Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File:                     N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier:          6TqtlWsgY6oHa/0vZzQ8/NBVw/A1yAm8EM236g/XLBs=
Subject key identifier:   3A:DD:C4:4B:60:B5:91:CA:49:05:3A:D0:13:21:B3:91:0A:12:8A:B1
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number:          0197
Signing time:             Thu 23 Jul 2026 05:45:16 +0000
Manifest this update:     Thu 23 Jul 2026 05:45:16 +0000
Manifest next update:     Thu 30 Jul 2026 05:45:16 +0000
Files and hashes:         1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: FS3LZe7ISg6DCMkPUrmRYaUe7VeJjac2VSIYQ9joTbM=)
                          2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: WF6w/HKO6UZ72c8ORFF3ZA3mUk6+CxEAfEJ2u/IKs9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: Jul 23 05:45:16 2026 GMT
            Not After : Jul 30 05:45:16 2026 GMT
        Subject: CN=6a61aa6c-8438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:6e:2b:16:db:58:a5:08:02:c2:6a:35:04:
                    27:9a:e3:ca:51:53:14:a8:7d:a0:6d:1d:22:24:a9:
                    a3:85:17:71:d2:0f:e8:50:7e:04:89:93:16:3e:7b:
                    c2:3f:dd:69:13:8e:54:0e:8b:d1:2e:9d:ce:dd:91:
                    8c:f3:06:a2:4e:ec:df:cd:23:b0:b0:4b:6e:a4:fc:
                    a2:3e:02:01:37:be:10:ef:13:96:da:06:8a:51:b0:
                    50:80:6e:0b:8e:13:95:08:fc:84:e6:6a:fe:93:fc:
                    58:3c:6c:47:78:1f:dc:8e:0b:88:27:9a:35:f9:3c:
                    c1:b0:e2:ef:b8:ab:9c:3f:5c:b2:0a:bb:b1:e2:91:
                    c6:61:4b:13:1c:15:98:10:e3:da:95:ad:50:55:ad:
                    4c:12:3c:62:59:20:48:f6:4e:36:dd:2e:9f:aa:9a:
                    77:53:f3:b5:de:af:27:b5:bc:3e:8d:e6:c0:18:07:
                    11:81:e8:c1:17:fb:3b:40:63:69:40:53:03:51:f1:
                    dd:d1:72:bb:45:41:2c:5a:0d:ea:89:5d:61:c9:0f:
                    32:82:14:ad:07:c1:de:e5:44:f9:fe:e0:8e:89:56:
                    b2:52:35:ee:65:c6:f4:f0:13:a6:cb:b1:17:a8:a2:
                    c2:7e:06:07:3c:3b:89:aa:71:c0:b3:b6:4f:dc:c6:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:C4:4B:60:B5:91:CA:49:05:3A:D0:13:21:B3:91:0A:12:8A:B1
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:27:5a:bb:19:ed:6c:06:c8:00:84:13:8a:cb:0a:1b:a2:
         9b:d1:4d:2f:3a:8d:53:d8:49:af:34:7f:9d:ce:9b:26:35:ca:
         67:71:77:b9:df:da:c3:51:a0:12:7d:ba:79:a6:2c:fa:ae:49:
         e2:1c:f0:ff:7c:8c:4e:85:e0:bf:55:12:63:2f:a2:7f:39:f3:
         04:0b:5b:fe:a4:23:02:1d:40:7f:b3:f2:0b:82:25:96:bd:22:
         d4:7f:ea:9e:0a:2a:2e:d6:1f:37:e7:10:56:16:8c:cd:7f:68:
         c7:ca:6f:75:1c:d0:54:39:4e:11:3f:d5:5c:5c:fa:ae:63:96:
         2b:a1:1e:43:03:5d:40:c0:9c:1a:af:f6:7e:a5:49:c6:7b:72:
         18:88:b6:b3:7a:fe:be:ed:95:8a:ff:8d:a0:68:4e:97:d7:f3:
         f6:2c:f5:ae:28:8c:4e:7f:5c:ce:22:fb:f0:13:b2:0e:d6:99:
         af:f8:cf:d9:6c:eb:0c:50:ef:fc:96:ab:8e:1e:ae:bd:af:8e:
         20:43:5f:27:4b:34:60:e1:e6:a0:ca:61:37:9d:36:5e:d9:8f:
         57:3b:6d:7a:b2:c4:61:69:33:68:fd:34:4e:8d:18:5b:8c:3b:
         ce:e1:8b:6b:8d:bf:39:c5:67:3b:7c:40:2a:b8:68:34:7f:35:
         d1:25:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:53 2026 by rpki-client