Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File:                     NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier:          /YcDN2C9eF0bk0dfa0A55JEVwEaGdxy/GprXudxT4Dc=
Subject key identifier:   3B:D9:79:DC:76:90:E2:C5:15:DC:A7:27:11:21:BD:25:B1:0A:03:BD
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer:       /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number:          0181
Signing time:             Wed 25 Mar 2026 03:52:59 +0000
Manifest this update:     Wed 25 Mar 2026 03:52:59 +0000
Manifest next update:     Wed 01 Apr 2026 03:52:59 +0000
Files and hashes:         1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: yZ5im3b7oSMZy5b40Tyer4JxJ7fkegldpY3oAY+WX0o=)
                          2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
        Validity
            Not Before: Mar 25 03:52:59 2026 GMT
            Not After : Apr  1 03:52:59 2026 GMT
        Subject: CN=69c35c1b-6794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:c7:b4:bd:c5:49:4a:d6:2d:11:64:c6:63:
                    85:af:38:05:9e:0f:19:15:13:b7:48:2c:aa:6c:de:
                    e5:da:ff:7b:5b:82:7a:1f:16:94:19:0e:a7:f0:20:
                    67:0a:20:94:64:37:dc:1d:b3:3c:94:05:26:3f:15:
                    0b:eb:fc:84:fd:3d:c2:23:89:05:20:e8:69:0f:1e:
                    dc:66:88:63:6f:ce:e9:b8:f6:df:94:de:2e:f4:21:
                    7f:f1:f1:6e:56:d6:b1:93:20:fc:b2:67:c8:1a:49:
                    0e:24:31:fd:4c:0d:d8:98:fc:4d:32:dd:8c:fd:ce:
                    e2:b7:be:9e:c0:cc:63:5e:dc:ec:5a:e2:cf:99:04:
                    ee:47:05:81:ad:e5:41:ed:7f:87:f1:eb:c6:1e:0a:
                    10:74:ad:1a:50:05:2c:49:2d:94:b5:66:aa:2b:d3:
                    19:21:61:d4:34:19:29:ab:f8:58:b2:a3:cb:e7:c2:
                    2b:48:7c:e5:12:3c:af:0a:28:45:09:82:83:d8:93:
                    54:88:ad:22:63:45:95:35:f3:3d:52:6d:7d:53:45:
                    ab:ed:f3:16:7f:a9:6f:f3:87:b0:a6:ee:70:88:08:
                    e8:9a:b7:0c:58:3b:94:9d:70:df:c8:e7:df:66:64:
                    09:e6:3c:88:f4:6d:fe:ad:3f:21:a6:64:47:8e:fe:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D9:79:DC:76:90:E2:C5:15:DC:A7:27:11:21:BD:25:B1:0A:03:BD
            X509v3 Authority Key Identifier:
                keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:9b:31:b5:bb:0a:01:cd:55:e3:18:cc:41:d1:ef:60:ee:
         7e:7d:eb:48:13:e4:14:56:ce:b7:ea:a0:bd:66:b1:f8:cd:0d:
         a4:03:a3:99:92:f9:f6:6f:ed:c1:f2:14:c8:ec:3d:77:c9:de:
         fc:4c:03:db:1a:de:b3:64:8e:9c:d6:97:4e:ed:94:a8:a1:7b:
         86:ad:b7:3f:13:46:8e:f7:59:21:02:d2:5e:ad:d0:ae:de:b6:
         be:18:5e:d0:f6:4b:7e:87:b5:b4:32:78:4b:96:90:63:e5:47:
         6c:02:73:44:6f:b6:62:b5:f9:e2:b9:fe:03:52:be:d8:70:fa:
         b0:59:a3:45:67:a3:e2:b3:e3:98:19:24:4a:35:85:68:a2:b6:
         6f:f2:41:94:79:7c:28:99:23:1d:02:52:81:03:82:ae:3f:38:
         c7:b6:5f:10:c6:62:11:fe:2e:e0:c3:02:6c:03:58:fa:0e:c3:
         69:75:02:d6:cc:0c:2b:4e:5a:e9:79:74:a5:68:d8:45:99:3d:
         1a:73:ba:4e:09:33:0a:bd:ed:7c:21:2a:b3:29:7a:69:18:f0:
         21:70:4e:1b:f9:e0:d7:4c:c6:42:46:b6:2c:c6:c9:31:c9:a9:
         cf:0a:09:65:61:ed:ed:7b:21:2f:f3:8a:49:ab:e5:43:f3:7b:
         1e:db:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:50 2026 by rpki-client