Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
File:                     NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json)
Hash identifier:          E+uqGyybWa78ZOUuPmyH3j3S7pK0f6OlyLBoVZckCA0=
Subject key identifier:   18:88:15:CF:C7:57:14:38:5B:A2:C1:CE:B2:59:AB:B3:65:8D:2F:CF
Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4
Certificate issuer:       /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
Manifest number:          0133
Signing time:             Fri 25 Sep 2026 05:39:42 +0000
Manifest this update:     Fri 25 Sep 2026 05:39:41 +0000
Manifest next update:     Fri 02 Oct 2026 05:39:41 +0000
Files and hashes:         1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: 6qISGSZs/w6QfUVWLzdm07dNX4A144N1/j9/N7Gmruo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl
                          rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4
        Validity
            Not Before: Sep 25 05:39:41 2026 GMT
            Not After : Oct  2 05:39:41 2026 GMT
        Subject: CN=6ab6091e-cbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:87:0c:10:44:1f:0f:f1:42:f8:e2:62:c7:
                    3f:70:2b:38:f0:e5:03:09:d5:d8:45:89:50:3e:bf:
                    26:cb:be:63:b7:86:92:ea:cb:2c:16:ad:77:ef:b4:
                    6f:fc:34:e1:70:25:36:17:f2:fe:36:92:b9:21:51:
                    52:ed:4f:c5:ce:3f:c9:6d:33:ee:93:60:1f:d1:13:
                    f4:4c:4f:75:76:23:ea:26:1b:e3:14:6d:25:0e:49:
                    6f:87:0c:9d:40:61:4c:d9:a2:06:9b:9c:0d:0e:5b:
                    bb:29:b6:3a:6d:9f:4b:a4:4c:87:63:69:fd:29:8e:
                    72:df:63:32:6a:da:2a:ee:1f:62:e5:b0:2e:e7:c4:
                    c4:e8:f7:d4:14:cc:33:c7:1b:28:3f:90:23:e3:e0:
                    74:d9:31:54:c7:50:e8:74:ac:75:e9:4a:53:94:42:
                    67:79:d4:4e:01:32:c7:96:9e:53:7a:71:ca:0f:29:
                    77:8b:d0:eb:34:6d:e9:d7:e2:c2:d9:2e:2a:61:b0:
                    9f:99:ca:2e:d6:81:e4:a7:58:be:21:7f:57:19:f9:
                    76:85:35:1e:8c:23:22:e0:43:e7:f1:4e:d8:a9:dd:
                    9b:c5:56:b9:9e:e7:16:a8:3c:c2:23:72:91:1d:b9:
                    ba:9d:e7:b6:ca:3f:bf:1e:b1:b6:a9:74:52:e8:f3:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:15:CF:C7:57:14:38:5B:A2:C1:CE:B2:59:AB:B3:65:8D:2F:CF
            X509v3 Authority Key Identifier:
                keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:96:1a:22:66:e3:65:2f:02:f3:af:b6:d1:02:1b:ee:47:
         60:9b:30:30:95:a5:cc:24:18:78:bb:4d:3e:37:cc:94:ac:d8:
         9e:3e:86:38:76:4d:a5:71:24:93:34:00:65:f6:b2:c7:41:a9:
         5a:d2:83:4a:b5:ff:fe:ec:8f:05:c7:63:ac:af:09:17:06:0b:
         d6:5e:51:a3:13:88:b0:e0:f2:81:7b:86:81:d7:41:95:e5:90:
         aa:e0:d2:a9:49:17:82:05:49:fe:da:ce:03:1a:6e:9c:6b:46:
         78:8c:9f:94:1f:d9:b6:de:6e:9c:11:6e:da:b1:43:e6:30:f0:
         c1:72:48:97:30:71:26:e6:c2:94:25:6b:a5:11:04:ea:49:45:
         c2:2e:7c:dd:90:26:48:1a:9c:0b:ae:5a:5a:eb:d4:fc:a9:10:
         8e:7a:39:66:94:43:ba:e0:f1:26:76:e6:b7:6e:f3:a7:fe:88:
         ba:52:13:31:09:ae:71:92:ad:fd:ad:d3:ed:67:77:54:b5:da:
         f3:b1:63:9d:82:c3:25:9f:63:c1:e7:da:b4:03:cf:03:0c:2c:
         02:eb:e4:dd:1d:d3:12:09:4d:bf:d0:57:5a:c4:fc:b9:a4:09:
         88:e0:af:47:c3:e4:cd:d8:b3:4d:37:9f:c0:22:06:4d:14:33:
         81:62:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:11:41 2026 by rpki-client