Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          +NDuF8pjGHWvInbnfGjJFwZ0pCZGQwlnH/sx+lcM78U=
Subject key identifier:   11:10:98:03:78:CB:1F:86:18:F8:19:10:EA:BD:F5:A6:A6:59:3C:2F
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       04F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          04F0
Signing time:             Tue 24 Mar 2026 23:25:04 +0000
Manifest this update:     Tue 24 Mar 2026 23:25:03 +0000
Manifest next update:     Tue 31 Mar 2026 23:25:03 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: 0U7fogAAJ5OJiHzFORY+oWWi/oYsF7WkrHGJldVtmmw=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: QQ04clgDlq/iSdNCQgiJAr76DYCKTHAdHCQwRcpdMwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Mar 24 23:25:03 2026 GMT
            Not After : Mar 31 23:25:03 2026 GMT
        Subject: CN=69c31d50-2796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:42:34:a9:64:59:47:4b:90:04:73:57:0d:
                    cc:b3:fc:04:51:0e:2a:01:6e:d6:e2:8b:08:7b:e9:
                    dc:f3:e9:c2:3c:17:64:dc:86:89:10:de:83:72:c7:
                    5b:37:1d:e5:a8:18:1d:28:34:74:ba:ed:79:e8:8c:
                    a4:cd:51:82:f5:fa:2b:dd:0a:b4:96:5c:d7:40:2b:
                    dc:6c:6b:6d:c8:63:40:bf:ee:17:fe:3c:ec:9f:36:
                    81:de:c5:2c:84:86:59:20:01:06:b2:32:08:8f:66:
                    f0:3c:c7:19:c8:92:ad:1d:21:83:e4:a4:91:6d:70:
                    81:9a:7c:46:0c:66:e4:a6:48:52:bc:4a:6e:85:e8:
                    f9:df:35:f1:ad:93:9c:8e:74:c3:15:7d:44:3e:79:
                    50:13:cf:7e:8a:98:81:88:b2:ea:e3:5c:f1:1b:6f:
                    79:9c:78:ea:82:fb:b3:ee:03:17:4f:88:50:0b:47:
                    22:cb:cb:aa:06:6e:ba:fd:d2:b2:f5:f5:e6:54:e6:
                    91:ab:83:c4:49:f1:18:74:f4:ef:46:8d:62:b4:22:
                    cf:39:5d:a7:05:31:9d:61:0e:f5:b3:8b:bb:e9:77:
                    31:a0:e3:5d:e2:3d:db:cc:41:c1:80:ca:de:7b:33:
                    5e:9b:4b:f5:b4:49:50:f3:b5:74:41:25:a9:20:c2:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:10:98:03:78:CB:1F:86:18:F8:19:10:EA:BD:F5:A6:A6:59:3C:2F
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:28:e9:93:8f:7c:05:60:c5:2f:6c:1f:01:e6:be:32:7d:7e:
         87:1a:27:e4:11:96:18:5a:f0:4c:e0:b7:3a:fa:93:7d:e2:a4:
         50:9c:61:c4:f9:95:88:34:7f:4a:e0:69:2a:b8:8b:e8:6e:95:
         ce:24:2b:ca:65:eb:05:c2:51:51:7f:1c:67:cb:09:58:35:e0:
         0e:43:ef:cd:8d:06:df:dd:a5:07:9d:4c:33:2c:53:29:f5:c7:
         c9:cb:5e:5d:c1:32:98:3c:e5:b1:4f:a9:a8:22:bc:0b:28:ce:
         47:87:f5:c4:fd:89:8e:c6:ae:d8:11:85:9e:9b:6c:0e:45:03:
         98:66:9a:d9:b3:0b:32:a2:fe:ba:99:db:96:63:c5:a7:da:d5:
         ca:87:72:0a:cd:57:4d:e0:01:ec:65:a1:7c:6f:c0:62:7f:e4:
         d8:a7:9d:9c:ce:4e:37:12:d3:86:84:57:e0:58:6f:26:0f:a1:
         44:12:b4:ee:37:0c:f6:4f:b5:aa:de:6f:b4:d5:19:a3:5a:92:
         95:31:4d:d3:ca:e7:57:09:8d:38:f8:6f:11:b3:15:6f:b8:b0:
         bd:4c:a6:04:07:85:f0:01:7d:a3:fe:29:c8:1f:e4:2e:01:1b:
         5a:02:31:81:a3:2e:d9:fc:22:b1:40:ea:46:06:41:82:77:35:
         9f:3a:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:45:33 2026 by rpki-client