Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
File:                     NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json)
Hash identifier:          Er+dWosol8F6Ldh5RwjUjmSRGFm9dnvZYPSSOmHXqlA=
Subject key identifier:   AF:2A:86:9E:99:36:67:27:D5:74:64:B6:AF:FA:8D:7A:FB:93:53:31
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Certificate issuer:       /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial:       0650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
Manifest number:          063F
Signing time:             Tue 12 May 2026 22:48:26 +0000
Manifest this update:     Tue 12 May 2026 22:48:26 +0000
Manifest next update:     Tue 19 May 2026 22:48:26 +0000
Files and hashes:         1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: PgdyFRpd0Mzx6K6EDvIisNKhCLLGOss4G8ZsArM5H2k=)
                          2: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: eMjJNI89VuvQe2VIixwHrvRIUHpYBAcPbg9uXI8SsCc=)
                          3: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: IBTVSNTlY0HL9PfzWjSjfhlMPscSCqtnXeT7BZJCHtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
                          rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
        Validity
            Not Before: May 12 22:48:26 2026 GMT
            Not After : May 19 22:48:26 2026 GMT
        Subject: CN=6a03ae3a-6d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:ba:c7:bd:79:1c:7d:2b:4c:2d:cf:a5:77:
                    f0:e3:e5:28:f0:98:f6:c7:71:de:34:a7:48:e7:48:
                    e2:59:b1:45:df:25:08:97:9d:e1:1b:69:00:9a:38:
                    88:40:3e:c6:f4:cd:88:6e:db:c6:e3:51:c2:ca:4f:
                    22:a0:88:7a:e3:90:0c:50:5c:37:17:ab:2f:42:7c:
                    54:6e:11:0f:fa:a9:0c:3a:ed:fc:5f:61:84:71:4e:
                    93:78:ab:3c:66:19:e0:82:ff:4d:90:b7:65:40:ce:
                    77:ae:2b:31:ec:a6:e8:ea:54:22:d9:7b:ea:b6:66:
                    f6:9f:34:11:2e:d9:23:a7:b7:28:72:c9:ac:da:ec:
                    e5:39:45:9b:29:76:2e:8a:87:a3:6f:93:54:57:4f:
                    e1:9f:3c:1d:6b:ca:a6:71:56:d6:96:ce:96:09:b2:
                    35:38:3c:39:8e:ef:a2:6e:39:b9:e7:bb:5e:be:80:
                    29:f8:cc:c4:36:f8:2f:1d:76:b1:24:fc:15:c6:f3:
                    61:38:c4:3e:2b:6d:fa:14:e1:30:2b:62:ab:31:c7:
                    1b:15:90:46:02:2c:19:fa:8a:bb:91:05:8f:74:36:
                    ee:f0:4b:ab:01:1b:b2:68:f0:a4:50:c1:bb:09:03:
                    f0:72:f8:f7:e7:c5:0d:9b:14:38:ef:de:5f:06:b6:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:86:9E:99:36:67:27:D5:74:64:B6:AF:FA:8D:7A:FB:93:53:31
            X509v3 Authority Key Identifier:
                keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:6f:05:65:6c:2b:e3:d9:4f:67:34:70:07:49:09:5e:35:
         ec:cb:92:e8:78:33:0d:64:d0:16:83:e9:20:dc:42:37:93:7f:
         c8:06:95:99:7d:71:b0:47:31:aa:3a:88:99:1b:7b:ee:4e:92:
         72:88:ab:aa:8a:11:f2:cf:f8:40:f2:c2:9c:0a:22:ec:30:d6:
         51:01:4d:ea:09:8c:69:78:41:df:74:4d:e6:5a:94:70:e0:fb:
         0d:fc:2c:97:d9:c7:c3:79:55:77:7a:48:2f:40:ff:ca:92:92:
         35:8a:49:c8:be:ec:eb:58:43:23:d2:42:56:55:8b:2a:d4:b3:
         67:eb:12:63:48:71:9f:e2:c7:06:63:97:34:9b:12:9c:dd:31:
         f3:11:f0:e1:79:fd:e7:9b:eb:ef:8f:0a:24:2a:71:b0:8a:23:
         12:3c:42:e1:17:02:5c:5c:2b:b6:a6:85:0a:81:08:1a:7b:61:
         e8:0d:24:ce:9b:b6:d7:ec:ae:8b:88:c7:2e:9d:11:6c:55:ef:
         7c:bc:85:8c:e1:5c:44:39:e9:73:1c:12:36:8f:0f:d5:ba:ce:
         2f:6d:e8:12:6f:5a:b5:71:62:fc:b3:7a:12:9b:71:3d:87:c0:
         ba:53:90:2f:2d:34:ca:83:22:ed:70:14:7b:11:d1:3f:99:fc:
         79:97:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:34 2026 by rpki-client