Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File:                     nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier:          sp5jSxDHYEbJ1plU40bu7fCj+j6nmfx92CR7Ep1g1YI=
Subject key identifier:   04:BD:45:DC:F9:8A:B3:6D:FE:81:15:D0:76:EC:CF:3D:1E:42:E8:EB
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer:       /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number:          FC
Signing time:             Wed 13 May 2026 06:22:53 +0000
Manifest this update:     Wed 13 May 2026 06:22:52 +0000
Manifest next update:     Wed 20 May 2026 06:22:52 +0000
Files and hashes:         1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: U5PsfNwrny2zLZwfhIWHLaCesLmZ0C2a0qmG07Fd+eA=)
                          2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: t58wU/pXz+iEQ4RAW3H0lzuZf3qpTPHdtZHwx3xgStE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
                          rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
        Validity
            Not Before: May 13 06:22:52 2026 GMT
            Not After : May 20 06:22:52 2026 GMT
        Subject: CN=6a0418bd-01a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:69:b9:60:e6:dd:db:30:c7:63:7a:b8:48:
                    d6:fe:a1:a7:15:1b:05:98:20:de:a5:83:8c:f0:85:
                    81:45:45:1c:03:1c:cf:50:3a:a7:f4:9d:1d:45:ad:
                    1e:e2:d1:02:f2:ac:9f:65:9a:bb:82:b7:10:67:a5:
                    b4:ef:bc:57:e3:a5:45:5a:90:97:f3:92:d1:a8:b4:
                    a9:0b:4e:5e:0a:a3:10:1a:9f:4f:d6:5b:9c:82:d3:
                    f1:45:53:56:58:2c:1b:d0:25:2a:49:35:80:0e:41:
                    3c:ad:20:1e:cf:e6:df:d0:52:0f:8c:60:43:cd:2f:
                    47:60:50:70:ba:5e:22:c5:4d:b2:b5:ad:d8:45:51:
                    ba:55:aa:5a:57:36:24:c7:54:1e:55:01:ac:5a:15:
                    53:32:8e:aa:16:5c:55:7c:4c:48:c7:87:b2:e1:b2:
                    69:de:7b:d1:20:75:4f:a7:51:88:3e:f4:1c:53:9f:
                    55:10:1f:de:81:d0:1f:dd:f2:90:34:67:bc:75:c4:
                    e7:ab:7b:28:44:29:87:b2:20:7b:13:a4:0b:b6:52:
                    e7:80:d2:e0:d8:05:ba:44:d5:61:a3:bd:2c:ae:37:
                    55:bc:92:8f:f9:6f:d9:86:eb:97:e7:79:09:a0:33:
                    d5:e4:1b:b0:90:c2:ed:82:51:c6:cf:41:2b:95:ee:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:45:DC:F9:8A:B3:6D:FE:81:15:D0:76:EC:CF:3D:1E:42:E8:EB
            X509v3 Authority Key Identifier:
                keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:76:fa:db:cb:6a:a6:85:bb:db:70:c5:8e:76:a6:91:f9:
         70:98:03:58:59:5f:27:e2:8a:74:0c:4b:21:7a:1e:df:a6:57:
         e0:3f:bf:8a:b4:f5:ba:db:89:e1:8d:11:0f:23:d4:b5:e7:e1:
         c8:82:e2:bc:b8:e8:d7:9c:2c:52:0c:60:19:d9:75:6b:70:89:
         cc:78:74:06:53:b6:3a:23:5b:15:47:51:63:13:0e:e8:c9:97:
         42:72:ad:b1:59:04:30:c4:7f:69:c6:77:e9:07:b7:c4:1f:c3:
         f2:d9:b9:fe:bc:c9:e0:55:df:e4:a7:47:9d:7b:53:8a:ed:31:
         c7:6c:98:8c:59:9d:e7:83:b3:92:cf:f6:2e:02:c4:70:a1:f5:
         b1:47:4f:07:c7:5b:bd:aa:20:bf:d2:66:f4:96:23:8b:6c:79:
         4d:55:6c:5c:0d:ab:0b:ca:c2:a2:8a:df:fa:8f:39:81:27:cd:
         af:6a:ca:2f:00:b3:18:d7:6b:a6:d9:96:a9:5d:7c:13:fd:04:
         69:a2:10:b3:e7:0f:b6:ad:60:24:c5:97:27:c4:b9:e6:04:bb:
         7b:d6:42:87:d8:8b:90:8c:d7:59:4e:5e:29:82:1a:04:87:50:
         61:b1:c9:82:cf:dd:79:23:c1:22:8f:e0:77:d0:6c:52:7e:84:
         c2:5f:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:50 2026 by rpki-client