Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File:                     1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier:          hEgZl/N7NtHib2UphwJsVLJrsU53vMQA2m5MlILHPME=
Subject key identifier:   EB:EE:EF:37:14:44:16:9B:CE:34:B8:1D:2A:44:AA:ED:02:A8:90:D2
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       0970
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number:          0944
Signing time:             Tue 12 May 2026 20:15:30 +0000
Manifest this update:     Tue 12 May 2026 20:15:30 +0000
Manifest next update:     Tue 19 May 2026 20:15:30 +0000
Files and hashes:         1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: hD3HciSieQo3RBjeSosLfmfv9DfgwzqdXpU9Xx6d0no=)
                          2: F814A546C01411EA912AC365C4F9AE02.roa (hash: 2YifR6mo0XxyvefgvbrrBcwPF0iO1qzlQeVmu5FFRlM=)
                          3: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: Bj8A4NZrddWzPk++1ddD9UKj9zRvtbRXj5gzO8ZrsdM=)
                          4: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: bQMzJivgeDG/wNPjtddFIl5YfZWO1LwIp1brxtXdfws=)
                          5: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: QLo9uos2f56X5X/VrcuB/MS45CAXbYbUhX5+j5oSmU4=)
                          6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: aTjLSFkQ3QZR9juw9jwKuB+0VR1mCGyj1CN0RBmT8pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: May 12 20:15:30 2026 GMT
            Not After : May 19 20:15:30 2026 GMT
        Subject: CN=6a038a62-5695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b5:6d:7f:8d:33:e4:32:c4:19:d4:92:12:19:
                    79:69:c1:01:28:23:46:d4:55:5b:1c:b8:d5:02:47:
                    62:20:de:74:2d:28:bb:f4:9d:f9:87:0f:d0:83:48:
                    1c:b4:ba:d4:24:11:9e:42:ad:67:5f:16:21:1a:71:
                    d3:54:0a:31:86:29:04:1a:bc:9d:c0:d7:f8:78:ae:
                    a1:38:57:8a:2c:bb:64:34:9a:28:8b:d2:90:0b:c6:
                    7c:c1:ba:2b:28:26:6d:10:3a:08:9b:32:4c:dc:a8:
                    52:86:fe:8e:20:d0:f4:ba:54:d6:92:88:67:64:f8:
                    35:35:01:de:83:91:db:ac:8d:62:70:34:d4:6e:8b:
                    61:26:30:41:b0:61:c3:b0:44:d4:99:79:e4:55:a9:
                    39:e0:17:19:08:8e:87:58:ce:11:6e:a5:43:c0:2c:
                    c3:14:d2:20:0a:16:db:e7:97:6f:76:5b:9c:47:88:
                    3d:5e:27:13:12:6f:45:59:30:a3:37:f3:7a:d1:6e:
                    f5:6c:64:17:3e:99:78:59:5b:a1:11:8c:b9:54:7f:
                    a7:3a:86:5c:fd:f3:97:d6:ba:9b:07:b8:5f:97:06:
                    31:a3:b5:24:28:70:56:e9:90:ad:ba:98:38:25:18:
                    76:ca:a3:e5:8b:ed:a1:b7:a3:d4:51:c8:58:5c:82:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EE:EF:37:14:44:16:9B:CE:34:B8:1D:2A:44:AA:ED:02:A8:90:D2
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7e:a8:b1:79:20:45:93:70:f5:5b:cc:ab:ae:22:04:9d:5a:
         cb:92:55:d0:f7:03:73:5d:2e:ac:3f:c9:69:38:76:5f:79:53:
         b6:5a:5a:92:6d:16:c1:1b:90:c1:cf:b7:7b:0c:9f:24:5e:70:
         99:86:45:fd:a4:af:4d:d6:40:27:a5:a4:67:ee:8e:94:c9:76:
         76:cd:3d:90:26:d1:ca:37:39:1b:92:19:18:0a:75:69:a5:03:
         32:e5:e1:56:6b:3e:6e:85:8d:4f:2d:8d:0f:09:6a:55:13:eb:
         f7:7d:d4:4c:39:a4:61:f9:2a:a1:4c:d7:4a:b4:8d:87:ea:3e:
         6a:e5:94:b8:cb:cd:a6:05:f8:42:d5:99:7a:65:9c:96:31:56:
         d1:cb:1e:68:46:d3:1e:36:5e:8f:5e:31:9e:72:12:e9:14:78:
         34:9e:07:a5:54:37:f5:49:b4:70:89:73:db:e6:a3:19:7e:d8:
         2b:bb:3e:d1:0a:9e:45:05:12:b2:04:af:f6:3a:aa:e1:a2:4b:
         e5:b5:2c:8c:b0:f4:e1:40:6a:3e:5e:16:1e:84:ac:7a:3d:8a:
         51:b5:d7:6f:70:eb:3d:0d:89:e8:c7:a1:60:5e:29:11:8f:6d:
         22:1f:17:ff:7c:63:84:6a:b8:4a:6a:d1:55:2d:30:11:08:d1:
         34:75:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:28 2026 by rpki-client