Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File:                     nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier:          GjFYA6s51odS6TekH4uN9a5dCC4NkI2+5ja26qjU31E=
Subject key identifier:   1B:33:9C:D7:CC:CF:57:AB:19:9C:48:ED:48:82:CD:A5:E3:97:21:EE
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer:       /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial:       1F29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number:          1F09
Signing time:             Tue 22 Sep 2026 15:58:58 +0000
Manifest this update:     Tue 22 Sep 2026 15:58:57 +0000
Manifest next update:     Tue 29 Sep 2026 15:58:57 +0000
Files and hashes:         1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: cs2UG+Nl7TowlT21J4G0r7VrKTpiEQw9dzAF7Po8YFw=)
                          2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: +a6ogOK+k+aSB2Bvkv/yu8h4kqzrcXRyFwUo32R49nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
                          rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7977 (0x1f29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
        Validity
            Not Before: Sep 22 15:58:57 2026 GMT
            Not After : Sep 29 15:58:57 2026 GMT
        Subject: CN=6ab2a5c2-1c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:a0:95:ba:6c:88:35:5e:8d:a8:e1:b3:a1:
                    8e:54:0e:c6:67:d2:22:cc:a0:5b:9d:09:38:a8:99:
                    72:e8:7b:39:7c:94:7c:3a:ef:a7:09:4d:69:54:4a:
                    0c:17:94:fc:9f:90:c8:8f:8f:a8:cd:f5:5a:f9:22:
                    23:bb:88:d6:50:d6:47:e1:83:48:ec:b6:45:93:c1:
                    94:b2:ea:0b:a6:27:86:25:b1:0e:62:03:0c:0a:58:
                    eb:b7:56:ea:bd:81:f3:d5:82:95:b2:5f:17:af:40:
                    cd:82:01:c3:62:22:7e:70:97:04:17:fc:95:7e:3b:
                    cd:20:9e:cf:2e:8b:c2:8f:b0:cc:f7:08:56:97:c8:
                    a9:0e:61:16:ce:48:0e:5a:99:fd:dd:ae:3e:5b:04:
                    7f:2c:5b:8a:da:6b:6d:8d:28:ad:b3:47:d6:31:3b:
                    8a:b8:60:5a:02:af:8f:5b:3e:29:1c:f1:2e:83:05:
                    16:d7:93:1c:8d:ab:83:8b:07:83:0a:32:07:6a:8e:
                    97:3f:16:60:65:b1:6a:2a:28:7f:09:6b:e0:33:95:
                    91:00:a9:39:9a:c4:83:7f:8e:32:e5:9a:fc:35:86:
                    a5:d3:31:e4:bf:55:c8:50:d5:4d:d8:7c:31:a7:bf:
                    82:15:c8:b5:7a:bc:f9:9b:04:2c:9c:a5:98:e5:f1:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:33:9C:D7:CC:CF:57:AB:19:9C:48:ED:48:82:CD:A5:E3:97:21:EE
            X509v3 Authority Key Identifier:
                keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ed:42:8d:7e:60:3d:2d:17:50:8d:5e:66:17:bb:fe:5e:e3:
         46:55:7b:af:da:09:b7:19:39:44:61:87:65:2b:2a:d3:6d:ae:
         b6:02:c6:b0:79:ee:07:70:89:c1:9e:4b:f5:b4:9c:cb:73:e4:
         b0:64:a5:53:85:b9:7e:b3:c0:14:c6:06:5a:4b:9d:5b:37:f5:
         11:9f:4e:a5:51:04:f4:53:8f:91:67:a8:dc:12:e3:78:f3:d4:
         ad:81:16:fc:3e:64:af:a4:5a:6a:82:34:4c:22:82:92:d4:3c:
         08:bc:4b:7e:af:3d:0c:af:28:c6:41:7b:c1:bc:41:a3:4b:3e:
         e9:7b:23:3e:6f:35:00:ae:ca:ff:a3:c5:db:e7:9f:84:49:a5:
         f3:4a:64:d4:e4:ef:a4:b0:29:28:4b:1d:1e:fc:c6:96:2a:25:
         d5:cd:75:50:ca:f0:3c:45:4e:20:4e:7f:0f:94:9f:6e:f7:e8:
         ac:c2:78:9b:0f:64:91:98:78:a8:fb:41:3c:46:22:85:52:41:
         c7:0d:ce:af:cf:80:68:49:47:53:65:cb:b9:fa:42:78:b9:88:
         d2:f5:ab:10:bc:97:10:8c:a1:45:b4:2d:1c:29:fb:52:9b:8b:
         a3:c7:4c:aa:62:70:ee:91:06:8c:46:13:e5:ec:95:90:8f:ca:
         df:6e:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:28:23 2026 by rpki-client