Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File:                     NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier:          /+VV29KDdrwkmDTDUbiLB1WW8rqqmazj5yuXq+Yoe/s=
Subject key identifier:   A7:87:11:21:39:E9:97:BE:12:58:7C:FF:CC:F1:E4:F5:5D:B6:FC:19
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer:       /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number:          D6
Signing time:             Thu 23 Jul 2026 08:30:05 +0000
Manifest this update:     Thu 23 Jul 2026 08:30:04 +0000
Manifest next update:     Thu 30 Jul 2026 08:30:04 +0000
Files and hashes:         1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: URD4YQ3cNcPT1977TUn9liGw8q+L3YJED+Y7DQVy/BI=)
                          2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: FsNpTkM6+3f8KZot7Stoju/dwRXl0OyRylfjVSJP04M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
        Validity
            Not Before: Jul 23 08:30:04 2026 GMT
            Not After : Jul 30 08:30:04 2026 GMT
        Subject: CN=6a61d10d-b7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:4d:a7:69:a8:43:f5:69:ab:95:6d:1b:c1:
                    8d:77:9a:d2:33:cc:4a:e9:a8:e1:c3:6d:a2:6c:7f:
                    65:dd:a0:45:21:df:3c:d6:13:01:cb:bc:e9:5f:7c:
                    d9:ec:4d:27:47:14:06:99:95:91:2f:58:86:63:88:
                    a7:1e:ca:e7:dc:7d:89:4c:ef:2c:34:44:55:1e:06:
                    cb:93:ae:c7:ad:9c:2e:66:16:2c:26:55:8c:20:7e:
                    fc:36:bd:06:f7:69:91:6c:7c:68:ee:58:39:95:64:
                    75:61:44:55:f2:11:fb:f9:75:31:50:5c:6c:ec:c4:
                    ea:4f:a7:ec:b9:dc:35:cc:15:00:6b:2a:ff:d1:5c:
                    2b:36:bc:fd:40:35:86:d9:ee:3e:0c:ec:4d:96:5d:
                    d3:88:68:7d:c5:76:68:d5:cf:50:26:41:bf:a3:87:
                    fc:67:f6:10:73:62:1f:6f:54:51:4f:53:69:3e:d8:
                    aa:59:0b:e6:53:a5:c0:8b:14:4e:7d:79:df:c8:b3:
                    8f:3f:7b:a6:7a:5a:6a:27:23:13:9b:17:89:29:c8:
                    d1:da:f0:74:06:19:31:e1:e4:58:de:2e:6d:0c:01:
                    d7:94:0e:96:b9:7a:41:d4:f7:d8:5f:0b:9c:50:9f:
                    20:4f:20:28:97:68:ef:e6:1c:99:a5:19:4c:f3:06:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:11:21:39:E9:97:BE:12:58:7C:FF:CC:F1:E4:F5:5D:B6:FC:19
            X509v3 Authority Key Identifier:
                keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:db:ef:4b:35:e4:12:33:d0:0f:06:ec:76:f6:bf:e7:e8:91:
         8a:22:d0:64:a6:ed:ac:e6:d8:d4:3a:d8:8b:28:a2:97:ca:49:
         9c:04:0d:3d:5e:5a:a6:ca:44:65:72:c3:00:62:c8:24:55:cc:
         43:08:a4:bc:b8:18:86:fd:67:1f:cb:ff:1d:9c:6b:42:39:0c:
         7c:f3:57:55:86:5f:d1:8b:63:1d:73:80:67:ac:5e:db:cb:29:
         bf:c2:eb:fd:25:eb:46:62:e4:e2:0d:e0:6d:88:13:f0:cb:09:
         9e:41:63:52:5c:f5:2a:28:e0:ac:e5:9e:52:af:82:9c:06:e8:
         ab:7e:11:02:56:dc:e5:51:3b:af:bf:ec:a9:74:39:5b:f2:a1:
         16:8f:14:47:e4:67:c0:16:0f:3f:19:51:01:0d:72:68:ca:24:
         da:12:13:a4:bf:d9:48:31:cf:d0:14:d0:e7:bc:c4:a9:7a:c3:
         f8:f7:0e:69:50:b1:ae:01:3b:17:0b:ab:7c:ea:b7:91:6a:ef:
         26:be:20:d1:50:ca:37:d6:cf:69:bb:3b:c8:57:2b:26:da:cd:
         f3:b9:6b:f6:b6:ec:ae:4d:bd:80:05:3b:56:0f:b3:fc:06:c5:
         44:17:04:3f:c7:00:4a:05:1e:46:41:e4:12:96:b2:d6:8c:ce:
         18:03:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:44 2026 by rpki-client