Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File:                     Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier:          qMatP0myyFKKFe26/FniLv6YYMiM1msTh/7d49yi0Dk=
Subject key identifier:   9E:A2:4D:19:00:2E:80:4F:C0:97:5E:6E:13:B2:38:49:91:14:40:37
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer:       /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number:          DF
Signing time:             Wed 25 Mar 2026 05:50:27 +0000
Manifest this update:     Wed 25 Mar 2026 05:50:26 +0000
Manifest next update:     Wed 01 Apr 2026 05:50:26 +0000
Files and hashes:         1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: F4zf6fTYPlnHPsqY8BdkJcIeZa1DTXKjcxuG49IRYlk=)
                          2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
        Validity
            Not Before: Mar 25 05:50:26 2026 GMT
            Not After : Apr  1 05:50:26 2026 GMT
        Subject: CN=69c377a2-6453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:94:65:9f:b2:2b:fd:ca:9f:53:35:07:d4:
                    f4:99:26:b7:5f:a4:74:cd:29:94:af:6c:44:bb:f3:
                    00:6b:6b:d3:9f:4c:53:12:b3:88:c0:1b:07:e5:7c:
                    31:66:ac:36:8c:05:c8:99:ea:cf:fa:79:48:27:4f:
                    c0:27:ec:87:c8:d1:d2:e1:48:01:d7:87:7e:05:2d:
                    cb:df:bc:7c:ce:e1:2f:c1:64:fc:1e:9b:1a:36:c1:
                    d3:af:df:e6:d8:6d:b7:2b:da:ca:a8:ca:98:ef:74:
                    db:52:18:d0:55:34:da:23:6d:14:80:e1:65:e6:57:
                    54:a0:73:e6:44:1a:4a:1a:fa:4f:f3:d5:c7:76:1f:
                    77:3c:6e:d1:6b:84:26:b1:24:3a:87:77:95:7c:05:
                    46:e1:91:2a:97:17:1f:59:97:10:c6:37:ec:76:63:
                    2c:89:11:5f:c4:f9:19:0f:08:38:de:64:61:93:9e:
                    8d:dd:23:5f:64:da:61:b8:e9:11:e9:24:44:8f:f6:
                    79:8d:02:48:e0:d5:39:b0:1a:16:fa:f7:70:06:be:
                    ca:70:93:62:6b:6a:f2:96:f9:bc:e2:2a:b4:74:2e:
                    25:f9:14:f4:9d:69:54:06:5c:71:ce:43:76:0a:78:
                    2a:41:a2:35:b0:5f:14:67:06:71:e6:65:8f:84:8e:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:4D:19:00:2E:80:4F:C0:97:5E:6E:13:B2:38:49:91:14:40:37
            X509v3 Authority Key Identifier:
                keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:22:00:50:2c:e4:97:eb:59:24:21:7d:32:21:17:f4:51:12:
         87:e9:0b:9a:e9:2a:24:89:6c:62:fb:eb:2a:47:d1:c3:94:24:
         cf:9e:35:c4:aa:ef:56:33:7b:36:2c:6d:15:40:51:04:72:bd:
         e8:5b:0c:d5:a2:9e:3e:43:85:c8:59:f2:b5:34:ff:01:92:21:
         91:7a:a2:09:a1:f7:25:6a:c9:15:fe:cb:90:a3:2d:16:9f:76:
         44:81:b1:24:1e:39:12:ac:68:f1:bb:72:5a:e3:9b:37:f6:40:
         52:c8:1b:e2:d8:f1:8e:19:35:a5:f1:52:68:46:6b:7d:f7:e0:
         e0:d6:9f:9d:f0:9f:e0:b2:17:e7:49:cf:58:d7:37:49:f9:f9:
         e5:28:86:8d:9e:79:4d:9d:8d:b8:7d:69:90:e2:86:4f:f9:d9:
         f8:5d:70:a3:87:95:0e:fa:11:e0:62:15:25:6e:47:8a:64:1a:
         1d:c5:3d:85:f0:ab:9c:ce:6c:14:42:86:f1:b3:66:78:29:bf:
         cc:1a:ef:67:f4:68:59:d8:36:16:39:80:9c:0e:32:52:56:61:
         a6:4e:19:d3:ac:e8:ed:1e:43:70:87:73:5b:b8:52:ed:cf:63:
         89:89:38:8e:41:a7:7e:a7:7f:2d:1c:05:6e:3e:51:e9:d3:cd:
         01:30:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:19 2026 by rpki-client