3A:20:AB:06:F8:B4:7C:0C:39:19:D0:A9:57:8D:2E
            X509v3 Authority Key Identifier:
                keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:f1:de:27:48:74:17:ce:31:fb:f1:78:a2:73:bc:2f:1c:
         28:a3:d9:74:73:c5:18:a0:77:08:40:57:c6:cd:c8:fe:99:1b:
         80:ef:3c:47:62:b2:6c:59:d2:bc:71:7d:7b:80:1a:65:14:ca:
         d7:3d:d6:16:3e:67:bd:0b:75:93:dd:27:60:6f:f6:5e:6a:7d:
         1f:3e:ec:e8:04:3b:72:98:68:ad:aa:aa:2a:d6:9a:52:73:d6:
         a4:62:a9:a2:85:b0:c5:59:62:be:11:aa:2d:ae:06:26:f1:85:
         98:31:6c:6b:04:16:44:03:24:ea:d1:1e:8d:f8:3d:b6:ab:20:
         aa:3a:61:43:de:e9:48:a2:4b:d5:d1:96:22:84:ef:c6:99:41:
         5d:4b:bf:7e:79:f2:5f:62:88:5b:2f:d7:10:c5:51:7b:9f:bb:
         27:07:43:a3:69:17:3b:93:39:c7:54:83:d4:fa:39:55:35:8c:
         f4:cb:a5:b9:1e:46:c9:bf:a0:90:56:f2:44:10:61:6f:3c:84:
         98:1b:0b:d4:ca:31:c2:b9:71:5e:22:88:69:f5:ea:63:35:da:
         ab:04:d6:1d:d7:9e:8e:0d:29:52:0f:cb:12:f7:50:c2:e5:6d:
         6d:8d:64:c3:ae:1b:7f:c6:bb:9c:f4:41:bb:13:2f:48:df:4d:
         2a:bd:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:08 2026 by rpki-client