Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File:                     NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier:          XKgJvj/f8DN25GCTw11t2QcKNjUElZsnPa2/GyTIXrA=
Subject key identifier:   91:B0:5F:AF:08:41:D7:EC:8C:18:34:83:51:63:DB:4B:7E:33:53:C1
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer:       /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number:          017C
Signing time:             Wed 23 Sep 2026 04:30:33 +0000
Manifest this update:     Wed 23 Sep 2026 04:30:33 +0000
Manifest next update:     Wed 30 Sep 2026 04:30:33 +0000
Files and hashes:         1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: 9kQCKTAEke4vL8IXK+mX/oE7I5PxSsMDyzSuFu4TlBg=)
                          2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: WWBACUh4p1PPK9KcHPTTQfFx5ubcC8J0wopYYr+Csh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
                          rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
        Validity
            Not Before: Sep 23 04:30:33 2026 GMT
            Not After : Sep 30 04:30:33 2026 GMT
        Subject: CN=6ab355e9-705f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:3e:5b:b5:f6:c6:c8:60:2a:68:aa:f6:a3:
                    bb:2d:76:c2:19:09:dd:ca:74:6a:4c:c2:b2:12:7d:
                    1d:f0:9f:75:87:99:2e:11:8f:f4:0c:a8:2d:72:36:
                    b4:df:68:85:83:ca:46:eb:12:c8:1f:87:ca:f0:50:
                    7e:24:d3:7f:d4:87:70:87:a1:a0:ba:86:1a:91:b3:
                    be:a6:b9:37:5c:c5:27:62:22:20:2f:c8:29:65:25:
                    4f:a8:e0:6a:67:82:8f:fb:f6:bd:bc:67:94:c3:ea:
                    bd:89:49:92:e6:19:c1:0d:bf:7f:53:93:fc:f8:72:
                    a5:44:18:50:7f:8f:dd:c6:f6:ad:34:a0:7c:bf:72:
                    41:ce:1f:4e:0b:c0:55:1c:a4:40:03:40:bc:69:1d:
                    3d:1c:32:6f:a4:de:b2:87:4c:7a:1a:74:28:b7:49:
                    5e:4d:d0:cb:e8:15:0c:23:92:12:4e:7c:7a:d7:23:
                    1a:54:e5:db:9f:22:a5:ad:88:63:f3:36:86:93:b9:
                    c2:6b:66:02:fd:31:98:0e:ee:e3:48:9d:00:9b:9c:
                    60:4a:e8:8f:2f:2b:17:cd:a3:a3:90:35:fe:b1:ec:
                    c7:72:e1:a1:9d:21:f2:7a:96:b7:fc:10:b8:05:e8:
                    9e:a0:37:0e:09:55:76:b6:a4:29:0d:0a:e4:66:58:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:5F:AF:08:41:D7:EC:8C:18:34:83:51:63:DB:4B:7E:33:53:C1
            X509v3 Authority Key Identifier:
                keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:6c:ca:c9:07:7a:d5:ca:cd:eb:1a:cc:6e:1f:fd:af:6e:
         a1:6d:59:19:c5:12:16:6c:0a:77:46:3b:e1:44:58:5a:e6:be:
         c3:5c:dd:b3:46:97:62:86:84:fc:31:90:59:c7:de:d9:2b:2c:
         e9:a5:f8:45:67:e2:7c:15:3f:cc:e3:1e:6a:81:10:87:08:68:
         57:e7:54:26:f1:7e:36:3b:e2:d2:24:3e:b1:22:ec:10:c8:c6:
         84:f2:f0:3c:fe:97:94:aa:d3:77:5a:41:4b:0a:9c:ed:db:8c:
         a1:74:e9:1b:1b:8a:7b:6a:d9:3e:d5:15:e5:f9:32:9b:43:eb:
         40:f0:73:58:4f:2b:b9:ba:fb:b6:33:7d:d3:d1:71:13:c3:dc:
         c4:bc:e6:da:d3:98:5f:ae:dd:25:fb:24:ab:9f:83:b2:51:7e:
         91:c5:b2:82:13:44:fe:5e:85:1b:12:81:38:5d:9b:87:6c:67:
         69:cc:bb:0c:df:79:f3:c3:c8:ff:e1:75:46:00:72:d0:e9:e7:
         f5:b2:d1:2f:0d:6f:30:29:03:b6:d7:e0:bb:83:81:cc:5a:a7:
         1a:e4:22:d2:56:1f:cd:0f:31:82:94:b6:a8:24:67:27:70:c5:
         8b:65:69:b8:b7:bd:9d:bc:a8:c1:6c:11:35:d0:3f:b4:7d:08:
         c4:84:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:45:09 2026 by rpki-client