Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File:                     N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier:          IBKtwI9S3FFoBLNOEubSjJ/G21yEdnR0Fo4wnJWSpKo=
Subject key identifier:   68:EB:3B:0E:9C:2D:DA:0B:96:B5:51:AA:34:78:45:88:53:3A:DA:23
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       1A79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number:          1A56
Signing time:             Thu 24 Sep 2026 16:18:00 +0000
Manifest this update:     Thu 24 Sep 2026 16:17:59 +0000
Manifest next update:     Thu 01 Oct 2026 16:17:59 +0000
Files and hashes:         1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: wNxLeKE7/YM8ZVQyh36V1IYkoJK1JqeFPOICUA6PLsA=)
                          2: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
                          3: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
                          4: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6777 (0x1a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Sep 24 16:17:59 2026 GMT
            Not After : Oct  1 16:17:59 2026 GMT
        Subject: CN=6ab54d37-9918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:84:af:88:73:da:73:3b:87:7e:28:18:ff:
                    cd:7a:39:67:e0:0c:56:33:0f:55:ad:30:4d:70:00:
                    48:f4:cc:29:82:74:f0:1b:83:cb:43:27:38:1a:4b:
                    c7:12:78:19:7c:82:1a:ee:1b:8f:28:c6:8f:c1:57:
                    4b:14:5b:7c:ee:e9:97:cc:51:e1:17:bc:27:de:aa:
                    9a:d5:e7:af:fa:81:a1:89:5a:a9:6b:94:85:6a:99:
                    0b:9f:22:bc:b1:d1:2e:ac:2c:e9:e3:42:09:cd:4b:
                    2e:a9:c2:e9:3b:20:57:84:16:56:10:63:b0:bb:9d:
                    bb:b0:48:eb:28:e2:c7:17:6c:7e:2f:c4:2a:17:4a:
                    df:e8:88:b3:a3:b9:ab:87:81:b8:5b:41:d2:16:f4:
                    bd:46:05:6b:c6:2c:b1:a3:95:90:fe:b7:e6:17:a8:
                    2c:35:1d:75:c9:91:70:30:b4:5a:d2:d5:ab:2f:e3:
                    7e:d5:73:25:83:54:5c:bb:11:42:ed:9a:dd:79:37:
                    b1:d3:c2:4b:df:05:17:5f:dd:a5:34:98:6d:85:8b:
                    bb:9f:e2:f1:d5:12:93:56:61:55:94:73:28:37:84:
                    47:29:75:07:b6:6e:76:30:d9:46:22:b5:d8:86:5d:
                    f4:41:e4:12:11:d6:74:ab:e0:5d:c3:1f:42:d1:ad:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:3B:0E:9C:2D:DA:0B:96:B5:51:AA:34:78:45:88:53:3A:DA:23
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:fc:51:20:65:36:fe:17:bc:89:97:4c:1c:12:87:1b:f1:
         cc:b0:2e:d8:a4:8a:e3:46:87:98:8a:bd:ca:10:27:39:0e:fb:
         b3:62:ca:06:0e:ac:43:74:7c:9d:d2:e4:f8:d1:55:f2:2c:b7:
         64:3a:fa:66:1f:71:f2:a2:51:32:3d:67:1a:27:5c:73:c0:a3:
         7f:eb:06:d9:02:70:09:fd:42:aa:3e:0e:7b:4f:5f:a8:37:05:
         0e:b8:96:44:e6:dc:4d:63:aa:74:ca:54:21:5a:76:ab:22:f6:
         20:c0:5e:59:10:14:7c:28:af:1b:19:e4:1d:a4:bc:97:9e:29:
         15:13:0f:29:09:a6:1b:05:10:b9:a0:95:b9:a0:f5:bd:af:19:
         d0:55:5c:dc:fb:03:55:28:d4:49:95:50:69:d0:45:7d:6b:35:
         97:36:02:26:24:6c:06:35:4f:3b:e1:34:7b:9c:5e:fd:4d:f6:
         89:2f:90:3f:65:6c:dc:5b:41:59:be:73:26:e0:66:5f:c9:32:
         50:f8:7d:26:07:a8:26:80:1d:af:2e:77:4e:0d:45:57:12:56:
         c5:3e:ee:fe:e2:3d:16:25:88:cf:be:d2:b2:20:3e:0a:d8:4f:
         d8:d8:15:1f:26:21:69:3d:4a:cb:9c:28:e0:87:44:95:a4:87:
         38:94:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:04:37 2026 by rpki-client