Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          +SXWAts16K5LrPqSccc2zOU79YWGnsoegrVW+lpNhBE=
Subject key identifier:   9E:09:56:DC:1D:BF:D1:16:1F:A5:30:4F:9E:04:EB:6C:26:D6:58:18
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       0A6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          0A65
Signing time:             Tue 24 Mar 2026 19:24:43 +0000
Manifest this update:     Tue 24 Mar 2026 19:24:43 +0000
Manifest next update:     Tue 31 Mar 2026 19:24:43 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: V2XaUJ2Z4/8BKaiso1kIZSJCa+gM6/1lc/aZkqLb1ek=)
                          2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: RFdB63/y3+Tbs7GEAdEYbpEM6B+Xvuyjatvb6gT/7vE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: Mar 24 19:24:43 2026 GMT
            Not After : Mar 31 19:24:43 2026 GMT
        Subject: CN=69c2e4fb-a8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:b9:18:91:0d:24:f1:2d:9a:28:85:f1:53:
                    b5:ed:95:93:99:96:dd:70:49:7d:b0:e7:83:98:26:
                    b4:d3:55:ce:bd:54:be:94:f5:aa:57:14:25:45:c8:
                    e7:f1:23:6c:a9:51:38:6c:da:32:e2:2b:a5:d8:e5:
                    bf:6a:e5:06:01:d7:07:5d:29:21:54:4d:6b:e1:b9:
                    e5:b2:bd:0b:4f:cb:ee:0e:e4:14:6f:3f:2a:89:20:
                    44:58:d5:b9:71:fc:5a:05:75:2b:d9:ba:4a:9c:b3:
                    21:87:62:6b:21:69:5e:7a:b4:91:0f:46:2b:d2:9b:
                    fb:6f:65:f1:0e:26:2a:4c:97:7b:b2:e9:c4:3e:da:
                    a3:d8:6b:df:a7:4a:38:3c:08:3b:15:77:83:05:b8:
                    d0:f7:ac:a4:77:9c:5e:08:35:27:3f:1e:7b:f3:59:
                    21:22:a4:9b:99:6c:bb:09:bc:f4:bd:56:c3:29:5b:
                    2d:0e:81:1f:83:ab:13:1e:97:be:bb:d6:b9:ef:16:
                    21:10:f4:f4:c7:74:c2:a3:fa:a6:d6:48:ba:b9:01:
                    dc:b5:fe:a9:58:4f:aa:b3:e7:4e:d9:7f:49:57:c3:
                    a2:65:2c:fe:c2:5a:ee:68:54:49:73:7d:0e:e2:d1:
                    49:0b:b2:0e:ea:50:75:ab:28:63:9b:2e:d3:4d:3f:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:09:56:DC:1D:BF:D1:16:1F:A5:30:4F:9E:04:EB:6C:26:D6:58:18
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:70:92:87:dc:19:bf:b0:2e:bc:58:c8:09:bf:44:c3:b9:8b:
         6a:92:97:81:96:fc:4c:a5:05:1c:39:67:be:1d:72:a5:f8:1b:
         f9:7c:03:0b:ad:42:40:52:81:45:96:e1:18:6b:c8:96:3c:2c:
         a4:42:a9:c5:38:b1:c1:30:6e:39:5d:bb:b4:2c:88:67:36:ad:
         72:82:58:c8:81:ce:e0:f2:db:99:53:db:07:72:63:ba:b9:b3:
         84:ea:3d:30:76:98:83:5a:80:c8:a5:c4:75:b6:d0:d6:ef:b5:
         cf:79:63:8a:b2:09:21:20:88:a1:23:34:66:0d:42:aa:22:75:
         ce:f3:94:8a:09:d8:26:b9:07:eb:9d:da:aa:88:8f:51:ae:d1:
         37:d2:fd:98:84:2d:6e:3f:33:8b:c9:ab:c6:8c:92:6f:b8:5b:
         a9:7f:fb:b9:d3:40:4b:9a:f9:8e:59:c7:7f:41:47:f1:17:a0:
         29:84:65:3b:d4:e2:65:17:a4:a9:c2:fd:f7:80:2d:9d:49:b8:
         55:a3:15:42:96:37:b6:eb:34:52:31:4f:9d:54:e9:24:85:31:
         da:b6:24:6f:9f:c2:70:d3:ee:0a:25:2f:6f:c0:6d:94:69:78:
         29:73:55:4f:79:4f:bf:51:36:60:3e:f4:d5:b4:a4:29:be:30:
         90:b0:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:27 2026 by rpki-client