Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
File:                     nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json)
Hash identifier:          1jkIwYV/4Wgvi2mbF+PL7V93OezydcnYhK+f8gPp4aY=
Subject key identifier:   A0:B4:C0:B5:09:28:FF:56:CF:17:D4:DE:28:50:28:25:39:4A:62:49
Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Certificate issuer:       /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
Manifest number:          057D
Signing time:             Fri 02 Oct 2026 23:34:10 +0000
Manifest this update:     Fri 02 Oct 2026 23:34:09 +0000
Manifest next update:     Fri 09 Oct 2026 23:34:09 +0000
Files and hashes:         1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: kNOxbZMNjvgEG51rWfR4BqsxJbbtm7biYhRfnLly96o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
                          rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
        Validity
            Not Before: Oct  2 23:34:09 2026 GMT
            Not After : Oct  9 23:34:09 2026 GMT
        Subject: CN=6ac03f71-cd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:5d:43:92:f1:ed:ba:54:57:bc:87:1f:cc:
                    e5:93:36:b8:48:87:14:d3:9b:fd:28:10:0f:aa:3b:
                    b8:19:05:dc:1e:81:54:7b:3a:2d:1f:d5:2f:e4:2e:
                    9a:c0:e5:79:ea:ae:59:7f:a2:33:f6:e0:06:60:06:
                    42:59:b4:14:fe:25:94:ad:49:14:2e:3e:fb:ef:1a:
                    30:3e:4e:a4:d7:88:37:a8:26:7f:5b:85:eb:d2:b4:
                    bb:34:c5:03:a0:ba:1d:3e:7c:47:82:2e:ca:f8:fd:
                    c7:27:a6:68:8d:09:47:3c:c6:a2:5e:f8:f5:7c:56:
                    62:b1:ed:f2:38:06:c6:43:2a:9b:f5:0a:e4:7c:cf:
                    ab:4b:38:b4:27:a9:2e:77:0b:e6:19:23:e2:25:a5:
                    6c:54:45:a2:7f:51:eb:8e:73:f8:e6:5f:85:84:d9:
                    6d:91:b4:62:6d:8b:d0:03:62:b4:af:31:0b:f4:fa:
                    0c:e3:18:0f:68:23:e4:c9:52:27:32:57:5a:54:3c:
                    e8:86:cf:b7:c2:2e:da:f6:36:86:25:35:a3:e9:7e:
                    1e:d1:3f:0b:be:4e:da:f3:b8:b3:af:4d:74:38:41:
                    b9:6e:d0:e2:cd:db:63:1e:d2:6a:4c:1a:eb:65:3f:
                    cf:e9:2c:06:a0:e6:01:45:6c:d5:51:1e:b4:29:91:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B4:C0:B5:09:28:FF:56:CF:17:D4:DE:28:50:28:25:39:4A:62:49
            X509v3 Authority Key Identifier:
                keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:9b:64:9b:64:d6:09:db:a0:44:1a:3c:d0:5c:79:ed:b6:
         cb:eb:06:cd:63:f8:4b:fd:65:55:36:3a:91:75:87:6a:62:29:
         b9:fb:ef:2e:82:1d:a3:05:6e:38:40:c4:65:0d:99:71:31:08:
         4e:14:9f:48:71:fc:2e:be:59:c7:98:4c:3a:40:90:bc:b0:8b:
         5c:a3:07:0e:b1:e5:5c:1d:5b:0d:39:88:48:75:8e:97:46:07:
         dc:b2:9d:48:b4:b9:f1:90:e3:15:14:ce:a0:37:c5:c2:ee:a6:
         06:67:42:63:28:ad:f9:79:0b:ad:b4:cf:8c:9b:d1:4d:14:86:
         e0:75:47:08:9b:7d:c3:a8:06:a9:5f:8c:4e:39:01:8a:df:61:
         0e:f4:2d:2e:1f:0d:fa:ce:e1:57:a6:2c:c7:69:d5:50:8b:c0:
         74:5e:5e:fb:66:b8:20:8f:c2:3a:7c:82:52:8c:b8:0a:69:6d:
         5a:59:53:f4:ae:71:27:3d:31:47:83:8e:4c:6a:a8:6d:ad:b5:
         87:7b:4b:3e:95:9b:2c:58:0e:02:03:1d:d3:c5:8d:1e:8c:b4:
         c4:21:5b:86:c1:82:d4:c7:6a:86:ca:f4:1b:b0:e8:92:70:9c:
         3f:70:bc:2f:b7:94:5e:90:f9:e9:ce:07:15:33:08:51:c2:ad:
         51:02:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:59:21 2026 by rpki-client