Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File:                     nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier:          fVqmIDE0+U2OcOi8SgACj18/V7vqxU7Gg7uBspuMOps=
Subject key identifier:   75:E5:EB:07:B9:67:AD:58:6C:3B:4A:29:11:C3:CE:26:91:71:EC:0E
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer:       /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number:          CF
Signing time:             Mon 11 May 2026 06:53:27 +0000
Manifest this update:     Mon 11 May 2026 06:53:26 +0000
Manifest next update:     Mon 18 May 2026 06:53:26 +0000
Files and hashes:         1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: BHX6lS80kCYJjIWNLB73+Ml/7rP0pbvevChUIEdyxJY=)
                          2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Validity
            Not Before: May 11 06:53:26 2026 GMT
            Not After : May 18 06:53:26 2026 GMT
        Subject: CN=6a017ce7-d248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:fb:6a:a9:80:55:9e:37:d1:0e:48:1c:54:
                    af:27:7b:6d:1c:0b:c4:3e:eb:92:74:60:7e:6e:5f:
                    be:dd:b0:ae:3b:5b:f8:52:bd:c0:cd:71:4c:57:e5:
                    da:c9:50:2a:ab:4e:01:ba:90:02:2c:27:cc:a0:3a:
                    67:b3:76:ea:ad:dc:bb:1c:cc:7a:62:1c:aa:a3:75:
                    c2:ac:07:8b:7d:cc:a6:f7:1d:03:20:71:4b:ee:1f:
                    cd:ab:81:52:3d:e4:fc:ef:ef:9c:90:4f:44:1c:8a:
                    cf:36:bd:06:ea:ff:82:d6:03:4e:03:3b:c6:8f:f1:
                    b5:4a:ab:47:26:eb:e6:c3:a2:2d:f7:c5:1c:92:d0:
                    19:f9:e9:83:59:1b:40:fc:37:9e:d5:1f:9c:cc:66:
                    2b:bb:4f:58:7f:c7:db:1c:85:38:48:ff:e1:02:76:
                    de:59:05:e5:1b:5a:d3:75:4a:82:0a:aa:84:a9:fe:
                    ea:c6:64:f4:82:95:45:42:68:5b:c5:35:cc:79:05:
                    6a:05:dc:bd:7f:b2:fa:f2:fa:f7:c3:7f:f9:c2:45:
                    7b:ce:15:c3:22:99:50:54:90:48:7a:2e:cc:8e:23:
                    26:cb:40:1d:e5:ab:62:4f:8e:33:0c:f9:45:5c:9b:
                    93:f2:e9:05:6d:20:8a:5d:f9:bd:d9:f0:55:62:6e:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:EB:07:B9:67:AD:58:6C:3B:4A:29:11:C3:CE:26:91:71:EC:0E
            X509v3 Authority Key Identifier:
                keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:56:ee:76:01:10:db:64:7e:ae:95:62:21:bc:04:a5:93:e7:
         62:22:73:83:86:d9:53:9c:67:9e:c8:f9:55:ff:2b:cf:36:0c:
         bc:75:7e:35:1b:77:d8:10:fa:8e:81:e3:72:61:36:db:87:7e:
         88:70:23:b1:8a:a9:8d:06:d2:a4:3f:77:3e:44:eb:a3:09:5c:
         3f:1f:59:4b:5a:2a:15:29:15:86:52:bb:76:f5:4a:46:12:e4:
         ae:0e:6e:81:a7:74:60:c2:2c:23:96:8d:c7:4b:cd:99:56:a8:
         87:26:1e:00:ff:2f:3a:fc:d9:7c:0e:08:ea:7f:d5:32:95:72:
         c8:44:7c:f3:c4:c9:46:4d:bf:46:c0:95:19:e7:c9:b3:94:ba:
         f4:f6:d8:6d:38:d4:e5:d0:cf:fd:6e:e1:13:8f:24:ef:16:53:
         3c:66:a6:8f:1e:7b:39:d7:e4:bc:b7:73:a6:70:50:a1:32:05:
         d1:91:e9:d9:23:b7:47:5e:91:63:c3:d7:d5:cb:48:7b:35:f3:
         28:cb:df:16:ca:ea:5d:bc:88:f3:b2:f0:58:77:a4:10:c6:cb:
         7b:9b:f7:42:34:7f:43:75:e8:81:dc:0a:b2:38:d6:db:e6:86:
         53:55:a2:99:7c:fd:10:db:b7:7b:e2:e8:c8:be:b2:dd:d9:ab:
         7c:df:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:51 2026 by rpki-client