Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File:                     NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier:          5zQbA73STi2GLZJk9enym2S2IlaYKZKyq++Yf25ayZQ=
Subject key identifier:   48:83:9F:98:CE:9B:A8:D9:B5:AF:81:98:1B:2B:8C:17:93:31:1C:3F
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number:          42
Signing time:             Thu 23 Jul 2026 08:07:42 +0000
Manifest this update:     Thu 23 Jul 2026 08:07:42 +0000
Manifest next update:     Thu 30 Jul 2026 08:07:42 +0000
Files and hashes:         1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: yy92aXlbZxXl2zhbWFkpx1qXlmgGhI4cgqofboWl2zo=)
                          2: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=)
                          3: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: Jul 23 08:07:42 2026 GMT
            Not After : Jul 30 08:07:42 2026 GMT
        Subject: CN=6a61cbce-c10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6d:77:c4:3e:58:4b:1e:c3:9c:b1:cd:24:40:
                    52:4b:00:73:0d:15:a7:6f:15:26:59:87:7a:e6:d0:
                    6c:ec:d5:25:d3:a9:09:23:f2:28:15:e2:e6:31:60:
                    bd:ed:89:bc:26:3a:5f:ad:5e:47:26:55:7d:e5:92:
                    86:ab:ec:67:a7:93:14:9e:45:e9:8a:48:47:5a:2d:
                    84:42:c5:56:75:71:29:34:14:fe:d1:66:c3:54:55:
                    45:3d:ee:2f:7a:cd:8c:1d:8e:4e:05:b4:0a:d0:dd:
                    19:60:44:06:a2:4b:0a:3c:cc:c4:80:8f:e7:7b:ec:
                    c6:97:52:58:8f:af:2a:8a:21:7f:42:ab:97:b5:8b:
                    cf:64:61:c5:f5:b3:d8:fd:d4:d7:89:4a:f1:32:13:
                    34:39:1d:a1:d6:00:ce:ed:63:59:d6:27:93:7f:41:
                    37:09:35:65:c0:79:f6:d5:ac:df:48:b3:61:f4:fb:
                    71:c8:1f:07:20:67:84:f3:f1:88:4b:14:8b:a6:53:
                    e0:7c:c1:cf:87:44:4e:1a:a0:dd:fd:c8:17:23:34:
                    27:c7:53:3d:c4:eb:61:e1:45:d7:dc:bf:ad:62:63:
                    63:b5:72:14:a7:f2:95:e8:6b:b8:73:56:7a:01:bf:
                    fc:7b:d3:b1:7e:9c:f5:11:b2:49:6c:f6:7a:38:95:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:83:9F:98:CE:9B:A8:D9:B5:AF:81:98:1B:2B:8C:17:93:31:1C:3F
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:23:76:7a:a1:fd:63:58:cd:24:77:a6:4e:1e:bc:d9:69:36:
         7e:86:f8:25:a8:11:2f:86:5c:74:e4:1a:1d:f2:c3:c0:f9:05:
         80:de:e3:d1:92:21:09:77:87:bd:db:16:28:92:7b:b4:1f:0f:
         1c:4b:37:73:d3:10:c2:63:61:b6:aa:45:61:b1:71:1c:d6:1d:
         6c:18:21:ce:7a:12:b4:f2:1e:3a:0f:72:0a:ac:de:c8:14:38:
         d4:bb:ed:44:45:d3:ad:39:21:77:fe:58:9a:2b:ea:6f:72:16:
         cc:d8:3f:d9:64:be:31:81:45:91:ea:b4:8a:d6:a2:9e:9a:c8:
         3b:a0:57:d7:57:6b:06:25:eb:72:8b:b4:2d:1a:15:0c:13:5c:
         90:1e:1e:51:b2:b3:63:18:8a:8c:bb:0a:a6:7b:bf:74:92:9f:
         2c:96:06:56:4f:ca:94:59:3b:ec:4b:3b:9a:c3:b5:8c:1b:cc:
         e3:64:43:b3:78:ec:e5:c8:fd:06:0c:39:97:3a:aa:06:c0:d7:
         a9:32:73:e7:8b:de:f9:0d:91:35:5d:07:de:83:5e:fc:29:cb:
         c5:ff:fb:be:e8:9a:09:0b:92:7e:bf:30:3a:e0:7d:1c:9c:c7:
         c1:2d:04:25:14:76:c0:a1:ed:25:ec:e0:7a:1e:99:09:c4:96:
         dc:18:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:24 2026 by rpki-client