Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
File:                     nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json)
Hash identifier:          OAGb820JyIn848IB4U3H4gcQRRvMAuPQ673nkN4i9qg=
Subject key identifier:   00:2E:20:C7:3B:85:16:D6:5C:E8:D6:96:A5:82:7F:35:89:72:0C:06
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Certificate issuer:       /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
Manifest number:          04
Signing time:             Wed 25 Mar 2026 08:26:08 +0000
Manifest this update:     Wed 25 Mar 2026 08:26:08 +0000
Manifest next update:     Wed 01 Apr 2026 08:26:08 +0000
Files and hashes:         1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: PdKU0Apd4WhsVs5I5oj1oTqB5oGrHvBURyY9utiyEoU=)
                          2: B62F5378265811F1B0D864DEA4833773.roa (hash: d4qXqs0vf21uAmTHlb0izdYCuuZAXvGPzrYKUZpwbxw=)
                          3: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: yu5d60NAc4cXPUzUBIczj0n+5EToYt0HRr1PhV7q4lQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
        Validity
            Not Before: Mar 25 08:26:08 2026 GMT
            Not After : Apr  1 08:26:08 2026 GMT
        Subject: CN=69c39c20-2302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:26:03:65:83:71:44:a1:86:c2:79:74:9f:
                    ef:22:f6:95:2e:dc:86:f7:79:37:95:76:11:e5:8a:
                    86:ec:4b:aa:5d:21:89:f4:16:07:0e:91:8a:28:45:
                    0e:54:65:b9:a3:ce:d5:a1:87:08:c8:33:ed:22:d3:
                    df:27:fb:49:85:e1:5c:23:2e:74:37:01:eb:1a:46:
                    c2:f2:5a:e6:9a:ac:63:66:c6:95:f8:95:b9:99:3a:
                    6a:c8:c7:83:4c:b1:b2:9e:15:5e:d8:de:37:9a:ee:
                    de:7b:6b:dc:60:bb:60:c4:46:cd:2f:de:04:55:e8:
                    5a:f0:1a:74:50:b7:49:8e:a9:d8:9a:68:3a:f4:d5:
                    1a:4b:49:97:82:eb:bc:2c:49:17:98:52:8d:fa:44:
                    68:ef:00:0d:b6:08:e8:25:f6:d2:ca:35:5e:10:12:
                    a6:c2:22:0b:80:e1:64:60:63:4d:13:d8:b3:23:89:
                    6c:8c:26:9b:11:dc:91:2a:cd:f0:00:ca:27:1f:64:
                    b7:8f:80:fe:b9:c1:12:ac:7e:8c:47:ad:2e:49:3f:
                    28:0c:41:c9:70:4d:ed:bc:5c:8c:99:2f:e0:7d:3b:
                    14:e5:0a:9f:4b:f1:48:78:c9:3a:27:98:95:0b:3a:
                    db:36:6f:ca:45:0e:36:16:9f:b4:61:b3:80:f9:0e:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2E:20:C7:3B:85:16:D6:5C:E8:D6:96:A5:82:7F:35:89:72:0C:06
            X509v3 Authority Key Identifier:
                keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:29:c8:fa:7b:08:28:92:66:19:73:04:ea:f5:27:12:b2:be:
         37:ba:80:18:71:4b:7b:e2:fc:07:e5:dd:d1:a2:4c:33:c7:92:
         75:81:33:55:4a:e7:57:77:f2:66:05:0f:92:fb:f3:33:53:97:
         0d:64:0f:30:07:e7:55:89:ce:46:a6:57:38:ed:53:dd:c6:60:
         77:10:da:a8:c7:90:8c:8d:10:ee:5b:83:5d:9b:8c:28:92:44:
         53:78:96:5b:c1:40:cb:ac:e0:47:2d:31:8e:2b:42:84:98:42:
         8c:e5:ba:60:c9:72:8a:08:9d:2e:53:39:04:98:49:a6:5e:03:
         f1:41:6b:90:18:2f:79:33:69:f8:44:a8:94:27:9b:39:62:e1:
         9f:da:e1:cb:0f:d2:78:79:f3:6f:da:ae:9a:5a:25:51:cd:ca:
         3a:db:c7:ec:c2:25:d2:f5:de:35:19:cb:ca:0f:01:c4:ca:0d:
         6e:5c:24:e4:94:94:c2:78:f2:d1:30:00:c0:a9:57:8c:c3:d5:
         ab:ef:6e:c3:2b:dc:90:9c:0a:ec:e7:80:1f:30:b8:48:0e:c0:
         db:fa:80:b5:7a:97:2e:d3:a6:e0:54:8b:c7:1c:40:cd:ac:e3:
         8b:e7:e5:9e:a5:c3:48:34:9d:e3:55:8d:3c:0f:76:54:32:d3:
         b3:b3:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:18:46 2026 by rpki-client