Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
File:                     nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json)
Hash identifier:          0jpdKDPgDHaD4cRWk3SE8vvUiWk6LYWJqqb6LcHTuug=
Subject key identifier:   22:6D:2A:12:A9:84:56:9D:9E:43:08:32:60:4E:0F:A6:0E:60:1B:52
Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
Certificate issuer:       /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
Manifest number:          69
Signing time:             Wed 22 Jul 2026 18:31:03 +0000
Manifest this update:     Wed 22 Jul 2026 18:31:02 +0000
Manifest next update:     Wed 29 Jul 2026 18:31:02 +0000
Files and hashes:         1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: 8tRKMqqDGUsWpbZTaSiM8ox8z8qbzX8COop1idtS/QM=)
                          2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
        Validity
            Not Before: Jul 22 18:31:02 2026 GMT
            Not After : Jul 29 18:31:02 2026 GMT
        Subject: CN=6a610c66-ceb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:51:5c:d5:bf:a1:e3:9e:c1:d1:d9:84:65:0c:
                    32:cc:80:0e:de:a6:be:cf:f6:c8:9e:f7:f3:43:f2:
                    43:33:2b:75:94:52:49:f4:a9:de:f0:ce:f0:07:02:
                    72:61:e2:78:17:12:1d:ef:52:4f:53:93:35:95:26:
                    5f:cf:71:45:da:20:8b:2e:c5:23:27:3a:73:db:0d:
                    c3:e4:4e:fe:ed:41:03:62:22:da:46:83:11:28:0a:
                    51:c0:50:8b:fc:25:82:65:74:08:d0:fb:4e:13:42:
                    6a:49:e7:4e:9f:81:01:6c:f3:3f:35:76:2c:51:cd:
                    77:31:b9:47:36:8d:bb:5a:01:c4:2a:95:09:99:2b:
                    e7:f1:cf:c5:45:31:36:fd:31:34:89:c9:21:29:c0:
                    00:89:00:b9:ee:1e:e7:23:29:c3:88:aa:f0:38:e5:
                    54:1d:40:56:a5:91:f5:db:7a:08:ad:2c:b9:22:77:
                    7c:48:af:0b:9d:ce:7c:97:74:e5:df:cf:f5:0c:81:
                    df:c7:cc:2c:52:89:86:cc:82:b1:31:33:89:47:94:
                    8c:37:4a:75:c0:d6:dc:7d:a8:66:58:ce:c5:44:1c:
                    c0:33:81:1b:52:b0:58:cc:25:5d:d3:dd:a7:2b:be:
                    22:4b:f1:8c:d2:a2:cb:04:89:49:44:7c:c4:aa:67:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:2A:12:A9:84:56:9D:9E:43:08:32:60:4E:0F:A6:0E:60:1B:52
            X509v3 Authority Key Identifier:
                keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:ee:dd:98:84:b3:de:a1:98:e9:f3:15:77:93:2e:58:da:
         ca:90:9e:17:44:02:2c:7f:2a:05:2a:14:62:b0:00:2e:17:99:
         03:27:a2:28:d9:12:9b:be:be:aa:76:3a:b8:31:42:f6:37:ae:
         5e:d7:55:0c:a8:92:70:2d:69:8b:ea:43:3d:6c:1e:8a:b6:be:
         f9:79:a1:17:8c:3b:68:2f:2b:b8:dd:71:85:71:14:af:01:4e:
         43:14:1a:f3:05:a6:67:2d:f1:ab:d2:6e:d0:35:5f:79:f3:af:
         5a:3f:17:6b:f7:03:85:e2:b4:32:0c:d0:90:73:ed:72:e6:5f:
         c3:af:dd:2c:f9:b9:ea:47:da:e3:d2:7f:00:74:c9:91:59:fb:
         02:13:e5:f0:46:0f:a6:d0:0d:a2:28:6e:b2:30:dc:00:08:e4:
         7a:2f:d4:26:ec:cf:c6:ed:fd:71:d3:c8:75:7f:c6:64:58:f7:
         90:cb:cf:13:36:e7:48:e1:d8:49:77:c7:0b:60:01:fe:f9:10:
         16:d0:43:13:86:3f:9c:4e:31:76:18:59:22:de:b8:77:d9:fb:
         17:87:46:28:98:e0:10:25:73:10:7f:76:f4:ce:c3:8d:0f:54:
         01:31:68:ca:e5:f3:17:90:45:cd:21:1e:bf:e7:b7:30:5a:6f:
         2d:80:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:00 2026 by rpki-client