Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File:                     Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier:          BfwebTOaZpNZadIMzGMC/2jzB79xu8ygUFPYiHvF290=
Subject key identifier:   99:B4:F6:50:35:23:0B:25:2C:E3:D7:F8:2A:CB:F7:EA:AC:33:3E:06
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer:       /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number:          023F
Signing time:             Mon 11 May 2026 02:31:57 +0000
Manifest this update:     Mon 11 May 2026 02:31:57 +0000
Manifest next update:     Mon 18 May 2026 02:31:57 +0000
Files and hashes:         1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: APw0sVlGp1/NBk5KyIoI/FmtuwPWMU85tKIK2u6P9Qs=)
                          2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: Oz1YYz2nVnKK3rUGjD/1v81WOTw67n/9ST3sUEa1Jz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
                          rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
        Validity
            Not Before: May 11 02:31:57 2026 GMT
            Not After : May 18 02:31:57 2026 GMT
        Subject: CN=6a013f9d-3865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:d0:c9:bc:48:bf:33:4b:a3:52:85:2c:31:
                    42:75:46:31:5c:45:d9:21:34:ad:19:0b:47:cf:11:
                    59:61:e3:6f:ed:24:72:8b:f4:fb:25:04:c1:bf:24:
                    1e:0d:9c:fc:37:90:a8:91:32:e5:f7:e9:7d:31:45:
                    a5:1b:b9:82:a5:3d:58:f0:44:ec:e5:61:f3:36:c6:
                    0d:95:18:81:f6:51:62:2e:6f:23:96:4f:63:a8:b7:
                    6a:37:e4:a5:7e:de:a1:07:fb:5d:6e:51:6f:a0:cd:
                    a6:98:79:2f:09:bb:d0:80:3c:0b:d8:3e:7a:31:3d:
                    f0:62:78:10:70:20:25:07:9f:37:48:ca:66:7f:4f:
                    11:9d:9f:57:28:23:13:bd:af:d7:59:9c:07:07:6a:
                    18:2f:6f:45:e2:6c:25:d2:1a:0d:fb:07:52:b7:cc:
                    03:29:a6:46:90:1b:51:0f:6e:ba:96:87:49:27:50:
                    c6:36:10:af:2f:9b:cc:8a:4a:cb:02:4b:14:ce:4c:
                    a2:fb:e0:c7:6a:f7:2c:35:3f:46:72:5b:3b:53:fa:
                    61:6a:e8:8a:bd:f9:74:f5:88:a4:52:f4:d7:1f:42:
                    12:3a:4f:9c:21:9b:b3:ac:70:73:26:40:09:a8:97:
                    c8:c5:71:3c:91:6c:89:e1:74:aa:ae:b7:c8:0c:8d:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:F6:50:35:23:0B:25:2C:E3:D7:F8:2A:CB:F7:EA:AC:33:3E:06
            X509v3 Authority Key Identifier:
                keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:56:8e:3b:3b:d0:6a:21:5e:4e:7f:27:37:c9:9c:c3:f5:e8:
         97:87:05:f2:2d:d0:f6:20:c9:df:94:76:b8:b1:96:ac:f8:a2:
         68:91:64:e3:e3:c1:b7:25:99:10:f6:2e:e5:97:81:ec:e1:46:
         dd:02:82:5d:79:dd:f7:fa:e4:68:2d:b3:47:33:76:15:7d:f3:
         25:5f:67:a6:68:2f:49:0e:3f:db:b3:5b:8b:69:a9:2e:d6:63:
         ef:8b:a2:ed:8f:e3:8a:ee:bf:bb:e1:df:7b:0f:3f:d8:76:b8:
         c6:34:1e:82:a3:9b:1e:76:01:81:34:2b:44:6e:74:67:04:95:
         6c:ed:04:d9:b0:92:8b:b8:0a:48:d4:2a:b9:e8:67:00:df:39:
         2f:ca:28:8f:fc:fb:38:ee:be:f2:4f:b1:60:0f:a2:f6:c6:e7:
         93:9a:ef:74:c5:6e:98:5f:d4:bd:92:7f:db:4e:4e:1e:15:a1:
         be:e9:6c:1c:89:0e:11:f9:51:f0:f0:b5:82:1a:47:d5:8e:24:
         9d:cc:c3:81:06:20:39:fa:b9:73:83:1d:4d:5d:b5:15:b3:95:
         0b:8d:98:8a:3b:1b:ea:af:4f:e5:00:74:c7:83:b4:62:3f:8f:
         44:f9:42:8b:9c:84:b4:41:c6:74:a4:ac:17:86:98:a5:a3:7a:
         ab:03:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:09 2026 by rpki-client