Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          tz0mODqBt0QEG4NLxbMF/e/jeTqpbl8R2cApLuvnsow=
Subject key identifier:   BD:68:18:2A:7C:EA:79:DE:E6:F0:88:51:B5:8F:89:91:38:4B:D8:F8
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       14FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          14F1
Signing time:             Wed 22 Jul 2026 16:56:04 +0000
Manifest this update:     Wed 22 Jul 2026 16:56:03 +0000
Manifest next update:     Wed 29 Jul 2026 16:56:03 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: dE5x5z3UnGLmFGIMzI25RiothMUVAJhadtOYoSmuxEc=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: W6FOTcn74gf4+0BoMZOpH6DC5rviJxuaWu2OotOF9rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5372 (0x14fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Jul 22 16:56:03 2026 GMT
            Not After : Jul 29 16:56:03 2026 GMT
        Subject: CN=6a60f623-f010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:b4:79:ef:36:a8:08:3d:a6:3b:89:90:45:
                    ed:93:cf:90:d0:96:c3:c7:56:1d:ec:5e:b1:95:c0:
                    f1:ca:3c:8a:8e:3c:7e:8c:01:cd:40:4e:ce:5c:5e:
                    1b:92:ae:96:e6:16:02:80:25:43:95:c7:89:61:4b:
                    a8:60:fb:54:0c:3c:f9:a9:04:eb:2f:a8:4f:c9:93:
                    0e:eb:92:d0:90:ae:75:fa:a7:13:d0:c9:af:be:a9:
                    ba:05:4d:29:a8:94:52:fa:d4:43:78:a9:9a:7d:08:
                    17:50:d2:b0:2a:66:00:09:67:5f:95:74:d8:17:59:
                    98:01:90:7f:59:44:57:02:01:09:40:54:59:79:f6:
                    ed:6c:1f:47:c9:7d:14:f8:b8:c8:20:0e:fe:b1:be:
                    6a:a7:0a:61:31:e9:bd:a3:b1:90:cb:6e:e5:29:16:
                    a2:d6:2b:a0:0a:9d:64:f6:f3:63:ad:46:ae:7a:71:
                    4d:55:b7:d3:cc:36:08:3c:ce:89:54:df:6c:76:f4:
                    1e:61:b3:b1:14:2f:b0:64:ef:b7:05:62:72:c0:76:
                    b9:9e:cc:18:90:3a:42:d3:10:6a:ac:6a:58:38:d4:
                    db:3c:7c:a7:07:56:50:b4:12:6e:52:d5:23:a8:70:
                    83:05:a9:a1:f6:58:0e:ea:66:0b:26:c8:ac:4f:a7:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:18:2A:7C:EA:79:DE:E6:F0:88:51:B5:8F:89:91:38:4B:D8:F8
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:fc:a2:54:40:c8:5d:ec:e5:a5:b7:1f:ff:4e:df:b6:05:
         b4:b6:b7:84:f3:95:7b:2b:39:e5:19:b1:6b:5b:7c:71:d1:17:
         28:f4:7e:15:66:d5:60:98:d2:a8:8a:3f:35:eb:6e:13:b5:95:
         79:3e:09:1e:d0:5b:7f:0e:15:7b:eb:8c:e0:4c:51:ae:33:31:
         2b:15:07:ae:16:06:dc:15:e2:b0:1a:e0:42:df:fe:95:ea:e5:
         91:ad:24:98:d8:e4:8d:89:e8:6f:be:0b:50:e4:6e:69:7a:6c:
         9b:4f:3f:a5:96:33:ca:8b:be:69:1a:dc:b9:82:3b:87:3a:d7:
         67:93:1c:1b:d8:b9:fa:7a:53:e2:bf:44:07:17:48:58:a6:e8:
         b8:3a:30:e6:5c:16:1b:49:b2:c6:58:cc:42:44:5a:2a:0c:db:
         3b:e6:8b:44:27:ac:a0:17:18:03:41:fa:19:3b:9a:6d:3f:ea:
         c7:8f:50:5e:c5:b4:92:2e:26:e8:ff:5c:c2:4f:e0:cd:d6:d0:
         53:11:47:aa:dd:77:be:55:ee:a2:3b:13:26:ef:5e:3a:44:d8:
         98:f1:a7:b8:4d:45:05:ee:a6:d2:38:81:1e:d1:fe:95:a4:6e:
         ff:dd:2b:b0:ae:20:6d:35:32:a3:e5:07:aa:52:30:cc:a2:d2:
         2c:d3:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:15 2026 by rpki-client