Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
File:                     NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json)
Hash identifier:          dn3GLuYl48t/7h8IEscErdttZMMP4b/JSXuaiWZjyjk=
Subject key identifier:   3C:BE:F7:DD:3A:44:20:CC:9B:74:AF:8B:9B:14:93:99:D3:47:AA:97
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       0B19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
Manifest number:          0AFF
Signing time:             Sun 04 Oct 2026 19:26:25 +0000
Manifest this update:     Sun 04 Oct 2026 19:26:24 +0000
Manifest next update:     Sun 11 Oct 2026 19:26:24 +0000
Files and hashes:         1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: mH6hZGnwn6TcszN9IVNnN9uLnZ2Lfc7EY5BWIuaThWE=)
                          2: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=)
                          3: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: Qr7OnU5cwXgYQ6DyrDnDHL3zNQ6VCMQTENBCUIMJfFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
                          rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: Oct  4 19:26:24 2026 GMT
            Not After : Oct 11 19:26:24 2026 GMT
        Subject: CN=6ac2a861-7b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:04:c7:87:d4:24:29:d2:9c:43:92:b6:28:
                    dc:a1:6c:e6:14:cf:a0:f6:53:4b:1b:cb:95:58:d3:
                    ca:2b:5c:a0:92:db:8d:e5:45:f1:38:83:f9:9b:53:
                    e1:ba:64:18:23:88:d8:0d:b5:d3:15:b5:ed:a7:13:
                    fa:77:80:34:83:a5:59:4f:c4:1f:c1:e1:fd:08:8b:
                    7f:1c:04:7a:dc:36:1d:c0:2a:34:c1:6a:f1:52:e9:
                    79:8c:a6:a8:f6:43:38:51:48:4a:ef:d1:01:2d:f3:
                    ac:e3:86:db:c2:9f:32:43:4d:82:f4:82:87:b5:50:
                    81:fd:37:eb:ef:c1:58:c1:cc:4d:eb:4b:87:b8:7a:
                    f8:42:8e:70:8b:28:7a:90:76:39:10:b4:c9:18:83:
                    2f:a7:3c:9f:f4:b7:50:c5:72:74:77:a3:79:d4:7f:
                    b5:73:09:fd:96:5c:a7:49:cd:3e:0c:e0:9d:e9:e2:
                    c6:b9:cf:ce:76:6a:2d:a8:ec:1a:e6:61:a2:69:19:
                    ca:e5:e1:f3:a9:c3:9c:7a:35:a5:be:e5:26:1a:06:
                    a1:b3:ca:a1:45:28:2b:b3:0d:73:60:56:b1:bf:3b:
                    64:b4:f4:5f:72:ff:6e:2a:89:e7:11:a3:58:9a:e2:
                    98:1e:ac:f0:92:05:2c:c6:e9:6c:c2:d4:dd:b9:ce:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BE:F7:DD:3A:44:20:CC:9B:74:AF:8B:9B:14:93:99:D3:47:AA:97
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:21:1d:08:59:5a:56:d8:b0:5d:f6:2f:59:81:31:98:c5:39:
         21:06:85:5c:39:2a:7a:d2:4b:e9:13:48:9e:b5:33:99:17:22:
         d9:87:ac:b3:48:fe:7b:3a:23:42:18:80:1c:96:7e:6d:49:1a:
         d9:33:bd:c1:91:d4:78:5e:50:b0:19:c5:d8:89:5b:26:7f:28:
         ac:24:4c:cf:c2:fd:04:fd:c8:86:b6:ed:3b:03:df:58:c3:43:
         17:a8:de:c8:46:6c:b4:a9:41:29:75:78:3a:7f:f6:f8:18:e7:
         d3:03:e0:9f:b0:0d:3f:82:53:e1:c3:cb:4a:72:aa:04:e6:bb:
         6a:59:7d:ad:e8:30:ce:26:f6:f7:12:b5:bb:85:e3:41:da:7c:
         c3:3d:39:b7:c7:fe:d5:2b:6a:87:47:22:21:fc:02:bc:8d:40:
         a4:33:87:ca:56:6b:52:61:6d:80:5d:e9:03:fa:36:98:79:cb:
         82:95:67:79:b0:42:cb:4c:2b:9e:3a:3c:e9:16:3c:ac:8e:d9:
         94:ad:61:00:32:1b:1c:81:f7:c1:b1:47:d8:9a:dc:4c:6c:9f:
         6c:53:1e:98:c9:64:11:7e:62:d4:2d:55:54:16:4b:ba:2b:c7:
         4b:49:d3:98:9f:b1:4f:3c:5b:65:69:98:0b:1f:1e:21:8a:92:
         89:27:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:09:53 2026 by rpki-client