Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File:                     NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier:          XQbBDN6DskBeXx/dHmfi2E3dYUUQIncflpwrjs3rtxA=
Subject key identifier:   D7:09:D1:E4:73:71:51:F9:61:72:67:3C:53:14:9F:1D:83:51:93:87
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number:          01DF
Signing time:             Mon 11 May 2026 03:34:28 +0000
Manifest this update:     Mon 11 May 2026 03:34:27 +0000
Manifest next update:     Mon 18 May 2026 03:34:27 +0000
Files and hashes:         1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: Zk+ae6YTjxqEua7Dh47x/zjBXoznd4fXhRV0sxnwzM0=)
                          2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: May 11 03:34:27 2026 GMT
            Not After : May 18 03:34:27 2026 GMT
        Subject: CN=6a014e44-17db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:6c:df:ea:17:2a:56:d4:8f:27:fa:6e:b4:
                    39:a2:a0:c5:07:a3:6f:40:bd:e8:97:87:4e:d3:88:
                    a6:b5:24:9b:c8:a3:49:4c:b4:d5:5a:bb:fb:52:d3:
                    00:ba:4c:7f:ed:e8:de:64:c8:01:f8:ce:10:9e:df:
                    43:1e:60:d0:50:03:d2:33:f3:ad:82:bc:d6:86:a0:
                    50:46:7e:4e:29:7f:8f:f0:cd:6e:d5:5a:87:a6:85:
                    91:62:e2:d7:54:4d:0d:5e:c3:81:3a:75:40:12:94:
                    ee:36:aa:ef:ad:45:cc:ba:0f:0f:a1:bc:b6:4b:a7:
                    c4:eb:65:25:43:c4:02:9c:ce:67:40:19:a8:9c:f6:
                    18:90:a2:8f:44:ed:6a:4b:69:a9:5e:d1:be:3d:e1:
                    68:68:d2:39:1c:09:f9:15:3b:67:32:9d:01:f6:09:
                    81:2f:53:ec:21:7b:73:ed:11:43:5c:ac:cf:55:8f:
                    9f:9a:ee:79:66:14:40:bd:2b:12:e7:4b:0a:9a:f9:
                    89:f4:71:0b:a9:93:c9:cd:9a:f8:8a:30:4c:42:98:
                    a6:a1:b1:31:e6:19:fd:93:87:a9:8f:b2:8d:75:00:
                    7a:7a:c4:23:97:c4:2a:b5:64:3f:e9:eb:ea:72:4d:
                    2b:6e:4d:d7:5c:72:a7:a1:86:9a:81:99:2e:d2:1b:
                    0c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:09:D1:E4:73:71:51:F9:61:72:67:3C:53:14:9F:1D:83:51:93:87
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:41:1d:f9:49:a6:ed:f8:20:45:21:fc:11:dd:81:ea:26:
         8d:24:15:e7:18:47:1d:63:30:8a:0b:f4:9d:f7:b4:e4:54:1e:
         5e:8c:6d:74:32:5d:90:42:36:c8:05:fe:ef:f5:7d:a6:af:46:
         ca:73:f0:76:92:65:0c:44:de:38:fe:55:71:25:9f:eb:1a:e0:
         75:a3:c1:1b:3e:42:82:9a:e4:6e:b1:29:04:c9:0d:85:f5:3a:
         84:17:52:a4:1e:d2:0d:71:ce:aa:a6:16:68:5e:27:54:2d:8c:
         d5:6e:25:f3:58:68:d4:68:72:d8:8c:75:5c:15:85:7d:82:e9:
         0e:69:b8:2b:3d:ee:a5:54:40:94:b7:8d:66:43:1c:b4:73:da:
         99:f7:d0:13:dc:3b:c7:79:b7:07:97:d6:7f:20:1f:3a:a6:40:
         99:46:25:f7:b0:b8:24:88:88:f9:40:d3:f3:b1:91:44:ec:45:
         5d:0d:55:78:ad:f9:40:83:83:fa:ae:30:42:1b:85:58:3e:f9:
         88:13:19:9c:80:07:83:d9:30:58:7e:2c:5b:7e:b8:b6:b9:5a:
         81:ce:81:2c:75:4a:1d:4a:d4:95:03:ba:37:7e:29:8b:32:4c:
         e6:5a:7b:d6:89:2f:b6:38:1f:be:89:e8:65:7b:fa:fa:3c:fa:
         d9:29:c1:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC
MzMwRkREOUQwHhcNMjYwNTExMDMzNDI3WhcNMjYwNTE4MDMzNDI3WjAYMRYwFAYD
VQQDEw02YTAxNGU0NC0xN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArP9s3+oXKlbUjyf6brQ5oqDFB6NvQL3ol4dO04imtSSbyKNJTLTVWrv7UtMA
ukx/7ejeZMgB+M4Qnt9DHmDQUAPSM/OtgrzWhqBQRn5OKX+P8M1u1VqHpoWRYuLX
VE0NXsOBOnVAEpTuNqrvrUXMug8Poby2S6fE62UlQ8QCnM5nQBmonPYYkKKPRO1q
S2mpXtG+PeFoaNI5HAn5FTtnMp0B9gmBL1PsIXtz7RFDXKzPVY+fmu55ZhRAvSsS
50sKmvmJ9HELqZPJzZr4ijBMQpimobEx5hn9k4epj7KNdQB6esQjl8QqtWQ/6evq
ck0rbk3XXHKnoYaagZku0hsMiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcJ0eRz
cVH5YXJnPFMUnx2DUZOHMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4
QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw
X1hOcUxDUUdHZml6TVAzWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI/pBHflJpu34IEUh/BHdgeomjSQV5xhHHWMwigv0nfe05FQeXoxtdDJdkEI2
yAX+7/V9pq9GynPwdpJlDETeOP5VcSWf6xrgdaPBGz5CgprkbrEpBMkNhfU6hBdS
pB7SDXHOqqYWaF4nVC2M1W4l81ho1Ghy2Ix1XBWFfYLpDmm4Kz3upVRAlLeNZkMc
tHPamffQE9w7x3m3B5fWfyAfOqZAmUYl97C4JIiI+UDT87GRROxFXQ1VeK35QIOD
+q4wQhuFWD75iBMZnIAHg9kwWH4sW364trlagc6BLHVKHUrUlQO6N34pizJM5lp7
1okvtjgfvonoZXv6+jz62SnB7g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:50 2026 by rpki-client