Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
File:                     NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json)
Hash identifier:          D4dmPihi6w7HNqvCXK3SQWhQ3t4a7CvCeneVar7+vsc=
Subject key identifier:   63:3E:C3:B9:8D:59:D9:C8:8D:88:70:63:5F:1F:97:32:9E:E2:08:3D
Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Certificate issuer:       /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
Manifest number:          2E
Signing time:             Thu 23 Jul 2026 10:45:08 +0000
Manifest this update:     Thu 23 Jul 2026 10:45:07 +0000
Manifest next update:     Thu 30 Jul 2026 10:45:07 +0000
Files and hashes:         1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: OFChXs49a1tnMzNK+CFM8fwbdh1PlAdLZGY6LP8cuJ0=)
                          2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
                          rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
        Validity
            Not Before: Jul 23 10:45:07 2026 GMT
            Not After : Jul 30 10:45:07 2026 GMT
        Subject: CN=6a61f0b4-6e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:6d:06:a6:df:92:a4:dd:db:95:38:f5:5c:
                    fd:13:0d:78:5e:30:d3:a9:fc:d6:19:02:4b:91:05:
                    5b:9b:cc:8d:20:00:9e:a5:e2:33:32:a3:de:ed:1d:
                    01:de:6b:1b:02:6c:ce:4b:3d:ab:07:63:b2:df:9f:
                    ae:39:3d:42:79:65:33:c8:a7:17:af:5b:e8:8a:c3:
                    cb:23:04:d8:4a:e3:3b:99:f0:68:b6:60:72:e3:75:
                    1f:87:ef:f3:89:13:28:42:a1:79:af:4a:fb:33:84:
                    74:e5:63:b1:44:08:4f:01:8a:58:c3:7a:c9:7a:e8:
                    78:d3:13:ac:4c:12:33:45:e8:e1:c5:cc:fa:c1:69:
                    3f:b4:95:84:c7:d9:59:b7:38:7f:5f:75:e0:76:5e:
                    fb:a6:8b:dc:1b:e8:4e:3b:15:9f:9b:ab:22:09:6d:
                    7a:79:07:9a:b1:02:08:88:ac:31:35:1b:b0:55:41:
                    85:14:f1:50:98:55:d5:0e:34:12:c5:e1:d2:06:eb:
                    76:39:4b:9c:7e:fb:9a:7f:d2:48:f3:d6:0b:21:9e:
                    59:ad:09:f4:5f:82:a3:e5:15:78:91:da:9a:49:17:
                    e7:b3:4a:5f:e9:bd:5e:a4:a1:e8:62:a0:b9:47:0f:
                    9d:c6:69:70:eb:83:57:08:ac:43:d3:84:48:be:6e:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:C3:B9:8D:59:D9:C8:8D:88:70:63:5F:1F:97:32:9E:E2:08:3D
            X509v3 Authority Key Identifier:
                keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:2f:53:49:9a:05:85:64:8e:17:a0:ad:74:86:09:6b:d5:
         d8:d1:ac:42:87:4c:83:cd:b9:fc:d3:35:51:e2:87:9b:0c:39:
         d5:b1:81:ce:27:be:81:f1:4b:c0:63:8d:f3:44:27:de:47:a6:
         71:1d:8f:b4:2a:6e:a3:bd:f4:e5:a2:03:b9:5f:75:b7:bf:62:
         00:80:85:4d:94:c7:ae:7f:b6:41:95:11:de:89:4f:eb:d2:e8:
         7b:2f:3f:97:1e:7a:9d:a2:7d:91:a0:ee:d0:d2:0d:b3:8a:11:
         f1:3b:f5:f1:36:49:9d:9a:af:fb:e5:16:43:ea:16:0a:ff:e2:
         60:7a:0f:36:39:98:5f:73:9e:e3:40:b9:b0:62:61:ef:6b:f0:
         46:53:68:e4:9b:d7:5c:f4:4d:71:ed:e0:aa:1b:26:1a:30:b2:
         5c:df:54:2b:8b:2c:3b:72:0a:a8:5b:6c:34:76:85:2c:0e:5a:
         37:31:ce:58:1c:4a:39:a1:ac:6f:c1:05:74:35:bb:b4:c3:16:
         49:e5:e3:e4:92:0b:a7:46:46:d2:9f:64:d8:dd:64:d2:af:4a:
         c0:4f:3a:91:fc:69:cf:b3:90:61:01:37:c0:68:27:03:89:b5:
         a5:11:9d:90:0c:d7:5f:25:21:ed:41:7e:a4:f8:0c:6a:61:00:
         3e:11:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:50 2026 by rpki-client