Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File:                     NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier:          0SsBBzCQJzLOj+jBXsd6cUouUR4HlgoX1n+sHFQvwlM=
Subject key identifier:   0E:29:E4:D2:E7:82:65:AC:ED:29:C9:BE:54:1B:8F:43:ED:59:10:8B
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer:       /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number:          0139
Signing time:             Wed 13 May 2026 05:31:45 +0000
Manifest this update:     Wed 13 May 2026 05:31:45 +0000
Manifest next update:     Wed 20 May 2026 05:31:45 +0000
Files and hashes:         1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: PiK78J1f+HV2f+Km79bjfF9AHYUKDzkQzO27bULWQ3Q=)
                          2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: WWBACUh4p1PPK9KcHPTTQfFx5ubcC8J0wopYYr+Csh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
                          rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
        Validity
            Not Before: May 13 05:31:45 2026 GMT
            Not After : May 20 05:31:45 2026 GMT
        Subject: CN=6a040cc1-fd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:33:51:a6:32:f4:8d:46:cb:47:c7:97:66:b7:
                    90:08:ef:a5:91:5a:fb:4f:31:f5:c9:1d:51:a0:f8:
                    e1:0c:79:02:c1:c0:a9:1e:a8:d8:22:1a:3d:29:ef:
                    6f:41:7e:7e:f0:a9:9f:0f:7c:52:1a:41:01:28:8a:
                    d3:bc:a0:fa:a4:bc:58:0c:57:e4:50:7c:89:95:ce:
                    25:4d:05:a4:91:23:57:c5:b5:30:51:20:32:7f:b1:
                    8f:c1:40:9a:8b:b1:9b:8d:52:22:a9:21:bd:7f:27:
                    a7:cd:65:2f:4b:1e:80:81:d4:6e:24:1f:ce:bb:64:
                    38:cd:b5:7f:d5:03:c9:f8:55:15:03:9e:f2:85:6f:
                    0e:fa:ec:ad:c4:20:81:5c:80:ca:5d:c2:89:52:cf:
                    76:0f:1a:f9:52:8f:34:d7:dd:1a:80:dc:e8:0a:f9:
                    4a:bd:95:37:17:f5:8a:d9:f0:a3:47:e8:28:39:45:
                    7c:42:70:79:74:45:3c:9d:86:81:d9:0f:94:51:05:
                    9b:15:43:ca:02:a3:7f:c9:ad:55:c4:94:e8:be:05:
                    f0:fb:dc:dc:85:eb:0f:12:25:46:a8:49:14:6a:c8:
                    b1:31:10:81:6a:ea:9e:c9:73:14:d5:46:0d:70:88:
                    e4:ca:64:00:2c:c3:70:e9:7d:50:ba:0a:c0:ec:35:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:E4:D2:E7:82:65:AC:ED:29:C9:BE:54:1B:8F:43:ED:59:10:8B
            X509v3 Authority Key Identifier:
                keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:69:8f:59:8a:ff:fa:75:69:49:c1:fb:76:f7:55:56:f9:
         d4:7b:3a:97:4b:d5:6d:49:b8:27:79:13:5f:4e:7d:88:e2:83:
         7c:76:a8:fd:77:a9:44:12:8d:79:a1:63:3c:85:40:dd:18:fe:
         61:82:83:d0:f6:07:82:2f:07:87:62:89:63:bb:7a:25:54:11:
         d4:02:ad:7a:5a:70:16:1d:3e:ff:e5:67:f3:88:d4:1f:5c:b5:
         9b:c7:04:76:b6:c5:e3:63:30:50:fa:cf:c7:58:bf:fe:0e:29:
         7c:5a:d7:db:8c:06:ef:ad:83:7d:04:ae:53:4e:9c:0a:70:08:
         f8:7b:bf:f7:76:4a:db:07:78:1a:fd:40:44:bf:4c:a0:49:ee:
         78:25:99:3e:51:f0:72:94:5a:3b:35:bc:f3:2e:b3:31:08:c5:
         da:72:26:c4:64:db:4e:80:e8:b9:3c:42:31:29:52:74:9a:49:
         02:60:1f:b7:d4:97:ca:f0:9c:02:01:f8:c6:5f:35:75:17:8b:
         a8:d3:bd:11:89:dc:9f:b9:a3:2e:be:a2:98:fc:b6:e6:37:3b:
         82:d4:11:4e:2a:bd:6e:d5:9f:5d:07:50:ee:90:6b:62:64:fb:
         22:69:6c:d7:2f:b2:0b:a5:5e:aa:eb:dd:50:54:bb:62:b3:28:
         4d:fc:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:25 2026 by rpki-client