Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
File:                     nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json)
Hash identifier:          UrX3lKutDgirEbPsMbYON9qvQF1luRjGxkGXvzgWOH8=
Subject key identifier:   1E:20:75:FB:C7:6F:C1:75:41:EE:B0:DF:08:A5:D9:35:09:3D:04:5E
Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
Certificate issuer:       /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
Manifest number:          013C
Signing time:             Wed 25 Mar 2026 04:33:09 +0000
Manifest this update:     Wed 25 Mar 2026 04:33:08 +0000
Manifest next update:     Wed 01 Apr 2026 04:33:08 +0000
Files and hashes:         1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: 2YSBtFz1wvSg7uv7zFrybuxrsbMNY5LxIZ4Onqi3Jo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
                          rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
        Validity
            Not Before: Mar 25 04:33:08 2026 GMT
            Not After : Apr  1 04:33:08 2026 GMT
        Subject: CN=69c36584-cdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:dc:71:bf:ba:44:59:02:7e:90:11:79:cc:
                    06:71:c6:ef:20:88:79:bf:53:93:67:95:dc:a1:d2:
                    0c:da:3b:f2:01:9d:54:65:ae:6e:9b:31:50:6e:ec:
                    94:b9:70:31:4c:f9:d5:84:21:78:cb:c5:6b:7b:f2:
                    c0:9e:40:62:cc:16:ec:81:4c:df:b8:65:33:00:26:
                    bc:8e:2a:2a:f7:7d:37:e1:71:e3:a7:96:6b:98:c1:
                    c3:59:fb:8a:33:7e:2b:69:b9:90:88:f1:ac:11:e1:
                    db:67:ed:7d:01:ba:a9:5b:bb:dc:67:f7:e5:79:f2:
                    5f:55:63:fa:e6:86:8e:0f:2c:0f:9d:d9:bb:f7:de:
                    8d:28:cc:db:fb:1c:df:8d:a7:14:06:69:30:f1:51:
                    6d:9b:5f:f6:14:20:fc:d2:36:bb:11:c3:d2:5e:72:
                    6c:34:17:75:ea:b2:f4:7e:7d:e5:4b:87:3c:89:fd:
                    69:9e:1d:56:1c:20:11:ca:dc:a9:7c:d2:95:88:2d:
                    2e:f5:15:36:59:bd:de:8f:c2:39:88:b5:61:b0:3f:
                    e3:26:5a:a6:7d:07:8a:ad:26:cd:03:6e:81:4a:1b:
                    ce:74:7c:42:23:4e:75:cc:30:c1:bd:e8:2e:71:0d:
                    dc:12:af:1b:3f:ef:bf:2b:f8:65:ed:0c:6c:db:a1:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:75:FB:C7:6F:C1:75:41:EE:B0:DF:08:A5:D9:35:09:3D:04:5E
            X509v3 Authority Key Identifier:
                keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:21:42:ff:ae:f3:4a:78:30:4a:76:f8:af:bb:24:57:07:
         ca:ba:bf:08:5f:c4:36:c1:37:e4:6b:fd:db:a2:4b:8b:bd:5d:
         52:fb:ec:91:c7:fd:56:fd:f0:02:36:b4:16:e5:d1:2b:0e:26:
         a1:f2:48:21:1e:7c:23:45:b3:4a:53:ea:b6:c3:e0:db:d2:df:
         e3:ce:c6:35:b7:21:b6:ed:66:68:06:74:c0:67:0d:26:3a:a7:
         b7:79:bc:b4:a2:f8:08:ff:df:9b:64:82:f2:1b:a5:65:ca:62:
         19:52:04:73:03:a3:3a:6e:e9:34:b8:ff:62:b3:1e:6c:6c:77:
         90:2e:b0:55:11:2a:24:da:6b:22:ba:e3:a4:34:ba:ab:4b:30:
         d1:f1:e3:3d:21:48:d2:f9:62:da:b9:6c:a0:67:4b:41:85:2d:
         3d:b8:19:ac:54:b9:7b:c5:9c:03:e7:86:db:df:96:c8:65:da:
         02:a3:da:ea:cd:c2:9f:3a:ec:f2:ea:df:8b:c7:1f:24:d2:a2:
         37:15:71:be:40:ee:e4:36:55:fa:27:05:38:fd:b8:d9:4a:39:
         7c:ad:af:82:7f:2c:28:f1:c4:23:77:a7:9b:b2:90:6f:37:c8:
         ee:ed:5a:13:70:ba:e4:bd:c4:ac:ac:85:16:9d:27:a5:df:ef:
         38:c7:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:21 2026 by rpki-client