Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
File:                     NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json)
Hash identifier:          AGov4IjV02rHfgJi/SjJgTezZUKXbcRPriAO9zAqudQ=
Subject key identifier:   74:CD:9D:D7:A8:D8:9B:FF:40:D3:0C:0C:DD:4A:42:7E:BC:49:6E:57
Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
Certificate issuer:       /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Certificate serial:       0AF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
Manifest number:          1299
Signing time:             Tue 12 May 2026 19:25:25 +0000
Manifest this update:     Tue 12 May 2026 19:25:24 +0000
Manifest next update:     Tue 19 May 2026 19:25:24 +0000
Files and hashes:         1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: xJFDqL94UaFCzf8/gky9HWtqvJMstIcSfdoSFJIRBWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
                          rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2805 (0xaf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
        Validity
            Not Before: May 12 19:25:24 2026 GMT
            Not After : May 19 19:25:24 2026 GMT
        Subject: CN=6a037ea4-da69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:ff:7b:72:30:4a:16:df:57:2a:51:65:3e:
                    eb:4e:25:d2:a5:87:f0:4d:41:37:9e:99:94:d4:61:
                    16:33:80:66:6f:67:ec:ba:f7:37:30:db:a1:8e:65:
                    99:ff:64:81:05:fd:1c:89:21:16:e5:46:42:65:59:
                    ee:f2:35:c4:89:c2:d5:3a:0e:73:23:ba:be:4e:17:
                    0b:15:be:fa:a0:bd:7a:46:ba:63:92:8e:37:4d:31:
                    88:84:6e:62:ac:99:1d:1f:39:46:52:ab:7e:63:23:
                    dc:7d:60:51:72:03:bc:08:ed:09:da:73:a1:c0:1b:
                    3f:26:fd:d3:61:d4:86:df:b7:60:18:76:1f:b9:f6:
                    44:3c:d1:f5:04:fb:bd:74:21:02:fd:3d:59:00:85:
                    07:48:b1:27:8e:1c:b5:e6:3d:3f:ea:02:48:4e:48:
                    06:4c:25:71:69:14:68:8b:c8:21:a0:ef:95:57:88:
                    cb:07:76:b2:bd:dc:02:0d:4f:07:0b:47:54:f5:36:
                    c9:90:03:13:a1:90:a4:27:7d:2d:c1:e5:2a:82:b7:
                    80:91:6c:e3:75:40:4f:ad:ba:ea:05:18:48:93:2f:
                    bf:dc:0e:42:55:81:fe:73:54:e1:5c:b9:2f:85:a5:
                    0c:fe:bd:21:68:4e:62:48:fe:95:3c:69:5c:74:16:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:9D:D7:A8:D8:9B:FF:40:D3:0C:0C:DD:4A:42:7E:BC:49:6E:57
            X509v3 Authority Key Identifier:
                keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ff:18:3f:57:33:4b:bd:5e:64:e5:c7:42:ea:d0:78:50:db:
         3a:9e:67:28:91:1a:85:48:e6:47:83:07:29:9b:02:f2:bc:3c:
         ed:49:20:70:73:c1:d0:c6:57:06:a8:67:88:68:3a:a0:77:9e:
         41:dc:b1:d5:da:02:d6:aa:22:e7:77:0c:33:43:0c:9c:06:44:
         0e:6e:1a:51:2b:dc:3a:77:2e:cd:27:aa:f6:b4:5e:6a:be:81:
         3a:ff:33:4c:3b:df:f4:e1:58:76:86:29:0f:f5:fa:8c:12:56:
         78:49:42:76:e4:0d:04:d8:d5:fc:42:0e:c6:11:7f:d4:49:cb:
         2c:f7:0f:9c:37:f9:35:16:30:c2:ed:ad:b4:fe:7c:66:a0:96:
         96:51:43:0e:c6:ac:1c:44:a6:b5:55:c6:0e:03:8b:37:55:50:
         75:fa:b6:2f:e2:1d:86:ed:8d:18:b8:0f:7c:b5:c9:8b:a9:72:
         0d:d4:91:75:34:42:b6:d9:1c:71:69:08:f2:96:9f:44:81:45:
         c7:bc:2b:3d:a6:e7:e7:1c:b7:1b:35:4f:8d:6d:39:1f:4b:17:
         8a:29:61:7d:c7:ed:b1:3b:0d:b3:9a:2e:2e:ef:d1:c6:02:1e:
         84:57:ea:03:20:d1:ab:d5:b7:cb:8b:8b:ad:c2:48:18:b7:4b:
         43:d0:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:54 2026 by rpki-client