Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
File:                     NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json)
Hash identifier:          vmLtH2Fx3R8A63yZ0/u5E4Quu2zqD+VYqa5rJij+U5A=
Subject key identifier:   3A:32:BF:4C:4A:6C:87:D8:7B:22:04:41:25:C1:A0:AC:25:58:16:3E
Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
Certificate issuer:       /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Certificate serial:       0AEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
Manifest number:          0AE1
Signing time:             Tue 12 May 2026 19:27:45 +0000
Manifest this update:     Tue 12 May 2026 19:27:44 +0000
Manifest next update:     Tue 19 May 2026 19:27:44 +0000
Files and hashes:         1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: qWXqabAjBpcdKiwnwhqshRyrLo6/V68TA1siz0vwsEY=)
                          2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: EsS37XCQ+hTMcMmbjcFpgJOlLiK3n71SoYQ41+HMC6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
                          rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2798 (0xaee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
        Validity
            Not Before: May 12 19:27:44 2026 GMT
            Not After : May 19 19:27:44 2026 GMT
        Subject: CN=6a037f31-42c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:fb:14:a2:34:32:53:e1:fe:d6:52:61:6f:
                    35:87:d6:8d:e7:72:e2:57:47:50:fb:3b:59:8c:48:
                    55:47:d9:d2:6f:44:d0:1e:e6:ab:3b:2b:b8:eb:f1:
                    f6:1e:df:f5:a5:7d:09:ce:20:df:63:54:01:ca:9f:
                    12:1e:86:1c:7c:d5:95:fb:69:58:0f:65:79:af:7e:
                    a4:73:d7:d7:6c:1a:01:50:11:54:54:5e:78:64:1f:
                    1d:31:a0:1e:0e:45:50:27:0d:99:3b:4d:83:1b:8f:
                    df:09:11:6f:ab:97:18:32:8c:1f:a0:f0:4b:95:15:
                    1e:25:e5:f8:a8:20:87:5a:23:83:4c:be:74:bd:0b:
                    ab:5f:1a:73:e3:8e:c0:78:b5:95:1d:44:18:43:46:
                    4b:b7:1d:ff:38:49:c6:db:48:92:f6:2e:b7:50:a5:
                    5f:d6:9c:9c:46:15:0b:b2:b9:93:5d:87:75:2b:54:
                    26:ec:6b:b7:44:d3:db:75:08:d0:ee:bf:5e:55:a4:
                    d5:a5:b1:4a:66:bc:94:bc:22:d5:f3:f4:c8:58:ff:
                    5b:23:19:44:86:54:af:b6:5d:a9:a0:1e:07:e5:db:
                    23:1c:41:21:35:bf:4b:2e:a3:63:3f:9d:44:ee:a2:
                    f3:03:8f:f6:79:41:c1:54:54:f9:f6:16:57:fa:5e:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:32:BF:4C:4A:6C:87:D8:7B:22:04:41:25:C1:A0:AC:25:58:16:3E
            X509v3 Authority Key Identifier:
                keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:d2:18:f6:8e:46:f1:d3:a3:5d:2f:d7:d2:6b:20:6f:de:
         4f:4b:6b:6e:ef:1e:41:53:81:e5:d2:72:90:49:1e:4a:81:53:
         ed:30:e3:14:37:eb:95:f2:86:c3:9a:e3:11:ce:48:30:ef:73:
         d4:3a:ae:76:de:a9:e8:df:3e:97:1a:e0:bb:f2:68:60:a4:36:
         7d:c2:2c:4f:57:05:9d:ef:e0:64:1c:e2:4a:25:52:82:31:b6:
         ac:04:58:4d:ca:1c:a9:b9:89:dd:f3:c8:17:9b:d6:f8:a0:ce:
         00:6f:0b:f8:b9:19:a3:6d:78:38:d2:5a:c5:f2:11:d7:56:d6:
         24:ba:23:7f:9f:0d:6a:ef:c6:67:4d:eb:6f:43:10:2b:d9:62:
         a6:4d:ea:ab:b0:ca:da:5b:fa:21:57:a2:2f:ec:24:14:fa:25:
         42:72:0a:30:6a:b6:39:21:d4:9e:46:32:d1:56:0e:e8:26:87:
         cd:f1:00:30:d6:c7:34:94:3f:4b:c1:dc:11:7a:18:c8:2b:21:
         74:f2:54:be:8a:cd:48:23:a9:ea:ec:b8:c4:19:c9:3a:b1:8d:
         c9:55:62:49:ff:6d:ae:f4:34:a5:5e:d9:3e:64:2a:7f:7c:c9:
         58:4f:3c:a2:5b:7b:dd:2f:58:55:ac:26:1f:e8:3b:cc:cc:b1:
         8a:c0:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:24 2026 by rpki-client