Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File:                     Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier:          r5THDC4cu3DKptZOSObujNG4MD3VXhvZ14KUopOsvok=
Subject key identifier:   44:EC:04:B5:5A:EF:DB:B7:1E:2A:FF:D8:B5:86:2A:91:53:D7:E7:4A
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer:       /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial:       2817
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number:          2817
Signing time:             Wed 22 Jul 2026 15:41:45 +0000
Manifest this update:     Wed 22 Jul 2026 15:41:45 +0000
Manifest next update:     Wed 29 Jul 2026 15:41:45 +0000
Files and hashes:         1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: SyTFbMEIXSXl2n1Zy8G20Pi9XcgbcT3mcJj6AjXrlkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10263 (0x2817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
        Validity
            Not Before: Jul 22 15:41:45 2026 GMT
            Not After : Jul 29 15:41:45 2026 GMT
        Subject: CN=6a60e4b9-507e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:53:f9:ed:11:f8:bf:06:ad:5d:57:b5:4b:
                    9f:09:24:6e:7a:3f:e6:eb:ef:70:61:d0:f0:fd:58:
                    00:15:5f:c9:2e:dc:5a:68:24:0c:e6:18:e4:d9:53:
                    12:28:14:27:c8:3d:0c:e1:84:52:df:12:43:92:a3:
                    0c:72:42:cd:73:89:54:f9:1d:62:91:78:f1:df:28:
                    19:0e:b0:2f:c7:bc:63:4d:d3:95:a7:95:5f:56:76:
                    b9:c2:70:9b:ec:26:1c:4a:3e:3f:37:98:8f:29:e5:
                    81:ce:da:04:6f:3f:ee:82:2f:7f:66:28:bf:07:d9:
                    13:b3:cb:df:d0:bb:40:dd:23:eb:b7:97:09:c8:db:
                    0d:92:f4:03:9f:fb:20:09:e3:db:95:74:a6:d2:80:
                    a1:18:f2:bf:9f:f5:64:13:94:af:04:29:1a:b7:bf:
                    2a:1d:94:7c:e0:63:3f:41:6e:ed:31:e7:79:7a:c2:
                    3d:a3:22:98:be:45:a8:7f:a3:1b:83:4d:9e:eb:58:
                    98:84:3f:ff:93:e2:36:cd:18:13:11:fc:09:de:88:
                    1f:a0:6b:37:ba:35:11:76:94:45:44:32:b5:f7:17:
                    2d:28:4e:47:0d:e9:73:6e:46:c8:c0:b9:fc:7f:7b:
                    90:be:ad:af:c9:38:4e:db:a7:c8:2d:42:f3:e1:71:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:04:B5:5A:EF:DB:B7:1E:2A:FF:D8:B5:86:2A:91:53:D7:E7:4A
            X509v3 Authority Key Identifier:
                keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:03:70:b6:07:75:7b:2a:49:e3:3f:d7:e0:7e:31:95:ae:
         86:05:ae:07:f3:56:9b:0c:27:67:14:20:6e:6a:56:75:f9:b0:
         7e:cc:f4:2a:26:36:6f:41:c7:02:2f:78:13:0f:7e:b2:89:7a:
         26:5a:cd:66:05:c4:c6:2a:49:55:be:7f:61:6f:fd:fa:db:c5:
         2e:41:a3:c7:5b:4b:6e:43:a2:39:41:54:8e:8a:a5:36:c9:f9:
         d8:ba:48:e6:ae:86:dc:f7:09:b2:85:9c:fc:55:2b:bc:dc:e6:
         58:c3:71:3b:ea:c4:68:10:79:44:03:95:eb:17:35:36:1e:29:
         fd:04:d6:ea:75:13:4b:5a:e0:5d:4f:d6:e2:df:13:02:80:89:
         45:02:84:6d:b9:ae:ab:71:b7:b2:93:e3:68:3b:82:e0:61:ab:
         c0:b6:ef:62:39:7d:43:86:ae:28:c3:0e:9e:de:ed:f7:83:63:
         15:ec:66:64:58:2f:e7:68:8f:12:bb:dc:f7:ec:51:9c:6a:2f:
         d6:d3:0d:31:bd:a3:25:0f:de:83:ee:26:fd:ad:c4:6a:58:43:
         c8:e4:ee:ef:72:45:97:2d:d1:c2:db:fe:55:c7:f3:2d:0a:6c:
         f6:58:52:32:ee:47:ca:3d:d2:f3:40:03:53:85:6b:d9:3a:e2:
         8f:3d:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:06 2026 by rpki-client