Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File:                     NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier:          ahjm9iS73R0JllAzR7TcMPVveSg8mOd9PQ9PF+pkyac=
Subject key identifier:   B5:83:3D:4F:B6:62:95:4D:BD:22:9E:DD:AA:C7:CB:BA:EA:FD:E0:E4
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer:       /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number:          0199
Signing time:             Mon 11 May 2026 04:23:18 +0000
Manifest this update:     Mon 11 May 2026 04:23:17 +0000
Manifest next update:     Mon 18 May 2026 04:23:17 +0000
Files and hashes:         1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: 57PKzfn/LkFMetS27E1SHegt6hlrGZpyhQz8b/H8vuw=)
                          2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
        Validity
            Not Before: May 11 04:23:17 2026 GMT
            Not After : May 18 04:23:17 2026 GMT
        Subject: CN=6a0159b6-73d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:8f:ef:9c:29:f8:bb:0d:6c:c8:c0:16:69:
                    a6:76:7e:c3:36:0a:77:0f:4e:bf:6e:5f:13:c6:35:
                    73:08:6d:a4:a3:62:87:54:eb:89:34:89:7b:0e:a6:
                    60:6f:1c:08:7b:8a:65:f1:9f:90:81:d5:ac:37:bd:
                    8e:6e:d6:25:79:cb:a9:43:0c:05:d8:1d:48:6b:77:
                    f3:ce:24:b9:8f:2c:bc:a5:0a:af:46:10:56:ff:55:
                    a6:fb:d6:73:d8:57:e1:40:9c:aa:6d:06:11:ee:1a:
                    74:93:0b:4c:45:b6:84:45:fd:f3:31:21:6a:13:09:
                    1e:2f:4c:6e:d6:81:a7:1e:82:be:8a:f6:88:30:d6:
                    8b:70:94:59:de:ef:e6:64:6c:55:70:f0:c7:cf:a3:
                    d5:7b:44:3a:40:79:52:8c:c5:14:87:c4:63:90:bf:
                    4a:52:2a:44:0a:dd:87:93:c0:4c:88:be:0a:b9:eb:
                    4e:95:67:19:04:df:76:ef:56:31:7a:71:0e:57:47:
                    bd:20:86:29:66:8a:37:70:ff:03:aa:4c:01:9d:70:
                    fd:91:23:32:8f:ba:08:4d:f4:44:50:bc:4c:ad:cb:
                    c7:11:59:eb:ca:8f:58:9c:22:84:b3:fe:7e:ce:cc:
                    ae:46:0b:67:64:28:2b:5a:e8:b5:65:1a:43:ca:09:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:3D:4F:B6:62:95:4D:BD:22:9E:DD:AA:C7:CB:BA:EA:FD:E0:E4
            X509v3 Authority Key Identifier:
                keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:ed:ec:59:0a:ad:cb:e8:68:c8:4b:38:8d:fe:b1:a4:5f:
         11:61:87:6b:f1:02:27:7a:1c:b5:45:6f:0b:0d:f1:d8:ac:73:
         af:e2:43:75:8e:d0:81:ef:06:3c:dd:8f:c7:c1:55:b6:a2:31:
         69:4b:92:d5:00:e6:4f:0f:96:83:4c:28:98:c8:45:54:46:c4:
         09:17:fc:cc:01:33:e7:54:a9:6d:ae:b9:d1:d0:3e:b9:8b:c3:
         ae:e7:0c:8c:a2:42:44:59:a4:a5:91:ad:8c:25:07:df:9b:2c:
         4e:15:be:11:ed:a0:60:74:2a:03:60:0a:99:ef:41:17:8b:3b:
         64:8d:41:11:f7:42:c5:dc:2b:66:60:0b:51:96:6e:15:26:97:
         95:85:63:5a:5b:69:35:42:1c:87:20:f1:50:a5:0e:45:5f:e3:
         75:dd:15:18:20:21:99:dc:11:ba:18:80:24:eb:05:a7:fc:d9:
         f0:18:86:e8:14:ee:07:f0:e5:3d:57:33:94:19:f3:d1:0a:ad:
         cf:b7:93:32:77:cc:5e:75:57:4e:6c:a6:ff:da:21:fe:75:6a:
         2d:4d:36:98:48:d8:e3:ca:3a:bf:35:6b:fe:ac:be:bc:07:6e:
         5d:0b:24:da:61:6b:fe:3e:ae:7f:a8:db:0d:48:da:6d:f6:d0:
         50:ba:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:21 2026 by rpki-client