Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
File:                     nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json)
Hash identifier:          TrMpWovr/9R/yYErLIkexBI2QqPVU57Yv/7c0HnI0Lw=
Subject key identifier:   33:0A:4B:89:E5:75:D0:A1:4A:64:91:CF:DD:7E:AE:09:5D:3B:FE:25
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Certificate issuer:       /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
Manifest number:          01C0
Signing time:             Wed 13 May 2026 04:03:48 +0000
Manifest this update:     Wed 13 May 2026 04:03:47 +0000
Manifest next update:     Wed 20 May 2026 04:03:47 +0000
Files and hashes:         1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: evZyNqOMb/Cej6nJ3pNNyRJea4yYknq4z9A5HEmkOeU=)
                          2: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=)
                          3: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
        Validity
            Not Before: May 13 04:03:47 2026 GMT
            Not After : May 20 04:03:47 2026 GMT
        Subject: CN=6a03f824-0032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:62:17:8e:64:d1:2c:09:85:aa:d8:9f:62:
                    e5:19:fc:35:56:ad:74:3b:7d:6e:7c:3e:99:06:d4:
                    22:bf:32:12:4d:62:8c:c9:e7:9b:d8:9d:4a:37:e1:
                    5b:04:ff:b1:bf:0c:1b:c2:4d:e9:09:90:12:bc:b6:
                    c4:e6:87:0f:f3:0c:22:f4:27:9d:18:8e:6a:5e:7e:
                    04:ee:22:09:de:fa:17:c9:e0:5f:8a:08:78:88:a0:
                    a6:81:5d:84:43:ac:5e:9c:ba:7d:f9:bd:bc:fc:7d:
                    c1:b6:b6:b3:c5:01:e6:e7:e5:3b:25:89:f3:94:c3:
                    95:b3:66:06:2d:2c:a6:32:e6:b6:ef:b5:93:db:11:
                    fa:f6:d6:55:31:22:6c:a2:6e:db:d6:52:75:16:0b:
                    8e:fa:63:1d:3e:61:6a:16:0a:75:85:3b:a5:6f:61:
                    35:79:ac:79:64:80:6a:3c:13:82:db:a1:c0:26:16:
                    ac:6c:84:b7:39:5f:ed:65:39:64:c8:e0:7a:d8:6d:
                    dd:94:19:5a:f9:5a:41:13:67:fc:91:94:bd:3d:9b:
                    c5:ea:7b:4a:20:b6:c2:1b:23:3f:8b:f4:2c:6c:71:
                    b8:08:05:f9:56:c0:28:dc:c8:1d:b4:d5:44:73:49:
                    0a:6a:da:0b:da:9b:68:4d:43:73:2d:69:da:d4:c8:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0A:4B:89:E5:75:D0:A1:4A:64:91:CF:DD:7E:AE:09:5D:3B:FE:25
            X509v3 Authority Key Identifier:
                keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:be:41:4a:be:c0:7c:98:b5:42:06:3b:6c:f2:55:07:7d:
         7c:cb:40:43:f9:35:63:c3:25:a2:7e:03:ca:24:b6:b0:c3:7f:
         d8:f1:71:54:9a:77:44:b3:f9:90:b1:89:b1:3b:76:97:95:62:
         0b:13:7f:29:4d:65:40:a1:b7:7e:1e:78:bb:7c:0a:e6:39:b7:
         cd:ac:ca:0b:b2:2e:84:70:08:36:38:16:a0:c6:1a:35:d1:32:
         ff:76:d6:95:6b:8d:bd:39:9f:06:fa:0b:f2:b3:04:e5:4c:e0:
         39:db:99:56:05:f3:ee:90:5e:6c:8f:70:55:5f:af:38:cf:6e:
         38:92:90:63:40:12:ae:17:59:6a:2e:ec:09:89:d5:73:98:e9:
         75:6a:33:2d:ea:e8:01:e1:dc:76:54:b2:81:1e:cb:c4:18:1b:
         fc:b7:e0:14:85:73:52:29:c5:f6:6d:8b:e9:aa:6e:90:d3:31:
         ed:36:68:12:5a:5f:66:c4:35:f5:72:69:20:33:54:54:47:76:
         02:a0:10:63:3b:bd:38:97:86:4d:7f:71:33:6a:6c:cd:19:3f:
         8f:9e:b8:85:8b:9e:70:bb:07:f5:2b:df:b9:c0:2d:06:aa:bf:
         ef:76:c2:41:2a:0f:85:b7:2a:90:50:a5:f5:a0:6c:c6:8d:2f:
         2d:80:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:51 2026 by rpki-client