Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File:                     NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier:          oy643UngUGxq7BZBRUXnH33xKC4kHHMnRrJk/oQFxLk=
Subject key identifier:   96:7F:96:3A:E3:5E:26:C4:02:A5:F3:C2:7D:F2:FE:65:80:08:CC:82
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer:       /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number:          01B4
Signing time:             Wed 13 May 2026 04:00:47 +0000
Manifest this update:     Wed 13 May 2026 04:00:46 +0000
Manifest next update:     Wed 20 May 2026 04:00:46 +0000
Files and hashes:         1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: sK9QPMko5jxDk/ropZRoYpvXpTLaqI6Qd36Ns0ZKjCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
                          rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
        Validity
            Not Before: May 13 04:00:46 2026 GMT
            Not After : May 20 04:00:46 2026 GMT
        Subject: CN=6a03f76f-0dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:06:b3:6e:67:7e:89:f6:ed:da:dd:45:71:
                    43:c3:a8:5f:d7:9e:3b:28:b8:d8:c6:96:e7:51:f7:
                    4e:f3:35:47:73:63:b5:4b:d4:8f:39:c1:41:59:34:
                    ed:bd:9e:06:3b:5a:03:15:fc:ac:d4:51:06:3e:d6:
                    5a:c1:bb:7b:e6:b4:85:dd:5d:c2:8e:94:d0:72:e1:
                    e6:83:75:08:8a:a0:37:2b:e6:58:f5:4d:c7:79:f1:
                    37:15:f9:e7:27:1a:78:db:fc:b2:47:89:ed:ae:24:
                    fd:ff:de:59:51:fe:0e:12:52:c1:fe:c1:6f:02:05:
                    b5:bb:54:73:f2:d3:ec:28:a4:f8:13:3a:71:27:3c:
                    15:08:ad:e4:ea:5b:8b:3b:0f:94:6f:6d:08:55:27:
                    01:9f:ff:64:32:d8:73:3d:ea:c3:20:cb:0f:14:7c:
                    03:90:31:91:d1:18:d7:dd:82:ab:95:0c:e1:95:c4:
                    75:32:57:24:52:c4:ec:47:ab:84:05:71:a4:bd:a8:
                    31:28:fb:9a:0d:57:9e:14:85:e3:e9:da:69:2a:5c:
                    a7:c8:23:54:c2:8f:2d:fb:01:02:3d:70:c0:f5:8a:
                    4a:e1:48:39:cd:b0:cb:96:62:01:fe:d8:a8:30:80:
                    8c:d7:59:74:ca:1a:e4:06:e1:6a:19:cc:a4:f2:5d:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7F:96:3A:E3:5E:26:C4:02:A5:F3:C2:7D:F2:FE:65:80:08:CC:82
            X509v3 Authority Key Identifier:
                keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:3e:1b:30:30:7f:63:be:85:97:36:b4:07:7e:26:91:7d:
         e5:a2:db:f6:f8:6b:c7:25:db:d5:2c:5f:56:83:42:15:e4:b2:
         a1:01:a4:ec:39:25:1c:dd:3a:39:14:7e:a5:18:f9:14:80:69:
         89:96:b0:cd:bd:f6:05:7b:57:aa:2d:01:63:1f:9c:8c:b2:94:
         cf:01:d0:62:59:ba:de:77:91:ba:1b:36:19:81:0a:5b:29:76:
         62:83:d6:de:89:2d:ce:3a:01:ee:6d:b3:b3:0a:78:ec:f4:52:
         45:3c:1e:1a:a4:3d:01:55:be:f8:ec:81:82:27:4d:6f:49:ad:
         86:9a:2d:a8:70:6b:3f:a5:d6:cb:1d:b6:97:db:df:de:07:ab:
         0c:94:a4:c1:7d:33:22:ac:01:1e:1e:05:bc:77:cf:92:52:58:
         3a:43:f2:0f:41:97:d7:61:42:cc:63:cc:c7:6c:f9:5e:65:f7:
         9b:52:52:de:ea:39:76:22:8e:d9:04:d4:b1:0a:dc:cb:7b:55:
         44:b6:6d:3f:46:0f:0a:cb:8a:e9:84:ac:ec:8d:a5:8f:7e:d5:
         3b:ec:72:3c:61:1b:e7:34:f4:5f:34:03:fa:a1:2a:51:10:1d:
         23:03:5b:a6:9f:dc:0b:33:95:3b:16:8f:ef:b0:f0:98:24:4e:
         3d:53:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:35 2026 by rpki-client