Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          +JapFSwoPEv/x8XGyC96Oo7aZOEsqw+QwsBtrTwkVGw=
Subject key identifier:   C0:80:1F:8F:18:9B:0B:50:2F:3C:58:83:3E:4D:35:84:C9:AD:D8:5E
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          85
Signing time:             Wed 25 Mar 2026 06:52:19 +0000
Manifest this update:     Wed 25 Mar 2026 06:52:18 +0000
Manifest next update:     Wed 01 Apr 2026 06:52:18 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: z7ZMp5hRmSmx+5YkQgN4luKjysd/V6yvPKIe8VW352w=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: cYt+KD2Qk+BlMRrfFar8wLBaPDEtviMRQH8N+k8Q4G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Mar 25 06:52:18 2026 GMT
            Not After : Apr  1 06:52:18 2026 GMT
        Subject: CN=69c38623-1457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:65:b3:31:60:b8:b6:5a:95:31:f8:9e:b4:
                    79:84:d2:2e:5e:6b:18:19:4c:c1:61:e6:a5:d0:b2:
                    51:c5:73:78:58:e1:e1:cf:4f:6a:63:b8:b7:90:91:
                    08:d1:0f:9e:37:03:14:47:5d:06:31:e5:f4:67:d2:
                    c8:65:ec:ec:c9:82:9c:ee:2b:70:f4:9c:62:3d:61:
                    33:66:65:e5:4e:82:ca:0c:d2:1d:dc:6d:44:cd:87:
                    4a:b2:03:2e:43:ad:ed:fa:5f:9b:87:70:c2:f8:97:
                    74:7f:8d:12:ba:fa:a5:dc:50:6f:f8:94:81:ab:ef:
                    1d:19:5d:6b:81:c6:27:33:a1:c4:0a:ef:cb:f7:f5:
                    bb:4c:6c:c6:53:31:5a:25:c7:3d:c8:a3:e1:ab:03:
                    19:b7:b0:cf:f7:87:4f:a4:6e:e2:6a:b0:1f:30:58:
                    37:c6:5e:b2:e7:d3:5c:f8:a9:2b:ca:71:0a:1d:20:
                    9e:f9:a2:89:6a:2a:31:4f:19:58:00:18:1c:4c:52:
                    cb:04:fa:30:38:e3:98:53:12:9a:52:72:fc:f4:6d:
                    bd:32:c4:fb:be:68:29:04:5e:8f:15:60:55:59:2b:
                    7d:07:14:88:a2:30:9e:8a:0c:a7:11:70:95:59:48:
                    48:a6:39:4f:4c:a3:db:23:90:86:58:5e:11:a0:df:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:80:1F:8F:18:9B:0B:50:2F:3C:58:83:3E:4D:35:84:C9:AD:D8:5E
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:25:5d:4f:f8:e9:42:ac:06:1e:58:76:b0:cd:3b:41:9f:4e:
         75:79:3e:bc:53:d2:f4:ba:4e:b2:0a:ec:fd:ff:f0:f6:de:86:
         7c:36:b5:37:69:9b:5e:7f:e8:28:7c:aa:62:a2:8c:9d:07:42:
         9e:d0:3a:0b:21:99:1c:80:5e:f5:32:c9:9d:26:ab:7b:48:cd:
         a5:8a:de:67:85:66:33:0f:28:d2:2e:59:35:bc:dc:ab:56:d8:
         f2:73:26:18:f5:6e:9c:4c:54:70:cb:b8:61:30:78:3a:5c:66:
         67:9f:ca:52:f8:cd:23:d6:03:f5:2b:b8:be:b7:40:d9:14:34:
         7f:e6:75:1b:21:a7:b7:6b:c4:1f:03:eb:12:d5:7a:3f:1f:06:
         00:e4:2e:9a:36:75:08:7f:89:44:f2:8e:ba:44:69:8f:18:9c:
         b5:88:44:e9:2f:23:d5:e9:55:5f:34:68:41:ae:73:9a:9d:79:
         2f:89:33:70:67:fa:e9:d9:fd:71:19:19:24:88:db:66:4f:fe:
         2d:28:4c:05:b9:05:02:9e:a6:19:82:21:f5:72:16:aa:18:c5:
         b3:f0:22:25:ff:53:11:96:2f:5b:7c:77:ba:45:ea:4d:6b:32:
         94:54:8d:7b:04:96:61:93:bd:a9:b6:a5:19:10:6a:19:62:8f:
         c5:c0:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:08 2026 by rpki-client