Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
File:                     nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json)
Hash identifier:          1X/f6wbdsaD2ScnjkX8A17LL2f4cOD7LPBAjWh7nObI=
Subject key identifier:   C6:85:C4:09:4F:E7:C5:D4:C9:CD:9D:E0:2A:B3:7D:C7:32:B8:C3:20
Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
Certificate issuer:       /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
Manifest number:          0207
Signing time:             Wed 23 Sep 2026 03:03:39 +0000
Manifest this update:     Wed 23 Sep 2026 03:03:39 +0000
Manifest next update:     Wed 30 Sep 2026 03:03:39 +0000
Files and hashes:         1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: 74bS02yP7rSLYoUXoeGd7vGtS+qZZXeH8AYl0c3MrzI=)
                          2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: uZLI87yhkZqBREf9Dkw2+sZTis7hj3RLHWj7/G8COxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
        Validity
            Not Before: Sep 23 03:03:39 2026 GMT
            Not After : Sep 30 03:03:39 2026 GMT
        Subject: CN=6ab3418b-6b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:d5:42:18:f6:5b:1b:09:96:76:c3:b4:a1:
                    33:5f:e5:44:d0:05:e1:da:99:1d:18:18:60:9f:8e:
                    d8:2a:bf:fb:eb:90:48:6a:79:de:a3:44:ab:4d:92:
                    ff:33:f7:f4:0b:e0:a5:ab:16:b8:eb:5b:9b:01:01:
                    45:73:d9:e5:63:36:8b:60:81:0f:30:91:6c:6b:f0:
                    d1:fb:fb:0b:9d:f1:73:6c:b5:c2:e5:eb:a7:bd:71:
                    6b:94:82:b1:f4:5b:27:64:f9:c2:d9:1a:97:10:a9:
                    0e:79:ff:d3:01:46:41:74:1e:76:94:a8:01:a7:db:
                    5f:64:04:90:b4:7e:43:2f:20:3f:ba:41:f4:0f:cd:
                    33:57:7b:be:32:d5:dd:31:05:19:64:8a:4f:00:ad:
                    16:5f:cf:14:63:6c:3e:72:05:0b:08:23:ad:23:1f:
                    4b:75:56:c2:ee:95:f5:95:fe:11:d8:24:d8:34:99:
                    ae:d8:b3:ff:f4:73:35:1d:28:82:e3:e8:22:b6:c6:
                    36:37:51:c0:df:67:34:93:8c:80:51:5e:6d:63:39:
                    85:89:79:97:5f:16:8f:82:61:f5:ce:ff:cd:19:22:
                    9d:c4:5b:6b:1e:33:83:00:f0:bb:f2:38:5d:18:c6:
                    27:2f:f4:8f:2b:3b:8d:6b:5f:ff:f7:54:e1:0c:90:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:85:C4:09:4F:E7:C5:D4:C9:CD:9D:E0:2A:B3:7D:C7:32:B8:C3:20
            X509v3 Authority Key Identifier:
                keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:93:65:7c:28:44:eb:00:4c:02:cc:c0:8e:27:e1:30:55:89:
         4f:2b:4d:a0:24:d9:82:9c:bc:12:eb:e3:1b:05:a2:c8:e2:25:
         0c:5a:40:93:0a:1a:49:69:57:79:01:89:10:23:58:f4:cb:71:
         33:ee:d3:af:e2:fd:03:c2:0c:c5:68:b2:a1:49:22:92:c3:7a:
         cf:64:ed:74:09:34:b1:83:2f:0a:a8:bc:bb:80:d1:eb:90:77:
         e4:57:1c:f4:64:77:b3:ac:87:45:7a:ca:08:85:52:1e:0c:99:
         9c:f4:73:3f:d9:8a:cc:e1:fa:66:ac:4a:e9:6a:30:c4:4b:04:
         6c:6e:0e:76:72:52:0c:2c:e1:51:2b:f2:34:cd:c8:d0:ac:7d:
         4c:8c:fc:ae:ce:1e:3c:f2:5a:09:5f:ca:c5:d6:21:58:35:fd:
         1a:e7:d9:ad:01:3c:83:cc:bb:34:a0:44:55:51:fe:53:e7:cf:
         c5:22:27:ad:6b:5e:12:f5:cc:f7:3d:aa:a8:76:f1:64:ae:6b:
         4a:d1:d1:d1:14:ed:eb:ff:0a:bb:bd:72:99:f7:73:7a:50:f8:
         b5:c1:4e:d3:40:b0:47:23:7c:0b:a9:2a:2f:1b:a8:45:74:af:
         bf:c0:bb:ee:7e:ce:4e:c4:a4:00:32:0c:90:a0:66:cd:11:9e:
         66:eb:60:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1
MzI2ODBDREYwHhcNMjYwOTIzMDMwMzM5WhcNMjYwOTMwMDMwMzM5WjAYMRYwFAYD
VQQDEw02YWIzNDE4Yi02YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlvVQhj2WxsJlnbDtKEzX+VE0AXh2pkdGBhgn47YKr/765BIanneo0SrTZL/
M/f0C+Clqxa461ubAQFFc9nlYzaLYIEPMJFsa/DR+/sLnfFzbLXC5eunvXFrlIKx
9FsnZPnC2RqXEKkOef/TAUZBdB52lKgBp9tfZASQtH5DLyA/ukH0D80zV3u+MtXd
MQUZZIpPAK0WX88UY2w+cgULCCOtIx9LdVbC7pX1lf4R2CTYNJmu2LP/9HM1HSiC
4+gitsY2N1HA32c0k4yAUV5tYzmFiXmXXxaPgmH1zv/NGSKdxFtrHjODAPC78jhd
GMYnL/SPKzuNa1//91ThDJCltQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaFxAlP
58XUyc2d4CqzfccyuMMgMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG
MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz
N28xWFpYNzVsNGxUSm9ETjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARpNlfChE6wBMAszAjifhMFWJTytNoCTZgpy8EuvjGwWiyOIlDFpAkwoaSWlX
eQGJECNY9MtxM+7Tr+L9A8IMxWiyoUkiksN6z2TtdAk0sYMvCqi8u4DR65B35Fcc
9GR3s6yHRXrKCIVSHgyZnPRzP9mKzOH6ZqxK6WowxEsEbG4OdnJSDCzhUSvyNM3I
0Kx9TIz8rs4ePPJaCV/KxdYhWDX9GufZrQE8g8y7NKBEVVH+U+fPxSInrWteEvXM
9z2qqHbxZK5rStHR0RTt6/8Ku71ymfdzelD4tcFO00CwRyN8C6kqLxuoRXSvv8C7
7n7OTsSkADIMkKBmzRGeZutg/g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:21:25 2026 by rpki-client