Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File:                     NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier:          c3eO30PYdeRpvFgr/sabzWJ4K6frf4UI/LC5Ob3Blnw=
Subject key identifier:   31:66:38:4E:FC:9E:D7:B1:39:A2:D0:E3:6A:FC:7F:C5:B7:9F:14:BB
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number:          04
Signing time:             Wed 25 Mar 2026 06:19:29 +0000
Manifest this update:     Wed 25 Mar 2026 06:19:28 +0000
Manifest next update:     Wed 01 Apr 2026 06:19:28 +0000
Files and hashes:         1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: MpaMJQHY7EyIAUI9n+6B/Nc9PxjZONDrfD/zu0d7diY=)
                          2: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: jGySyCZGfLJ6Gub4dNKlt20vYdC2D9wIP1qqcY9QBu8=)
                          3: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: bSERLhOY5GiHM0MRoVjj+c34VXkpFi4/JG1GVO16gFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: Mar 25 06:19:28 2026 GMT
            Not After : Apr  1 06:19:28 2026 GMT
        Subject: CN=69c37e71-85a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:69:01:04:e3:8d:d7:95:e7:6b:60:3d:14:
                    01:d9:1b:68:19:ac:f4:e3:93:3e:c7:28:2e:5a:a0:
                    40:d6:21:6b:a8:3a:45:7b:f4:27:25:ed:77:f8:fa:
                    0c:67:8c:af:f1:8a:f6:65:72:67:5d:84:57:2d:a8:
                    58:86:4c:78:d6:9a:a0:0e:43:9f:62:8f:a9:a7:07:
                    55:b4:a5:4e:65:61:96:83:57:9c:96:10:1a:3b:e6:
                    8f:3e:7c:8e:87:5a:cf:cc:c4:64:aa:18:8c:88:9e:
                    5b:cc:e0:71:b0:91:06:a3:9a:69:7f:10:67:a4:38:
                    b3:7c:15:43:ba:2e:26:c9:69:3d:02:2d:c1:d4:ac:
                    22:b8:ac:59:83:1e:2a:52:de:f1:e0:2f:16:5f:09:
                    3f:71:c9:79:3d:ac:66:7d:47:89:a3:ef:6a:01:6f:
                    42:c4:d7:d1:4c:2e:7d:ad:b6:ad:c3:ae:54:db:82:
                    b0:4d:a0:b5:06:97:2c:e5:6e:bd:e2:1a:06:c5:cd:
                    9d:b6:ba:17:e9:e4:b7:d1:93:f8:75:4a:7d:48:14:
                    31:03:96:89:aa:9b:29:a9:dd:20:72:92:31:c6:84:
                    98:67:5b:b1:7c:56:dc:26:9d:e4:55:0a:62:34:cf:
                    cd:78:0f:63:55:a5:e5:dd:a2:92:12:ab:c9:b6:6a:
                    01:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:66:38:4E:FC:9E:D7:B1:39:A2:D0:E3:6A:FC:7F:C5:B7:9F:14:BB
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:3f:20:23:e1:46:81:3a:a3:b6:0b:39:69:34:99:ec:4b:
         c5:cc:6b:fc:59:b3:06:ef:d9:4b:df:3f:5a:8b:dc:d3:aa:6d:
         fe:40:40:98:bc:55:dc:a8:61:bc:5b:f0:84:74:0b:71:52:a9:
         23:34:25:31:72:8d:20:d6:83:de:1f:61:38:6c:09:83:5c:7f:
         64:2d:e0:3a:fa:2b:50:64:61:5c:1f:56:bf:21:60:a2:ea:71:
         92:6d:de:5f:b0:4a:5b:4b:ba:c9:23:40:88:3e:8a:22:68:84:
         65:2e:4f:e9:7b:c2:1e:58:42:9b:b8:e1:3e:46:0f:17:69:21:
         11:8a:82:35:ab:a5:63:bf:0c:b3:d4:9c:89:b7:4e:37:56:cb:
         b8:90:be:ad:d5:4d:20:f8:37:c4:29:ec:aa:4d:62:43:2f:de:
         51:75:e9:97:52:e4:11:ee:77:ab:49:8a:7c:fd:1a:19:94:84:
         f5:52:fe:01:b4:cb:43:87:7a:e2:58:8d:6a:ce:0f:eb:d5:fd:
         90:40:01:0b:10:81:71:69:de:1c:4c:9c:84:bb:6e:b6:ec:a4:
         dd:7a:95:1b:3a:b2:ff:e5:0f:ff:20:94:f1:ea:ce:f2:c1:47:
         58:99:92:68:8c:b2:18:86:5e:6c:8b:b7:c8:80:9e:bd:c5:a6:
         1f:c7:ee:0c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDY2MzExMC8GA1UEBRMoMzY3M0I2OEM5NEZDMjFGRjNGQ0RFNkEzOTNFRUM2M0Ix
NkMwMTRGRTAeFw0yNjAzMjUwNjE5MjhaFw0yNjA0MDEwNjE5MjhaMBgxFjAUBgNV
BAMTDTY5YzM3ZTcxLTg1YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8QmkBBOON15Xna2A9FAHZG2gZrPTjkz7HKC5aoEDWIWuoOkV79Ccl7Xf4+gxn
jK/xivZlcmddhFctqFiGTHjWmqAOQ59ij6mnB1W0pU5lYZaDV5yWEBo75o8+fI6H
Ws/MxGSqGIyInlvM4HGwkQajmml/EGekOLN8FUO6LibJaT0CLcHUrCK4rFmDHipS
3vHgLxZfCT9xyXk9rGZ9R4mj72oBb0LE19FMLn2ttq3DrlTbgrBNoLUGlyzlbr3i
GgbFzZ22uhfp5LfRk/h1Sn1IFDEDlomqmymp3SBykjHGhJhnW7F8VtwmneRVCmI0
z814D2NVpeXdopISq8m2agHjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMWY4Tvye
17E5otDjavx/xbefFLswHwYDVR0jBBgwFoAUNnO2jJT8If8/zeajk+7GOxbAFP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzL0NENDcwQ0FFMjRF
QjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4X3plYWprLTdHT3hiQUZQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTm5PMmpKVDhJZjhfemVhamstN0dPeGJBRlA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE
NjYzL0NENDcwQ0FFMjRFQjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4
X3plYWprLTdHT3hiQUZQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZrj8gI+FGgTqjtgs5aTSZ7EvFzGv8WbMG79lL3z9ai9zTqm3+QECYvFXcqGG8
W/CEdAtxUqkjNCUxco0g1oPeH2E4bAmDXH9kLeA6+itQZGFcH1a/IWCi6nGSbd5f
sEpbS7rJI0CIPooiaIRlLk/pe8IeWEKbuOE+Rg8XaSERioI1q6Vjvwyz1JyJt043
Vsu4kL6t1U0g+DfEKeyqTWJDL95RdemXUuQR7nerSYp8/RoZlIT1Uv4BtMtDh3ri
WI1qzg/r1f2QQAELEIFxad4cTJyEu2627KTdepUbOrL/5Q//IJTx6s7ywUdYmZJo
jLIYhl5si7fIgJ69xaYfx+4M
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:54:07 2026 by rpki-client