Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File:                     NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier:          +cxAZgvdZVUujCC5d38Htgng6iYIvxF1TxdOJcPcl9k=
Subject key identifier:   04:7D:60:53:A9:56:BD:5C:8D:BA:D8:A9:5C:73:3E:88:F1:AF:4E:7E
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer:       /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number:          01BE
Signing time:             Thu 23 Jul 2026 05:18:55 +0000
Manifest this update:     Thu 23 Jul 2026 05:18:54 +0000
Manifest next update:     Thu 30 Jul 2026 05:18:54 +0000
Files and hashes:         1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: JOGbK76RG5Rz4GYnSMPeWuKf5lORPrRQHP8TrI5V/90=)
                          2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
        Validity
            Not Before: Jul 23 05:18:54 2026 GMT
            Not After : Jul 30 05:18:54 2026 GMT
        Subject: CN=6a61a43e-1eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:3a:ef:52:d0:b4:bd:2c:63:a7:ff:fc:87:
                    36:6d:84:de:61:ca:18:af:60:dc:a1:27:a4:0f:f0:
                    95:c0:b0:5e:13:47:1a:a5:45:08:40:13:5f:d0:58:
                    a3:80:11:5f:20:e7:ac:f6:42:fd:9e:ba:48:27:b8:
                    3c:db:dc:d4:f2:fa:2b:78:87:fa:d8:24:44:67:fc:
                    da:9a:bf:53:45:c8:b3:df:cc:f6:4b:77:e5:bb:26:
                    1b:86:4c:b0:e6:c5:19:07:0b:e5:82:f0:4b:26:33:
                    da:04:77:bb:2e:57:8e:32:54:ba:59:b8:ef:fb:c6:
                    40:34:43:72:63:49:e9:7d:c5:75:02:e7:c4:d3:35:
                    fd:0b:8a:d0:19:ef:70:24:7a:c9:95:aa:68:d8:b1:
                    e5:99:12:77:e7:ab:5a:1a:df:66:52:40:15:ba:ef:
                    35:1f:9b:31:84:85:f7:22:5f:67:f9:1e:5b:eb:18:
                    5f:ab:20:2e:32:2c:3d:0b:ac:d2:87:3c:33:30:ff:
                    3a:10:40:90:2f:4b:b9:a5:0b:c6:7c:9f:aa:84:e6:
                    6f:ba:be:fe:57:7a:2f:05:3a:bd:d7:ca:02:28:ca:
                    cc:7c:d7:a8:b3:fa:fb:c2:ef:65:43:24:fc:22:25:
                    2e:d0:5f:2e:ec:85:db:14:2c:d3:91:db:41:29:6c:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:60:53:A9:56:BD:5C:8D:BA:D8:A9:5C:73:3E:88:F1:AF:4E:7E
            X509v3 Authority Key Identifier:
                keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:65:d4:e0:5c:26:1f:3c:2d:5c:5b:b1:71:77:af:78:2f:
         71:89:d1:14:d6:01:49:2e:4b:9d:2d:bd:52:e7:e6:b8:30:7b:
         9c:bb:31:0c:be:a0:a9:cb:17:0e:2f:a4:34:ef:36:f4:a4:14:
         8a:9e:94:5d:86:47:a9:ec:4c:06:7b:92:bf:ab:3d:35:1e:03:
         30:57:d5:a0:24:c9:cd:bc:89:b6:f8:6e:18:f5:73:82:82:e7:
         54:bf:d3:74:4b:3c:7a:76:23:33:92:8a:5c:e6:fa:f9:b7:e7:
         ae:6f:68:c8:11:6c:32:c1:59:44:7f:0a:e9:c8:be:0a:31:27:
         f3:d3:f9:24:64:db:e9:d5:5b:90:55:d6:d0:67:8c:fb:42:47:
         40:44:d8:9d:92:e6:4b:fa:de:eb:35:14:13:d6:26:23:64:54:
         64:2c:3e:05:28:11:e2:7e:34:66:1d:b2:64:72:7f:05:a2:ec:
         f1:3f:da:e1:1c:91:c8:c9:c6:16:10:b8:5c:ff:66:90:0a:04:
         16:de:25:3b:97:6a:0f:1d:45:dd:f9:a6:43:0f:08:aa:cc:16:
         3e:12:46:4f:f6:ee:83:d3:b2:b2:c6:3e:05:20:72:41:28:0e:
         de:32:97:5d:32:74:92:7d:c0:6e:93:07:f8:44:f3:65:ff:d1:
         89:41:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:31 2026 by rpki-client