Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
File:                     NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json)
Hash identifier:          qY7QLLbcsQKJc/RuI4+gqYV7scUpDylS+HPaYQAb7j0=
Subject key identifier:   A3:16:7F:AB:7A:BB:CB:47:21:E0:C5:B9:C8:9D:FE:32:97:77:8F:E2
Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
Certificate issuer:       /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
Manifest number:          0111
Signing time:             Thu 23 Jul 2026 07:45:00 +0000
Manifest this update:     Thu 23 Jul 2026 07:44:59 +0000
Manifest next update:     Thu 30 Jul 2026 07:44:59 +0000
Files and hashes:         1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: 1H3aQ1/87RT2OmCR87vsEbmiCJ/sK9Fuvr0EnrcGLA4=)
                          2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
        Validity
            Not Before: Jul 23 07:44:59 2026 GMT
            Not After : Jul 30 07:44:59 2026 GMT
        Subject: CN=6a61c67c-68e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:9b:63:51:da:bc:8c:1d:d3:27:ca:c5:78:
                    b6:d5:2a:db:d9:e1:b8:45:5b:71:a6:02:a8:fa:54:
                    0f:ed:95:37:22:e9:fd:41:c3:63:49:54:5f:5c:0e:
                    3f:a4:f1:31:4c:af:d4:08:74:83:59:d4:c6:39:87:
                    55:45:c9:17:38:01:78:00:0a:dd:f7:1f:99:78:9b:
                    b3:3b:e2:c1:d7:1a:af:d7:ba:71:5c:3f:72:05:b2:
                    31:2b:92:93:c7:36:c5:c7:36:c9:d0:0d:1a:63:39:
                    d8:ab:53:0e:47:b9:a6:5e:4e:fb:e3:ec:62:e6:ee:
                    68:42:48:65:9c:a1:3c:05:59:c5:5e:d2:fb:37:b3:
                    ef:01:cf:99:b5:26:17:1d:66:58:97:93:47:92:0b:
                    75:c3:d7:2e:c1:c5:47:b2:bd:cb:2f:04:ff:a2:2a:
                    3d:5e:21:de:59:cd:36:12:5d:b2:09:b7:b9:be:66:
                    34:24:b6:45:d1:d3:2a:ab:0b:bf:c0:f2:00:7b:71:
                    f6:a3:29:ab:53:3e:55:99:c0:82:ce:98:68:c8:95:
                    f7:a3:75:b0:95:e9:e4:ce:93:eb:09:f1:8e:83:de:
                    6a:a3:82:4b:4c:32:08:ac:45:72:40:ac:2e:d7:1c:
                    2c:a9:cf:6e:25:d1:a4:11:b1:ad:17:d8:b9:72:2a:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:7F:AB:7A:BB:CB:47:21:E0:C5:B9:C8:9D:FE:32:97:77:8F:E2
            X509v3 Authority Key Identifier:
                keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:24:50:25:15:66:8a:1b:9f:88:0f:95:8b:c2:f4:e1:a5:0a:
         47:95:ef:6d:61:f0:4b:8c:2a:3c:c2:c2:09:59:5a:a6:75:59:
         ba:e2:ce:12:2b:e4:a4:c0:93:34:9e:da:cb:6d:eb:e0:fc:95:
         b3:1f:95:48:1c:9a:3b:19:e0:0f:42:f9:0e:3e:af:36:d4:bc:
         62:21:7c:5d:e8:c2:a3:32:0c:36:fd:e6:5c:40:13:fe:4e:af:
         14:0c:1a:cc:af:ee:55:7a:9d:16:a8:46:75:8a:bc:76:e3:a0:
         cd:36:34:45:4f:eb:5e:26:6c:8e:bf:25:03:99:b6:3c:f8:da:
         94:be:eb:00:d4:19:a0:63:09:28:90:5a:37:97:69:1c:25:c2:
         f7:2c:44:af:f9:96:f7:b9:4a:41:e0:55:f8:84:7c:fd:f7:12:
         1c:d8:bf:9d:ae:78:ce:b0:d0:3b:90:2c:e4:5c:b4:dc:c4:f9:
         a9:97:b4:5d:03:fb:5b:b0:d1:db:8e:7e:dd:b8:ad:1b:da:a4:
         d8:c0:55:dd:26:00:83:b9:45:79:54:0d:4d:c4:e6:dc:73:a7:
         4b:0c:28:b9:53:d4:76:3f:3d:23:cb:10:c8:2a:e5:bd:66:32:
         62:18:26:75:33:f6:fe:3a:34:02:ea:00:b7:cd:22:d3:3d:b1:
         1a:4e:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:49 2026 by rpki-client