Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File:                     NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier:          5jQsDuyIYLI9HxwdIZeB1u8BMwKSVtBTkKU9cvHQilM=
Subject key identifier:   70:8C:72:80:FC:CC:7D:CE:95:BF:ED:BB:14:5C:46:AB:BA:12:C3:F4
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer:       /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial:       1D6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number:          1D4E
Signing time:             Mon 12 Oct 2026 16:10:18 +0000
Manifest this update:     Mon 12 Oct 2026 16:10:18 +0000
Manifest next update:     Mon 19 Oct 2026 16:10:18 +0000
Files and hashes:         1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: W/5mtpRy7iwJ0FoK01JNxF0+SLwvxGShhW5+JgXgseo=)
                          2: xfIw3q3qM2oF8nKAJKiIyOXPmts.asa (hash: Iw8t2cOOoe9YoYuawbsMRtKnfr4RdcfMSHPUEPUr57I=)
                          3: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
                          rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7531 (0x1d6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
        Validity
            Not Before: Oct 12 16:10:18 2026 GMT
            Not After : Oct 19 16:10:18 2026 GMT
        Subject: CN=6acd066a-d229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:97:32:f3:0e:fa:00:9f:0e:46:e7:14:45:
                    ca:8a:bf:13:97:c5:0e:03:7d:2b:2f:3b:e0:42:14:
                    4d:79:eb:63:d4:15:13:0c:28:0b:9c:45:a8:bb:97:
                    6a:7e:5c:e8:1f:4b:63:7a:d8:c5:f5:14:dc:04:42:
                    8b:c7:b1:6e:f0:0a:8d:63:6a:1a:8d:13:29:b6:33:
                    14:fb:03:4e:53:ae:34:64:75:ae:a7:48:4f:e3:68:
                    72:3e:bc:6e:e8:a1:ab:24:3c:a8:5d:ca:92:5f:31:
                    51:1b:eb:dc:30:e9:1e:76:c5:67:3e:41:e3:a7:b9:
                    f6:67:3c:94:b8:65:ad:41:c7:41:8d:d0:75:b3:58:
                    74:b5:50:e0:3e:61:c2:d9:1e:0d:73:a2:0f:9c:6b:
                    67:4a:f0:f9:aa:ce:43:07:ca:30:7c:6b:de:40:06:
                    72:46:a9:04:44:a6:03:09:09:6e:85:d2:3f:10:05:
                    fe:d3:63:a3:2f:89:0a:23:8d:90:d1:a0:77:8c:79:
                    0f:7a:d2:56:20:5b:fc:d6:6c:c8:7b:9a:b8:4e:0a:
                    52:23:cc:ba:19:10:e4:32:fc:46:43:04:c2:0b:05:
                    f5:9a:7f:af:e0:4a:a6:87:b1:d7:0e:08:8a:4c:ba:
                    05:84:bf:ee:f0:05:91:15:32:e1:a2:8f:59:70:16:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8C:72:80:FC:CC:7D:CE:95:BF:ED:BB:14:5C:46:AB:BA:12:C3:F4
            X509v3 Authority Key Identifier:
                keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:eb:fd:56:72:15:2e:1d:63:33:78:86:1a:c9:8b:82:7a:
         ee:6c:3e:a3:32:4b:d9:b2:42:3b:7c:c3:f7:4e:08:ff:d1:04:
         8c:ad:03:b2:52:7f:ba:c7:28:a4:b4:54:4d:ea:11:e3:7f:5d:
         d7:89:e6:8d:cf:f1:21:45:bd:e5:81:97:9c:8a:bd:d3:b3:89:
         a8:e4:0c:37:7c:16:00:b9:cd:46:e5:9f:2b:f1:b6:8c:6c:8a:
         9a:7c:f9:0e:86:ef:39:1b:42:94:77:a3:28:a1:e7:18:01:84:
         0e:b8:86:e4:71:ff:f7:4b:de:52:1b:5a:59:e2:55:c2:06:ac:
         f7:02:49:95:57:03:d0:47:40:5d:21:f5:24:22:2c:4b:db:ec:
         99:6f:e6:51:93:3c:b4:76:ee:97:07:f6:ae:0d:b8:53:69:3a:
         d8:d4:df:63:87:4e:55:53:0d:4f:f3:1a:c4:36:f1:32:46:a5:
         ac:8d:bb:3f:db:88:e0:d3:bb:2f:0a:c5:ad:79:01:47:0e:15:
         ad:02:3e:5c:3f:6e:d4:96:d0:31:90:d6:ca:93:76:81:c7:ab:
         5f:a8:e2:f3:7d:c7:d5:92:e1:91:0a:5e:e3:74:cb:f6:d6:cf:
         14:91:22:0a:a8:81:92:e3:9d:aa:15:e2:60:41:da:1d:44:73:
         11:9e:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:54:39 2026 by rpki-client