Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          81Nx2w4jLMyehmls18Snlg1wq3F1jNW485JpcDvzOco=
Subject key identifier:   A9:26:F4:7C:AB:C1:D7:52:EB:52:68:D9:60:EB:F9:93:96:09:75:0E
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       0A88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          0A7E
Signing time:             Tue 12 May 2026 19:37:44 +0000
Manifest this update:     Tue 12 May 2026 19:37:44 +0000
Manifest next update:     Tue 19 May 2026 19:37:44 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: +39Z4DH7f/1JqKgPiH2r+6p1BXxPqMV1tGW5tWkQGqI=)
                          2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: RFdB63/y3+Tbs7GEAdEYbpEM6B+Xvuyjatvb6gT/7vE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2696 (0xa88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: May 12 19:37:44 2026 GMT
            Not After : May 19 19:37:44 2026 GMT
        Subject: CN=6a038188-b12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4a:ef:9f:46:96:d6:4c:d1:1e:72:5c:21:79:
                    08:c9:ee:4a:38:0b:dc:24:30:dd:5c:41:b9:a3:c4:
                    54:40:d5:d2:34:b6:32:ba:0d:c7:fb:9c:1f:2c:22:
                    48:f7:46:15:94:9b:3f:2a:35:41:4e:06:db:08:0a:
                    3a:12:7c:5c:94:c7:19:d7:4f:70:80:7c:b6:dd:16:
                    6a:1e:18:7c:d2:4c:54:49:98:91:0b:5f:9f:94:92:
                    4c:f6:34:13:11:10:8d:1f:bb:db:2d:bf:ff:35:0a:
                    63:a7:b5:4f:6f:db:b6:8d:3b:f0:d9:c9:25:55:55:
                    45:68:5b:c7:d2:ce:d3:a2:62:fe:0c:b0:ac:07:d3:
                    7c:42:34:33:00:31:c6:7e:0e:95:78:04:a2:86:d0:
                    73:9b:f6:4f:29:b5:30:6d:45:da:07:ed:06:b2:d6:
                    90:c0:7f:6e:20:ab:11:bd:58:ef:ed:3f:89:02:3d:
                    0f:1e:81:99:49:f4:07:bb:04:b3:29:99:f5:8e:6e:
                    4b:72:b0:be:8e:6b:55:c8:95:d5:09:6d:cc:b6:92:
                    59:af:99:73:52:bb:55:09:09:78:37:0a:d4:c3:2a:
                    76:33:6b:cf:a4:c3:53:bf:04:5f:8c:0c:23:78:11:
                    f1:77:63:60:46:67:c3:32:2f:ee:46:b6:65:76:c8:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:26:F4:7C:AB:C1:D7:52:EB:52:68:D9:60:EB:F9:93:96:09:75:0E
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:84:ea:23:c5:cb:c4:a7:0e:fc:dd:9d:47:bf:1d:91:b8:46:
         b3:06:ec:d5:e8:c6:7b:c5:48:3a:11:a8:ed:09:ab:6b:5c:b6:
         8c:f1:70:82:aa:2c:52:67:cc:80:f6:b5:15:c7:49:25:f8:91:
         42:c4:9b:f7:40:7c:03:c4:f1:4d:01:dc:be:79:eb:07:ba:21:
         8d:dc:e3:1b:a5:ca:e3:f8:f6:20:c2:bf:63:89:25:71:76:1c:
         ed:8a:96:64:44:8a:74:26:e1:98:77:7b:e9:5e:d9:7d:a2:84:
         16:70:5f:b3:a5:28:8c:67:0a:d2:c4:db:8c:69:32:a4:15:5f:
         29:57:84:f7:f0:79:62:ff:b1:0e:7c:73:34:64:2f:62:88:29:
         c7:c5:82:80:32:73:4c:eb:fd:65:e8:06:6d:dd:a2:fa:39:bc:
         39:17:a8:c7:5b:06:98:64:49:5f:80:a1:ec:c3:fb:9c:88:e6:
         19:22:47:5f:ef:bb:e5:3c:2e:d0:1a:c5:11:fd:64:f0:1c:82:
         ab:8d:d5:91:d5:3e:d8:18:23:9a:96:a9:d6:40:48:8f:6c:ea:
         84:51:7c:2b:74:06:d6:3d:7b:4b:38:b4:19:a1:ad:b9:8a:51:
         45:93:70:33:23:57:69:fc:71:79:a6:bf:84:eb:e2:7d:87:aa:
         9d:dd:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:36 2026 by rpki-client