Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          Zvvar6jxl6rqYHlNiDE5MeipP2Q6ZBb+L4dA6ebLigw=
Subject key identifier:   02:13:8B:28:2C:BB:2F:43:CE:59:BD:FF:88:CD:01:6F:D0:01:12:10
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       071B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          0713
Signing time:             Wed 22 Jul 2026 22:42:58 +0000
Manifest this update:     Wed 22 Jul 2026 22:42:57 +0000
Manifest next update:     Wed 29 Jul 2026 22:42:57 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: Y3dXpS17jGC+HKXw+2ch1xeW5nmx4FrFMyfuWYhUT5A=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Jul 22 22:42:57 2026 GMT
            Not After : Jul 29 22:42:57 2026 GMT
        Subject: CN=6a614772-abf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:d0:f2:60:03:50:39:14:c3:15:2b:86:96:
                    88:fa:50:fe:46:53:e8:3b:95:68:cb:82:a6:1c:be:
                    ef:36:d1:c2:80:4b:6d:18:85:f8:32:53:f2:5e:14:
                    8d:13:25:a2:95:bb:59:07:31:31:ac:0e:67:0f:39:
                    e3:c2:af:68:cf:2a:78:ea:d3:90:0a:4e:2e:c3:1b:
                    87:a5:2c:ba:b4:9e:b6:e3:d4:74:8e:7e:dd:77:ef:
                    91:1d:3c:ae:41:f7:9f:d3:e5:92:1c:c9:fd:84:50:
                    6e:90:88:70:85:9b:02:d0:5d:bb:db:34:44:82:3b:
                    72:61:1b:d5:3f:f6:80:f3:a8:ec:57:5e:46:6c:df:
                    0a:49:7e:b0:63:93:3e:a8:36:48:5d:46:06:72:ae:
                    3a:78:0a:c9:4e:08:d1:76:31:b5:71:23:ac:5a:e2:
                    44:7f:32:2b:73:48:47:a3:47:56:4b:84:fa:db:e3:
                    e0:db:30:c5:44:eb:1e:f0:42:73:7e:8e:7a:52:04:
                    3e:16:0e:df:1d:8c:23:69:2f:70:4b:a8:44:77:7d:
                    44:cb:b8:8a:4d:06:46:05:7b:3b:44:1e:0f:4a:bf:
                    c8:9f:49:68:d8:d3:cb:85:50:db:5b:97:f1:b5:ce:
                    14:69:5b:d8:f9:33:c3:87:f9:e9:d0:70:c6:80:42:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:13:8B:28:2C:BB:2F:43:CE:59:BD:FF:88:CD:01:6F:D0:01:12:10
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:00:83:a6:a5:52:19:ea:17:38:22:a2:76:62:e8:e2:97:58:
         29:ed:3d:ed:b4:92:4c:af:30:78:d8:cd:d5:5e:01:56:38:6a:
         e4:e4:01:51:53:84:91:a5:f3:7d:ba:73:1a:06:d6:4f:df:7c:
         bb:ec:23:14:71:77:22:a2:6e:e9:4f:cd:69:12:eb:55:e7:a6:
         eb:69:dd:e1:08:1d:17:fb:86:df:1e:89:c7:30:b1:cd:bc:8a:
         1b:ec:7d:65:43:92:8a:90:11:ef:d3:3b:23:47:20:56:15:f6:
         d7:25:85:f0:e1:23:15:9f:90:cb:1f:69:44:71:d4:9f:f8:16:
         93:47:e0:0c:03:d6:06:29:2b:a3:99:53:99:4d:a3:b7:bb:5d:
         49:4b:3e:75:59:33:a0:46:c2:4b:a4:ed:d6:1c:33:35:92:1b:
         3b:be:1b:f6:ba:8e:25:5d:c9:55:54:db:97:d1:ae:73:bf:41:
         0d:8a:b6:43:17:76:9f:79:81:ea:03:91:1b:17:84:a2:45:c4:
         82:d0:f9:90:60:f8:2e:da:f9:79:41:f9:8b:7a:72:b0:6a:19:
         03:db:71:4e:de:f1:1c:66:6d:7e:c7:ce:0e:6c:e4:ed:f5:3e:
         35:12:00:3c:9b:84:f8:20:92:4e:82:36:9d:86:21:e5:ae:15:
         07:85:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:08 2026 by rpki-client