Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File:                     NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier:          NzYHmfZpHybgJyfhrUVntez+uQuRXdoZs5CPlUgYw/U=
Subject key identifier:   10:6C:55:D2:1F:41:98:A7:8C:B8:F4:CB:A0:DF:EB:73:09:F3:B4:B9
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer:       /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial:       0BF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number:          13D0
Signing time:             Sat 26 Sep 2026 19:00:05 +0000
Manifest this update:     Sat 26 Sep 2026 19:00:04 +0000
Manifest next update:     Sat 03 Oct 2026 19:00:04 +0000
Files and hashes:         1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: dGNT0zrraCcIbFp6k+D/Bfe8mTUhboT7YZjzBmRpSbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
        Validity
            Not Before: Sep 26 19:00:04 2026 GMT
            Not After : Oct  3 19:00:04 2026 GMT
        Subject: CN=6ab81635-b3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:89:84:d0:3e:10:87:de:be:3e:8a:b4:58:
                    3b:2f:94:94:5f:47:c1:b4:1f:73:e6:4f:6c:a4:ca:
                    4f:e1:6d:6e:74:70:15:81:4d:3b:89:81:03:4c:9e:
                    61:a8:05:86:ab:83:87:d2:ff:c1:7b:e2:ef:5d:83:
                    ea:1a:cd:f9:3d:bc:50:e7:51:d8:97:69:01:a8:d4:
                    ee:4c:1b:26:85:a6:6b:92:29:19:0f:fc:84:12:32:
                    44:a9:17:eb:0b:69:17:2b:7a:2b:d3:b2:35:27:4c:
                    0c:fe:b8:cd:06:49:2a:ed:db:26:10:24:20:17:2f:
                    3f:10:61:4d:6f:4b:46:69:37:5e:73:a3:e2:82:b2:
                    47:29:28:45:2c:4d:37:fe:74:7f:3e:53:ef:a4:2e:
                    11:d9:bc:3a:4a:cc:6f:ba:db:85:c0:43:18:df:2f:
                    e7:2a:7c:f6:dd:3e:86:f2:6a:a4:7c:25:b0:c7:10:
                    75:53:90:b7:04:37:6c:9c:20:73:fa:5a:6d:eb:86:
                    7f:2f:4b:71:0c:86:2d:f2:82:ee:01:c4:57:68:22:
                    b7:aa:6d:2f:af:bd:b6:40:d6:6e:54:41:6c:ce:42:
                    a6:ae:ae:cc:b8:f7:53:ed:7a:75:ab:16:a7:4c:80:
                    77:12:e4:68:40:83:2f:ac:31:94:c0:0b:f5:2d:f3:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6C:55:D2:1F:41:98:A7:8C:B8:F4:CB:A0:DF:EB:73:09:F3:B4:B9
            X509v3 Authority Key Identifier:
                keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:ff:dd:e1:dc:88:3b:a1:3b:3c:3b:a2:a3:7a:9f:d8:b2:
         50:ba:f0:2b:91:b2:ec:f3:40:83:51:8d:69:bb:85:f9:6a:85:
         eb:3c:50:67:1c:9b:84:09:27:2d:c6:7d:e5:f6:95:ce:24:db:
         ff:51:29:99:7b:2f:c0:1a:3c:e4:e8:af:0f:9b:04:f5:f8:02:
         a5:ef:bb:36:85:dd:65:d5:92:87:cd:11:da:1e:64:8f:24:08:
         6f:ff:df:8d:3b:b3:4e:db:78:2c:c3:db:04:bc:73:be:0b:f6:
         f4:37:b0:1d:08:4e:d0:19:8c:c7:a1:d4:e6:fb:e8:a7:a7:ef:
         f9:97:3a:6e:47:23:e8:b3:cc:2a:3d:5f:42:7b:b9:73:31:4f:
         05:41:a2:d7:d0:df:ef:96:4a:c5:cc:f5:53:9e:e9:e0:39:31:
         09:6c:70:14:0e:1f:6c:da:6d:31:cb:c7:4c:b1:13:e1:30:e4:
         7f:37:90:ea:bb:ea:f1:54:62:a5:65:ad:ac:e7:42:1d:74:03:
         a1:10:54:a4:92:1c:24:5f:5d:94:f3:ef:b2:a5:59:aa:2d:d4:
         24:bb:c4:29:d5:20:2d:a2:bb:0d:d6:f4:46:32:f4:85:78:b3:
         55:70:87:24:ae:c9:14:0c:81:e4:dc:1a:cd:c3:cd:98:64:64:
         ee:7a:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:59:52 2026 by rpki-client