Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File:                     NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier:          iWSJtEfMkRNuXRsEbf0WSqrt1VepxtGsGTjURt9y08k=
Subject key identifier:   F3:ED:FA:91:AE:96:5E:84:10:70:F8:EB:12:D6:EB:EB:ED:CD:53:7F
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer:       /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number:          0101
Signing time:             Wed 25 Mar 2026 05:21:52 +0000
Manifest this update:     Wed 25 Mar 2026 05:21:51 +0000
Manifest next update:     Wed 01 Apr 2026 05:21:51 +0000
Files and hashes:         1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: fki8aYH7QHgVOJDw85eWAJ/h9V4FQbey6bF7hmezvcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
        Validity
            Not Before: Mar 25 05:21:51 2026 GMT
            Not After : Apr  1 05:21:51 2026 GMT
        Subject: CN=69c370ef-9db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:a2:5e:61:b0:c6:1a:de:b8:1c:51:ff:bf:
                    3f:b9:35:73:c9:ce:3b:79:2a:21:fd:f8:4d:ed:e9:
                    a8:11:1d:75:a1:78:52:e1:a0:ef:22:d6:17:c3:37:
                    7a:2a:67:ed:19:28:e4:2c:3e:07:c8:67:a9:6e:54:
                    a4:73:61:ff:7c:2e:8f:69:fe:50:7f:26:7f:12:89:
                    fe:7a:07:cf:5f:ee:5a:26:45:e5:69:83:05:2d:a5:
                    d6:56:14:4d:5d:63:6b:7c:06:44:30:49:28:7a:7e:
                    b5:34:fa:29:55:4c:56:54:74:b1:26:c7:23:e4:4a:
                    3a:02:15:ec:3c:2a:dd:f2:51:ee:55:4a:a7:25:8c:
                    0a:73:57:63:e7:34:92:d1:12:7d:75:ff:8d:96:bb:
                    10:0f:6e:f0:3d:04:39:b1:16:87:e1:fa:aa:8e:aa:
                    0e:c8:79:3c:c9:b0:2b:c2:8f:d2:99:56:bf:3a:3b:
                    a5:dd:46:e6:2e:10:91:b5:c8:d5:d8:62:3c:99:60:
                    d3:77:d3:59:df:1e:05:d5:a0:f7:69:5c:ab:f5:a6:
                    c5:4b:85:4b:af:0c:7a:70:da:e3:e0:a9:f6:98:10:
                    cd:a1:42:be:e2:0f:ce:47:a9:d6:3e:0c:e3:00:b5:
                    a6:4d:26:95:8b:9e:20:9f:51:06:a3:77:5b:cc:06:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:ED:FA:91:AE:96:5E:84:10:70:F8:EB:12:D6:EB:EB:ED:CD:53:7F
            X509v3 Authority Key Identifier:
                keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:55:a7:3a:6f:ec:94:f1:51:88:5e:10:1b:b0:8b:b1:ea:fb:
         5e:66:d2:bd:cf:d9:98:1d:9a:ff:d9:40:8a:08:9a:e2:22:97:
         a2:4f:cc:dc:8e:27:55:21:8f:d2:cd:16:55:a3:56:1b:6a:89:
         99:cb:57:98:fc:39:97:86:94:91:97:99:a9:2d:cc:ff:9a:5e:
         fb:45:71:cd:f4:1d:58:c0:ee:c3:6c:67:ae:1a:ef:59:58:ea:
         fc:0b:35:b2:94:68:ac:63:07:82:aa:42:16:d9:4b:db:ce:fb:
         78:7c:b5:f1:44:82:4f:a4:fe:c9:2f:53:44:41:16:bc:a8:8e:
         7c:c2:bb:79:c9:f2:29:36:7b:56:ef:53:00:f2:6f:0f:c3:5c:
         41:57:6f:ce:b6:b1:7f:f7:ac:fc:a5:db:ed:69:02:0a:51:fb:
         71:c9:85:37:2d:0d:41:67:c5:38:05:6a:e9:23:74:a5:32:9c:
         33:44:e6:d8:39:4f:fe:50:b4:2c:16:17:04:b3:b7:27:c2:a2:
         4d:25:fa:d3:4d:ba:a4:9f:dd:70:ce:01:35:bc:a7:c2:3b:82:
         4f:ad:5d:66:d7:e7:b0:db:0e:32:b0:3c:6a:46:99:e4:5d:15:
         d2:cb:c1:b6:c1:56:b1:f8:dd:57:8a:4f:f5:38:0a:df:f5:c4:
         f7:91:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:56 2026 by rpki-client