Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File:                     npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier:          hLDWfjOVyeRyVpHDWx6+nDuMq73MW44gb3D2nIiGYiA=
Subject key identifier:   58:DB:62:C4:8B:83:50:64:70:E8:23:02:71:4F:03:AA:E3:C8:34:83
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       1665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number:          163A
Signing time:             Thu 24 Sep 2026 16:40:38 +0000
Manifest this update:     Thu 24 Sep 2026 16:40:38 +0000
Manifest next update:     Thu 01 Oct 2026 16:40:38 +0000
Files and hashes:         1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: SAUt2GHPb5rgplBjCINr6G1Kdl/v8jE/c+9Vw8evKGM=)
                          2: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: CCfmB5nos7EF41BAAoxKCuLPSODNK5W/+bRi8fs1z+4=)
                          3: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: f9TUDRfFjJQtgC8eJzlJhB1hYGwIccQ4M22mpUldh4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5733 (0x1665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Sep 24 16:40:38 2026 GMT
            Not After : Oct  1 16:40:38 2026 GMT
        Subject: CN=6ab55286-b0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:5b:1f:89:a1:43:fa:e9:b6:79:4d:ba:f7:
                    12:ec:07:05:89:aa:14:e7:cc:3d:03:9e:e8:18:94:
                    44:70:3b:70:66:f7:4e:92:a4:2e:c6:12:dc:33:18:
                    e2:9b:81:4c:ff:ee:aa:3e:66:c1:47:4f:0a:6a:be:
                    38:33:22:2a:c7:49:eb:51:da:ea:c7:6e:5b:a6:5f:
                    b3:b3:db:a1:75:cd:eb:96:cf:c4:27:8f:cb:ac:88:
                    79:09:0a:f6:f1:71:ae:78:cc:28:5a:c1:b0:1d:36:
                    67:19:6c:3d:7c:4b:ea:00:3a:81:b5:fb:43:b7:1f:
                    09:47:00:d2:e1:6a:83:97:96:fa:7a:e2:41:00:06:
                    e9:b7:d5:7e:19:f1:bd:d9:ed:da:36:2d:39:48:04:
                    ef:11:d1:fc:43:c5:3d:92:bf:6c:fb:8e:c0:5c:50:
                    db:11:8a:a5:17:46:f1:29:a2:23:8a:a2:c3:1e:be:
                    57:bf:c6:d8:a5:53:af:73:0b:ee:e8:d5:6c:1f:a4:
                    30:b7:11:6b:62:c3:b1:59:6d:b8:37:06:31:04:c8:
                    5b:74:fc:e1:ef:83:5a:d8:84:10:c6:26:21:21:4f:
                    d2:42:e2:c3:28:ee:68:58:52:7a:00:69:1d:2f:b5:
                    60:38:6a:b5:24:ce:ad:85:cf:8e:42:d6:bb:91:a1:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:62:C4:8B:83:50:64:70:E8:23:02:71:4F:03:AA:E3:C8:34:83
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:74:ce:e6:fb:cf:ab:98:72:32:d6:8a:61:34:42:39:bf:d5:
         fb:14:81:55:4b:5f:f6:7b:b6:d1:1d:4c:cb:11:bc:7d:83:ab:
         72:57:33:50:ca:62:8d:c2:4b:4b:fb:d5:5b:38:ee:a6:42:8f:
         fa:19:68:36:ec:44:6d:e8:7c:10:01:f7:2f:a0:bb:d3:b9:a3:
         9b:25:e0:a9:bb:b9:45:57:d3:79:ae:bd:30:ae:6c:ef:58:8a:
         c6:7d:24:1c:58:93:3a:3f:70:dc:18:04:45:1d:e0:6b:b8:af:
         bc:86:32:50:73:52:08:89:da:a2:4d:5c:e3:25:fa:5e:69:9e:
         59:f6:29:ca:b2:bd:56:8a:4a:6f:fd:f8:85:70:51:07:a7:55:
         c7:65:53:a5:46:5e:da:4b:34:19:c7:d5:94:43:47:a2:63:fc:
         b4:a8:f9:3a:90:3b:20:27:6e:bb:25:e4:5c:5c:fa:ff:b1:a5:
         97:c6:47:ec:64:64:30:e1:90:30:26:d6:e9:ee:f2:81:c7:36:
         5e:ea:1d:8d:00:78:0b:38:91:3f:1d:e9:15:ef:d4:99:6f:3f:
         9f:70:e2:e6:8e:43:54:9e:56:0e:d6:14:cd:fc:38:dd:46:fd:
         05:a5:f6:13:1b:61:fc:8e:36:99:fc:1a:df:a2:f1:e6:7d:e0:
         16:b4:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:15 2026 by rpki-client