Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File:                     n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier:          RB3I8DeTGlT7KFOApZ7qA/0e2u+gxJ59HjiTsIcFGCc=
Subject key identifier:   18:90:45:48:90:7C:8E:12:2A:B5:4A:91:1D:CB:2A:51:AA:73:C6:09
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer:       /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number:          0113
Signing time:             Mon 11 May 2026 06:06:57 +0000
Manifest this update:     Mon 11 May 2026 06:06:57 +0000
Manifest next update:     Mon 18 May 2026 06:06:57 +0000
Files and hashes:         1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: REZUr+Xcuu5UelqwjWxxKw7TTvp+SCgnwe1eBEo6z/s=)
                          2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=)
                          3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
                          rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
        Validity
            Not Before: May 11 06:06:57 2026 GMT
            Not After : May 18 06:06:57 2026 GMT
        Subject: CN=6a017201-5520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:16:98:cd:1d:ac:16:01:bf:d8:5b:4e:a7:
                    8c:fd:64:9f:d1:45:2e:22:ef:2e:de:e6:16:17:d0:
                    b5:58:f2:a3:74:a3:e0:65:50:bd:21:73:47:0b:6b:
                    32:4e:af:c1:35:43:8d:3b:5a:87:eb:0b:38:e0:76:
                    29:17:5e:98:68:76:ad:30:9b:d9:fb:02:0c:9a:30:
                    c2:4c:5c:e8:52:ef:51:e3:2e:6a:9b:b1:d0:7e:e2:
                    88:ad:47:74:c0:9d:d2:46:f4:c4:65:96:75:e2:3e:
                    2c:e3:ad:c4:05:a2:50:de:a7:2e:82:25:5a:20:68:
                    72:89:d6:b8:fa:f9:c0:69:28:3e:08:0f:df:91:e3:
                    f7:c9:f1:ca:0a:ab:97:84:03:0b:1b:11:d8:e8:53:
                    07:7c:29:bf:11:e9:be:6b:95:37:14:fe:a2:7b:f1:
                    00:42:d5:d8:f7:f7:9e:d4:fb:21:9c:35:be:5c:72:
                    e6:22:3e:5d:53:06:bf:75:b4:61:8c:8e:f6:ce:f3:
                    b2:d6:f9:94:75:52:70:5b:2f:64:13:52:d2:8c:33:
                    cc:8e:30:fa:11:15:32:67:15:00:c9:69:8e:9f:20:
                    36:87:55:a7:04:01:a3:e0:e3:c2:69:9c:1a:0b:d4:
                    02:b2:83:0c:3a:41:ed:c2:e8:3b:22:c2:b8:be:43:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:90:45:48:90:7C:8E:12:2A:B5:4A:91:1D:CB:2A:51:AA:73:C6:09
            X509v3 Authority Key Identifier:
                keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:da:bc:65:c3:20:7f:ce:f6:2b:9d:6f:ea:ed:47:7b:10:
         77:84:99:71:cc:6b:da:4e:17:ec:98:fc:96:49:ec:e2:af:4d:
         b1:60:1d:7a:bf:b4:b3:16:4d:9f:23:2b:68:f0:3e:05:55:46:
         ff:56:df:5e:65:e8:29:b2:48:af:67:5d:13:64:b7:fb:8e:93:
         ae:59:ff:43:2b:94:4c:75:0c:cf:de:1a:86:d6:2c:e8:b9:0c:
         75:24:55:b4:c6:ff:c8:dc:be:5c:23:82:b8:3d:f5:9b:d2:6b:
         de:71:93:3e:19:63:e4:10:00:1c:c6:e5:cb:9e:c5:0e:bf:11:
         bb:bc:ef:36:7a:0f:5f:49:5f:3d:94:93:f2:df:ce:36:93:72:
         f4:fc:0d:d2:9e:ad:d2:70:0b:8c:69:4c:55:57:aa:9d:1a:0e:
         7b:6e:53:0a:ac:28:03:b2:07:2e:2e:ba:cc:9f:46:dc:5f:a2:
         08:1f:81:01:a1:7c:85:8f:8e:b3:4f:f0:bd:f3:fd:5c:d0:ed:
         07:f7:91:42:c8:fc:84:19:a4:ff:53:21:a8:a4:92:0f:d4:55:
         d1:af:08:3d:ed:c3:90:dd:32:8d:0e:0a:64:77:d4:b2:7b:44:
         0d:85:ca:33:1f:f7:05:ae:e2:0c:14:24:40:55:bf:56:c8:2d:
         24:bf:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:50 2026 by rpki-client