Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File:                     NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier:          BDJPUjrOKClRpQ5T+OIz6DXvZcKLZgC+gem3jN6Gcwo=
Subject key identifier:   93:F5:AE:CF:7F:F6:B5:98:42:8A:D1:3E:A9:8C:92:49:A4:DF:A8:94
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       1093
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number:          1058
Signing time:             Wed 22 Jul 2026 17:33:35 +0000
Manifest this update:     Wed 22 Jul 2026 17:33:34 +0000
Manifest next update:     Wed 29 Jul 2026 17:33:34 +0000
Files and hashes:         1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: dzsIeAMYhpZPenkgzDqP1YrsCd4EL8Xdoz0t7eQ4BaQ=)
                          2: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=)
                          3: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=)
                          4: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=)
                          5: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=)
                          6: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=)
                          7: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4243 (0x1093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
        Validity
            Not Before: Jul 22 17:33:34 2026 GMT
            Not After : Jul 29 17:33:34 2026 GMT
        Subject: CN=6a60feef-688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:e5:2a:21:80:ff:4c:cf:c8:e2:4a:16:3d:
                    14:d4:38:bb:24:8d:a6:05:b2:bf:b2:03:5d:07:77:
                    29:00:b2:a3:c4:8a:87:2f:aa:fe:90:82:f4:a9:5a:
                    55:22:5a:5b:3c:bc:f5:f6:58:1e:df:a2:54:4a:17:
                    53:90:24:ac:1f:d6:99:90:fb:63:73:ad:2b:0d:4b:
                    5c:be:5f:e0:b7:4a:5b:3f:78:bb:c5:ee:cf:5e:69:
                    0f:2e:4e:0f:d6:31:9a:dd:03:2a:a8:9c:50:78:d7:
                    e3:10:07:a5:e2:f5:4f:0f:05:ba:c0:d2:da:9f:79:
                    c6:79:22:f1:54:7a:33:3b:69:d4:f0:73:ad:d9:57:
                    90:e0:1e:73:2a:19:b3:dc:28:f0:9b:fe:f6:60:6b:
                    8d:d2:88:d9:8d:fe:1f:13:6b:1c:db:d1:38:84:0f:
                    e7:d3:63:28:e6:53:32:0b:5b:dc:a3:9f:1b:54:9b:
                    32:34:f6:7e:96:9f:6c:39:10:89:55:b8:08:af:2d:
                    2f:d1:b4:e0:a8:23:9c:4a:f9:8d:a7:df:07:36:7c:
                    aa:47:97:c5:e6:06:03:4e:a7:4b:16:ed:a1:f9:e3:
                    59:c4:25:96:8b:8f:4c:e6:19:88:e3:33:de:a6:27:
                    81:9f:0f:6e:ba:08:94:be:c0:60:01:c7:8a:7e:e3:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:AE:CF:7F:F6:B5:98:42:8A:D1:3E:A9:8C:92:49:A4:DF:A8:94
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:ee:ff:60:64:1d:de:e9:a9:40:d9:ab:a2:d9:dc:77:26:
         85:49:92:21:8a:2f:86:4e:2b:ec:e8:bc:94:0b:54:7f:ab:7c:
         34:0e:b5:a2:86:70:94:b9:45:9c:74:4b:11:c4:56:8b:52:69:
         42:64:b9:20:c3:41:ec:ae:21:88:0c:8a:68:6b:8f:f2:24:f6:
         f1:a6:7a:ee:46:f4:00:35:bb:65:22:92:c4:18:b8:7a:02:6b:
         e6:4c:a4:72:89:7c:be:bf:98:b4:97:6c:9c:7f:d0:bc:df:31:
         b6:8c:7f:87:f7:66:d7:70:09:ea:8d:19:ae:8c:eb:dd:c0:53:
         de:a8:49:a5:80:5e:a0:d6:26:da:b3:6d:3b:95:9d:42:6e:ab:
         70:df:cf:6d:65:ad:3d:42:ec:24:f7:55:9c:54:92:12:cf:44:
         de:f1:04:e7:cd:f7:9e:ba:19:ce:06:31:9c:1a:c9:b4:94:3f:
         61:a8:61:fe:75:ef:6a:f5:1c:3d:ca:be:c4:52:26:41:e9:28:
         e6:e7:86:f8:ef:cd:28:75:6e:76:48:2a:f6:53:7b:f9:bc:4a:
         08:2d:8e:85:80:4c:60:87:87:4e:37:18:a9:06:7d:0d:36:5c:
         00:a8:44:8c:9a:26:1f:4f:27:95:f7:78:df:cb:e5:ed:de:c6:
         cb:73:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:52 2026 by rpki-client