Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File:                     NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier:          GMA6+ilEAtjTjX5vBRoOjXuuHbxvgqjKerMz8wtO71o=
Subject key identifier:   5D:6F:96:EA:AA:27:FD:23:8F:9C:57:D6:E8:5D:43:27:2F:C6:74:B4
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer:       /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number:          07D7
Signing time:             Wed 22 Jul 2026 22:05:20 +0000
Manifest this update:     Wed 22 Jul 2026 22:05:20 +0000
Manifest next update:     Wed 29 Jul 2026 22:05:20 +0000
Files and hashes:         1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: 65a2WT3v57IaMB9VWTYPyVQFF/VFFFdnJqL9I/U0bqc=)
                          2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
                          rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
        Validity
            Not Before: Jul 22 22:05:20 2026 GMT
            Not After : Jul 29 22:05:20 2026 GMT
        Subject: CN=6a613ea0-f6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:60:16:a7:b1:f9:85:63:26:13:d0:79:99:
                    38:ca:dd:09:ed:ad:34:5b:80:d9:84:60:cf:b9:cb:
                    c4:9c:a2:97:19:5c:bc:89:5b:8e:46:32:2f:bd:e1:
                    f0:12:c2:a3:63:fe:13:39:4e:3b:a6:ea:bb:c4:e0:
                    f5:fd:40:fb:95:e9:07:ba:83:5b:21:90:c5:60:1a:
                    2b:db:d1:0c:ab:57:5f:56:09:6c:3f:e5:b7:6e:88:
                    29:20:b4:53:a4:a2:bf:db:3e:e2:84:ed:8d:1a:ca:
                    78:65:87:24:b4:9a:f6:1c:b5:55:47:f5:35:87:f9:
                    ad:b7:05:31:5e:80:f3:bf:2f:b8:30:5a:d1:b0:8c:
                    25:34:75:6c:d9:6f:2e:67:21:33:77:5b:db:1e:a7:
                    d9:ac:75:88:f7:45:52:e0:de:ae:73:f8:ad:4b:2e:
                    83:b4:ab:99:30:d5:cb:c9:85:18:45:8d:93:75:f1:
                    71:56:d7:8f:8c:74:30:57:8b:6f:07:0c:6a:f5:6e:
                    d3:16:92:66:f5:c2:fe:aa:bb:d5:55:27:5c:f8:5c:
                    b8:b0:dc:3e:f1:10:eb:c0:26:d1:1e:99:1f:e5:36:
                    73:83:3a:73:f6:98:58:8f:6d:a2:0b:6d:cf:31:9f:
                    9e:e6:91:25:7b:1e:85:2b:e5:aa:51:32:99:6e:fb:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6F:96:EA:AA:27:FD:23:8F:9C:57:D6:E8:5D:43:27:2F:C6:74:B4
            X509v3 Authority Key Identifier:
                keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:e1:7c:d9:e4:d4:85:3f:f0:8f:be:a8:8b:6e:b2:52:af:
         22:43:a6:54:01:4e:e7:9f:80:08:29:0e:7a:07:4c:9a:04:a8:
         3b:21:1e:d8:ca:78:43:cb:8f:48:dd:f3:ec:40:37:ca:5b:38:
         6c:42:fb:da:f3:a2:56:18:3f:b8:60:c7:3e:e4:00:6d:6e:69:
         58:e4:1a:64:2c:61:b7:e2:ee:34:d6:80:68:be:8b:94:95:99:
         22:99:72:c9:cb:bd:55:78:90:71:c2:aa:ec:62:e3:fe:e9:c5:
         64:31:e8:7b:7f:32:9d:92:39:8f:df:bc:6e:02:74:ba:4f:f1:
         e5:e3:e0:38:54:87:32:40:d8:d8:ee:16:5c:81:d9:26:2e:88:
         5f:01:b1:39:6e:73:b7:31:f7:43:e3:ac:3a:0c:53:81:f6:e5:
         d4:28:6f:62:e0:b4:62:10:f6:b3:ee:2f:2f:b6:c8:32:92:46:
         bd:d4:01:1c:a0:52:b5:87:e8:9e:40:9b:d4:bb:6f:42:dd:c3:
         1d:cf:73:9d:bc:8d:9e:37:fe:64:8e:6b:cb:dd:41:99:12:51:
         5c:34:79:6f:23:08:dc:50:e3:3f:e4:55:2a:da:68:aa:76:c4:
         45:58:87:16:09:8f:00:19:97:dd:73:ec:fb:9b:95:ac:7c:72:
         77:35:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:05 2026 by rpki-client