Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
File:                     NGwg84nbntxqG_L0AxqaFwO-h-E.mft (raw, json)
Hash identifier:          V3/DjUhN3Awjdcq0Qc2xwYI8+XARNR6oXHATIgHJqSY=
Subject key identifier:   D6:A3:61:F0:D3:9E:87:59:C1:5B:EF:AB:E1:02:BD:72:91:FF:17:5C
Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1
Certificate issuer:       /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
Manifest number:          51
Signing time:             Fri 27 Mar 2026 07:58:57 +0000
Manifest this update:     Fri 27 Mar 2026 07:58:56 +0000
Manifest next update:     Fri 03 Apr 2026 07:58:56 +0000
Files and hashes:         1: NGwg84nbntxqG_L0AxqaFwO-h-E.crl (hash: JydWWAQHVT5QBZzQpCwmXBwHt5md4IdmKJayUSEEFQw=)
                          2: 1E50C954D4B611F098D4561EC4F9AE02.roa (hash: 7aIkBV+3aas5G5uhevsYzrDlAsWboFwK8QPH4mndy+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl
                          rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1
        Validity
            Not Before: Mar 27 07:58:56 2026 GMT
            Not After : Apr  3 07:58:56 2026 GMT
        Subject: CN=69c638c1-b32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:ab:09:87:04:ea:aa:f5:b8:6d:cf:ca:2a:
                    0f:50:f3:6a:a9:ee:fd:1f:64:95:3b:93:c5:16:57:
                    dc:bf:d6:46:a6:2e:06:50:50:86:b4:44:a7:f1:36:
                    64:32:05:46:8d:1b:b7:f9:57:c0:a6:cf:8e:f7:b5:
                    9b:72:2c:d9:9d:3a:4b:07:24:1f:60:8c:a4:37:1d:
                    d0:a2:c1:f5:7e:68:d3:42:64:15:12:3d:93:77:42:
                    2f:45:e7:92:16:af:62:a1:7a:17:89:f9:11:d9:5d:
                    e4:13:6f:d0:bb:e3:45:6b:38:94:1a:d8:f2:da:eb:
                    b1:1c:eb:c8:90:d0:ec:0a:ca:00:40:d0:42:82:83:
                    c8:b2:36:26:0e:82:82:f2:86:ae:ab:c1:48:30:0c:
                    b2:d1:10:05:9e:b5:13:ec:8e:8a:7c:b4:da:01:a9:
                    03:c3:6e:5c:c6:f6:7f:2a:c2:65:fe:c9:62:61:f2:
                    5f:44:37:f0:70:3b:dc:8f:09:9e:d4:2d:13:3b:fa:
                    fd:60:86:d4:06:21:22:b8:85:15:61:f6:c0:cb:48:
                    46:a9:e0:0d:99:92:6c:c0:bf:e5:f0:7c:cd:54:2c:
                    23:76:40:52:b9:90:65:03:6c:77:53:26:d0:d3:d2:
                    00:70:aa:91:b6:bc:f8:90:ae:5d:82:5c:39:54:5f:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:61:F0:D3:9E:87:59:C1:5B:EF:AB:E1:02:BD:72:91:FF:17:5C
            X509v3 Authority Key Identifier:
                keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a4:ab:05:4d:d9:b7:9a:05:64:5c:da:23:6a:4b:62:9c:04:
         64:06:dd:4f:4b:49:a4:4b:27:bf:be:f7:6c:73:af:12:88:0c:
         06:d0:e7:75:f9:8f:05:f2:69:7a:c3:28:5c:53:14:de:1e:94:
         19:b1:09:95:9d:a2:56:72:52:89:f0:66:a1:d4:cb:5e:66:89:
         c2:36:97:9c:e2:9a:70:c8:17:a3:a6:fb:df:f0:01:02:e5:ad:
         9c:b1:fd:33:f5:dd:da:35:54:7a:89:fa:46:bc:07:75:84:bd:
         9e:d4:eb:7c:03:87:1b:78:ae:9d:be:e9:1b:a7:e5:05:41:cc:
         69:db:23:44:5d:d9:bf:24:45:a2:79:29:95:02:fd:ba:7a:91:
         cd:df:1f:b8:bc:70:36:b9:53:2b:21:ea:16:15:72:c4:46:a4:
         4c:87:0a:50:02:7a:0e:c5:76:a3:27:b0:77:82:82:74:df:8b:
         05:6b:94:e9:68:b3:77:59:01:50:e1:f5:01:a7:00:5e:49:3f:
         91:64:52:c6:d2:bc:be:25:cd:d7:e2:dd:32:6f:96:89:9e:46:
         5c:eb:93:e5:31:b2:83:43:6c:f0:dd:59:43:ee:03:e7:1e:27:
         d2:93:a1:bc:51:a2:d4:da:4f:c1:e7:33:8c:c2:13:80:11:ef:
         40:04:0e:c1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTkyODExMC8GA1UEBRMoMzQ2QzIwRjM4OURCOUVEQzZBMUJGMkY0MDMxQTlBMTcw
M0JFODdFMTAeFw0yNjAzMjcwNzU4NTZaFw0yNjA0MDMwNzU4NTZaMBgxFjAUBgNV
BAMTDTY5YzYzOGMxLWIzMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw4KsJhwTqqvW4bc/KKg9Q82qp7v0fZJU7k8UWV9y/1kamLgZQUIa0RKfxNmQy
BUaNG7f5V8Cmz473tZtyLNmdOksHJB9gjKQ3HdCiwfV+aNNCZBUSPZN3Qi9F55IW
r2KheheJ+RHZXeQTb9C740VrOJQa2PLa67Ec68iQ0OwKygBA0EKCg8iyNiYOgoLy
hq6rwUgwDLLREAWetRPsjop8tNoBqQPDblzG9n8qwmX+yWJh8l9EN/BwO9yPCZ7U
LRM7+v1ghtQGISK4hRVh9sDLSEap4A2ZkmzAv+XwfM1ULCN2QFK5kGUDbHdTJtDT
0gBwqpG2vPiQrl2CXDlUXw5JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1qNh8NOe
h1nBW++r4QK9cpH/F1wwHwYDVR0jBBgwFoAUNGwg84nbntxqG/L0AxqaFwO+h+Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFOTI4Lzg5QTYwQTBDQzlE
NTExRjA4OTdGREQ0RkM0RjlBRTAyL05Hd2c4NG5ibnR4cUdfTDBBeHFhRndPLWgt
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTkd3Zzg0bmJudHhxR19MMEF4cWFGd08taC1FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
OTI4Lzg5QTYwQTBDQzlENTExRjA4OTdGREQ0RkM0RjlBRTAyL05Hd2c4NG5ibnR4
cUdfTDBBeHFhRndPLWgtRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC2pKsFTdm3mgVkXNojaktinARkBt1PS0mkSye/vvdsc68SiAwG0Od1+Y8F8ml6
wyhcUxTeHpQZsQmVnaJWclKJ8Gah1MteZonCNpec4ppwyBejpvvf8AEC5a2csf0z
9d3aNVR6ifpGvAd1hL2e1Ot8A4cbeK6dvukbp+UFQcxp2yNEXdm/JEWieSmVAv26
epHN3x+4vHA2uVMrIeoWFXLERqRMhwpQAnoOxXajJ7B3goJ034sFa5TpaLN3WQFQ
4fUBpwBeST+RZFLG0ry+Jc3X4t0yb5aJnkZc65PlMbKDQ2zw3VlD7gPnHifSk6G8
UaLU2k/B5zOMwhOAEe9ABA7B
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:31 2026 by rpki-client