Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
File:                     n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json)
Hash identifier:          FUzJiT2+3W1VAnAUefCd1xA3mJSZIg4QM7GBAwvthWY=
Subject key identifier:   4A:7B:E4:FD:4B:EF:DB:99:0A:00:04:36:8C:E4:CC:EE:D4:0C:78:2E
Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
Certificate issuer:       /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Certificate serial:       02E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
Manifest number:          02D5
Signing time:             Wed 23 Sep 2026 01:29:15 +0000
Manifest this update:     Wed 23 Sep 2026 01:29:14 +0000
Manifest next update:     Wed 30 Sep 2026 01:29:14 +0000
Files and hashes:         1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: PxdWVmyMuDpRfIYyXVGL72QVEIjGAlBFSTN5x9vWWCk=)
                          2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: XiGYQotdStfaaRLDXTyJEgN5O2tsmcN7Z7VvHBR9Ytg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
                          rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
        Validity
            Not Before: Sep 23 01:29:14 2026 GMT
            Not After : Sep 30 01:29:14 2026 GMT
        Subject: CN=6ab32b6a-de97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:37:1e:35:b8:ab:79:6d:cd:ca:a4:b2:6a:
                    27:b5:1c:18:a5:ba:86:d7:80:4c:56:0d:81:d1:eb:
                    59:bd:ba:86:cb:47:8c:8c:d1:6f:1f:e7:49:7d:57:
                    31:0f:2e:21:a7:5e:43:79:a6:59:3f:f7:aa:9c:76:
                    48:c1:ff:38:e3:93:fd:0c:e2:14:0c:e4:29:8b:9b:
                    52:68:83:51:75:c5:0b:b2:d4:53:a5:a6:29:1a:a6:
                    05:ec:31:c6:ac:5c:7a:27:e1:a6:f9:49:fd:04:51:
                    ff:e8:17:b7:e3:95:e7:88:e3:da:64:26:65:ed:bd:
                    48:e7:dc:39:65:15:86:a6:7b:72:ad:50:66:37:a6:
                    4c:91:8f:11:98:0f:f9:8f:71:05:5d:78:d2:a4:ed:
                    6a:f3:27:f8:ff:19:20:82:d3:8c:56:e3:60:13:aa:
                    8d:e4:69:5e:fc:7a:f5:da:38:57:5a:15:c4:5c:14:
                    e2:70:3c:65:5b:16:a8:3e:72:ed:4a:d4:43:1c:aa:
                    1e:0a:94:f2:54:4f:14:cd:19:d0:a2:d8:09:0d:29:
                    b9:7b:a9:87:cf:c6:fe:37:dc:ef:44:1a:cc:32:9b:
                    3e:e3:fd:ba:60:a5:eb:0e:ba:f9:2c:de:c8:47:cb:
                    42:2d:bb:81:78:ba:c2:48:4b:04:c9:e4:53:6c:13:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:E4:FD:4B:EF:DB:99:0A:00:04:36:8C:E4:CC:EE:D4:0C:78:2E
            X509v3 Authority Key Identifier:
                keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:2d:cf:3b:61:99:7b:fd:43:8c:0a:45:86:3c:f6:d2:93:
         5c:74:6a:4a:a9:af:25:67:b3:5a:91:41:98:41:1f:85:74:c7:
         71:94:1f:47:3f:44:f6:41:75:d4:52:9c:ee:d0:6f:61:b2:da:
         59:de:34:c6:fd:7c:cd:e2:69:1c:47:85:4e:88:d3:35:d3:4a:
         54:3d:32:3c:be:e1:95:81:f2:88:ac:f5:86:33:67:e7:e2:56:
         b1:cd:33:38:85:94:ea:fa:fd:9b:11:39:bb:46:3f:2e:3a:76:
         2b:b9:6d:b7:9e:ca:ec:ba:63:78:a6:dd:fd:13:27:d7:5b:0d:
         c4:59:5a:00:56:74:65:54:93:35:e1:a3:8c:40:e1:b8:e0:f0:
         6f:ab:fc:b7:e6:5f:d3:d1:fa:88:fd:69:79:e6:01:01:44:5c:
         98:9c:21:d6:27:a7:87:e3:32:00:fe:d5:d7:22:09:0a:f9:48:
         3d:42:21:c5:91:75:2e:d4:73:71:a7:16:bc:49:67:bc:05:8a:
         66:65:d2:2e:57:e8:73:ac:45:c5:d7:cd:c0:8d:72:e9:da:73:
         35:2c:81:e5:1a:64:b4:85:f3:2c:4a:c9:e7:b5:f9:62:37:b6:
         64:7c:32:11:93:51:ee:2a:4c:89:6b:cc:78:09:09:c1:e6:89:
         ea:80:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:28:30 2026 by rpki-client