Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          Na1EcVNCZkZb2qxh822VkFi8e7sWKUWEiBPPU0ZrHTA=
Subject key identifier:   97:B2:7B:13:97:B3:95:8F:67:EA:93:72:21:95:47:80:74:15:12:B3
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       099A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          096A
Signing time:             Tue 12 May 2026 20:10:21 +0000
Manifest this update:     Tue 12 May 2026 20:10:21 +0000
Manifest next update:     Tue 19 May 2026 20:10:21 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: iXQ+8x20vGHLfHyFx0vQ3lF+GMVzjZ3XpuEv74k/wEs=)
                          2: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=)
                          3: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: 7BcXlcd3LJPGSVAJ0cpsMaAQmbsNPhOb+ijpOwrVFzQ=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: mdaUyLNP5ILBUXwjj5qxgg+9hrAAfPyxuDqIwoe7rWU=)
                          5: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: jmiRcmGtCSPQ80tETmfEOVJ+GurX16ZfdMdpnSOQ5WA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2458 (0x99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: May 12 20:10:21 2026 GMT
            Not After : May 19 20:10:21 2026 GMT
        Subject: CN=6a03892d-6e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:ab:72:ce:df:8b:4b:81:6d:98:d3:72:a2:
                    05:41:68:74:81:ab:b5:7f:7d:89:7b:c2:35:67:ca:
                    61:5b:87:33:59:66:22:d2:aa:1f:b5:68:dd:c2:f2:
                    5c:55:0b:df:63:eb:90:28:15:5c:9a:7a:b9:38:70:
                    03:72:ac:0b:46:78:bf:1f:81:6c:0c:c7:e2:9d:ec:
                    af:bf:d5:34:f4:3e:06:58:32:d8:9c:fe:dd:76:ad:
                    b5:ee:54:fe:16:75:bb:97:32:14:ec:6f:e2:a4:36:
                    b8:eb:0d:dd:c8:99:5a:79:a2:76:9f:60:e6:62:4c:
                    f0:70:b1:c2:1d:b0:b8:69:e0:37:6e:71:c5:60:90:
                    ba:2e:be:68:fa:31:ac:cb:59:18:48:1f:6f:9a:64:
                    f8:66:02:4a:69:34:43:62:b4:4a:88:f0:ed:9f:b9:
                    79:a1:4a:5e:8c:f5:37:3b:2d:62:db:eb:a9:2f:a3:
                    9d:0e:43:ef:e0:14:2b:94:c4:2c:3f:a3:e6:55:05:
                    18:a7:6d:b4:c0:b3:8f:a2:7c:b9:1e:7a:ca:6e:98:
                    43:67:95:16:1f:f2:12:41:2a:cc:2b:15:0a:27:14:
                    b4:04:56:d8:ee:d6:4e:e3:af:8d:e2:1e:da:72:4e:
                    74:47:73:15:4c:36:08:2b:66:72:61:29:7d:30:99:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:7B:13:97:B3:95:8F:67:EA:93:72:21:95:47:80:74:15:12:B3
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:40:65:a5:3d:d2:ee:62:1d:9e:35:6b:d5:db:e6:3d:62:
         bf:4b:31:53:a9:8e:a7:d5:5a:b1:1f:b7:c0:47:ad:3c:46:56:
         b2:da:35:f0:5c:00:63:48:48:74:53:b3:44:05:6b:b0:6d:66:
         20:6f:f0:53:d0:e4:25:54:ff:0d:88:21:67:5f:3f:e6:0b:18:
         ea:36:df:dd:8a:21:dd:c6:00:e4:e0:3e:ff:5f:03:eb:86:57:
         bc:b1:69:45:79:ea:0f:50:5b:9b:94:9b:b6:5f:1d:53:88:6b:
         e2:58:ab:4f:50:61:d2:d5:1d:84:21:22:30:db:4e:cc:56:7f:
         3d:d2:22:89:9a:ae:6e:58:24:1b:0b:74:90:69:5e:8e:50:f1:
         21:60:c4:b7:80:87:b8:ca:03:ff:f1:27:0a:f7:96:e1:a8:5a:
         eb:a5:dc:1c:27:67:4f:50:9a:97:09:09:58:10:ef:cb:16:3f:
         c8:ca:a4:73:c3:db:53:9e:af:63:3d:01:d9:75:86:43:4d:7c:
         d2:d9:19:15:e7:6b:ba:65:72:28:76:fe:6a:a6:16:1a:7c:50:
         56:1f:0f:78:b2:14:81:90:77:6d:5d:e1:c1:8f:68:a4:e6:b6:
         f6:8a:66:f3:73:f9:4e:4a:65:6f:ef:95:f0:d6:04:ea:a7:03:
         bf:5e:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:09 2026 by rpki-client