Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
File:                     NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json)
Hash identifier:          5XrfeD1hPk3WDtk3SxLadjGfzbEcs7gI04ARELHe/xg=
Subject key identifier:   9A:74:21:2E:21:74:AF:8C:AF:65:29:1A:03:32:7D:CA:20:3C:F9:8B
Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
Certificate issuer:       /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Certificate serial:       07AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
Manifest number:          079F
Signing time:             Tue 24 Mar 2026 21:14:28 +0000
Manifest this update:     Tue 24 Mar 2026 21:14:28 +0000
Manifest next update:     Tue 31 Mar 2026 21:14:28 +0000
Files and hashes:         1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: bLMsDVNrJ4m3K+3l2/HyifZSfITrifOFvN9PRelep1U=)
                          2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: +UAgsVaXZoSQj/ZYR+yFyFDWt3cCf9QbUv1c+9sTgjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
                          rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
        Validity
            Not Before: Mar 24 21:14:28 2026 GMT
            Not After : Mar 31 21:14:28 2026 GMT
        Subject: CN=69c2feb4-0198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:fe:e8:ea:14:fc:39:7b:8c:7e:aa:d1:3b:
                    44:83:67:0d:87:df:52:dc:b2:b4:27:0e:a7:21:60:
                    ef:25:b7:04:dc:5c:7e:24:de:a5:38:de:fe:be:93:
                    f5:fc:8f:1d:6d:31:61:f5:f4:41:51:ae:56:3e:38:
                    f8:b1:ce:d9:cd:2e:d6:ab:61:d6:c5:16:f9:11:e2:
                    e2:17:24:0c:aa:5f:f2:49:35:2b:b8:03:23:08:db:
                    71:5c:75:1f:23:c8:37:a5:4f:06:06:1f:df:86:2b:
                    7a:80:b9:29:3c:6f:48:a4:f9:94:3e:be:64:32:0d:
                    94:43:1a:9f:47:f4:24:65:85:21:12:65:50:76:17:
                    38:91:2c:03:ff:e2:b7:9f:e3:4f:f3:4c:88:29:35:
                    86:18:c6:ce:0a:27:56:56:95:33:cc:9c:df:d4:a4:
                    2a:96:c1:68:92:59:c2:2a:9b:93:22:72:fb:fe:09:
                    b3:40:a5:8d:90:a9:7a:f4:44:f9:f6:b4:20:54:9c:
                    42:c1:e2:98:d2:a2:a7:6d:91:a6:a2:d2:85:35:f2:
                    a8:2b:6e:42:64:a5:7a:74:87:a0:3a:ea:1c:89:81:
                    74:33:b6:08:67:8b:8e:53:ce:dc:7f:c3:9e:9f:a9:
                    ee:a5:6e:d9:6d:99:d8:40:49:f8:a3:14:d9:e1:f2:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:21:2E:21:74:AF:8C:AF:65:29:1A:03:32:7D:CA:20:3C:F9:8B
            X509v3 Authority Key Identifier:
                keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:59:00:47:dd:06:5e:e9:fc:ee:a3:d8:49:9d:aa:a2:65:
         16:3a:e0:7e:1e:a7:76:df:86:cf:e4:a5:00:fe:b7:90:3f:75:
         23:27:fb:be:bc:e5:6c:3e:3c:25:79:65:82:6c:87:f7:d3:5e:
         62:99:77:c4:86:01:d9:7a:58:f2:fa:3d:fe:44:a0:f0:c6:6f:
         56:7f:ed:d9:29:e6:ff:d4:20:a0:c8:63:63:aa:49:62:82:2f:
         dd:21:d6:5b:3d:94:6e:1d:8c:43:f9:0d:08:87:74:f3:17:0a:
         11:05:42:fa:1e:56:85:a9:e8:38:b5:be:2f:04:65:7f:2c:61:
         c0:49:a0:01:59:10:70:35:6f:c9:1e:92:4b:24:70:c2:94:7e:
         4d:5b:bf:87:04:6c:a1:44:3f:29:ce:0a:49:de:87:c0:e3:7b:
         c6:09:ab:73:69:d3:75:7b:00:25:68:5c:27:a5:64:f3:b4:68:
         89:ee:9f:b0:46:6a:d1:ce:ba:66:db:c9:7a:ed:af:2c:fc:2d:
         cc:6b:17:31:b8:00:9f:e5:f6:29:f7:bc:ec:2e:bc:3f:c1:54:
         10:f0:3c:d5:b9:25:a7:e3:12:64:6a:4c:e5:c5:33:9a:25:bc:
         fb:7d:4f:2b:40:59:a0:f0:e4:cf:0d:67:0f:3f:81:de:80:4e:
         29:52:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:24 2026 by rpki-client