Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft
File:                     NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft (raw, json)
Hash identifier:          V9elxfRzyd+hn8T7oa0IJ5dhWzDlNKy/FMZKLaGOU/E=
Subject key identifier:   8D:3E:5D:87:64:99:3D:DB:1B:BE:0B:06:F5:C5:C9:7F:2B:72:DA:1A
Authority key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95
Certificate issuer:       /CN=A91E0727/serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft
Manifest number:          06
Signing time:             Mon 11 May 2026 09:25:51 +0000
Manifest this update:     Mon 11 May 2026 09:25:51 +0000
Manifest next update:     Mon 18 May 2026 09:25:51 +0000
Files and hashes:         1: NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl (hash: eGWLIcUGpC49Mhxmz1fi5jEnRa60iWsQba44YXltxE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595
        Validity
            Not Before: May 11 09:25:51 2026 GMT
            Not After : May 18 09:25:51 2026 GMT
        Subject: CN=6a01a09f-9665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:e4:92:7a:31:4f:82:84:1c:d5:6b:f0:e0:
                    b8:74:ac:4d:a1:5f:ee:02:18:5a:97:d3:20:e5:72:
                    5c:16:7a:06:6b:a8:0e:50:b9:f9:b1:68:31:cf:9c:
                    3e:e3:81:02:6f:49:ab:14:84:3e:66:fa:77:54:b5:
                    2c:66:d5:a5:52:ea:25:30:94:13:0f:c6:30:b4:aa:
                    bf:58:eb:4d:bc:2a:d9:5c:f3:84:b1:21:35:54:19:
                    22:f0:a4:e2:dc:16:a7:8a:cb:f0:bb:67:5a:32:3c:
                    c7:72:10:f3:7e:11:67:43:ae:49:64:79:c4:e6:76:
                    09:a3:35:c5:a1:76:92:62:c2:9e:2b:91:39:6d:1e:
                    03:12:1f:04:49:67:da:26:ec:7d:6c:b4:70:76:99:
                    da:30:ea:ff:ae:8d:9d:6b:67:fb:35:9f:12:eb:41:
                    50:dd:9f:30:76:9c:6e:85:95:52:12:1b:59:75:36:
                    2c:ee:8e:78:fa:91:a6:32:41:75:b0:29:75:1b:27:
                    82:a1:29:7d:5f:c0:3d:e8:70:99:2a:a8:53:7c:ee:
                    53:d3:77:0a:7b:a2:fb:f8:3c:fa:1c:13:4e:6a:a7:
                    67:04:7d:b8:1c:e6:5c:63:8f:45:c2:22:c7:6a:fa:
                    22:e2:70:22:43:18:4e:c6:ad:a3:4c:bb:7f:23:f3:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3E:5D:87:64:99:3D:DB:1B:BE:0B:06:F5:C5:C9:7F:2B:72:DA:1A
            X509v3 Authority Key Identifier:
                keyid:36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:e9:a7:6c:1c:86:41:1c:82:a8:d1:09:5d:f5:9e:88:a2:
         79:1c:07:96:e9:77:8f:17:db:fc:4d:0c:d9:f4:d3:fe:3c:10:
         e2:7d:f2:b0:75:0b:c3:21:e4:9b:a1:0b:71:39:98:f5:8e:fe:
         17:7c:fa:94:c9:34:ac:53:fe:48:6f:9b:17:0b:25:23:f7:c1:
         3a:e1:1d:ab:54:e7:bd:0f:93:e3:1d:35:63:c1:9a:3e:e7:dd:
         83:a4:8a:44:32:46:9b:90:46:93:e0:d9:d1:9c:81:0e:fb:67:
         8a:43:88:ee:e4:bc:7d:18:ab:ca:77:e4:3d:16:dc:68:c7:41:
         26:2d:91:59:74:9d:3a:6a:88:de:a1:e3:4b:c1:2b:1d:de:71:
         f3:81:c8:81:70:ee:66:63:84:d7:26:2d:66:52:2b:7d:64:cb:
         36:8f:c7:b1:b8:f5:77:0d:8e:ec:ab:28:5d:99:a1:7c:3a:c3:
         f5:91:30:8b:38:d1:52:19:81:09:92:f4:45:be:b1:ea:7a:51:
         19:24:77:18:b8:cb:fa:ea:bf:a5:6d:99:ec:2c:86:be:18:24:
         d2:42:3b:da:fa:20:80:6a:01:18:08:1e:fe:36:5d:19:0e:07:
         d1:87:a4:b2:e9:fc:d7:54:88:5f:67:98:5a:44:6c:e6:0e:7c:
         85:9f:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:03 2026 by rpki-client