Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File:                     nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier:          lgd0r6KVsjdoGrev3ovFfBsDmJMrFn3SSsGKI2TFT2U=
Subject key identifier:   63:08:47:61:95:D3:4C:FF:D1:ED:45:64:D8:E2:D5:00:A4:09:47:80
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer:       /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number:          017C
Signing time:             Wed 23 Sep 2026 04:33:56 +0000
Manifest this update:     Wed 23 Sep 2026 04:33:56 +0000
Manifest next update:     Wed 30 Sep 2026 04:33:56 +0000
Files and hashes:         1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: KpFEB9G57HVWUFQR1FpjCUtPIVgI/9DCmJ85zHDLGss=)
                          2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: WwFFmG8/4wsEls41tloUK6sLzod+S/W4CA8w6ITWHJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
        Validity
            Not Before: Sep 23 04:33:56 2026 GMT
            Not After : Sep 30 04:33:56 2026 GMT
        Subject: CN=6ab356b4-1adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:44:3d:86:3a:43:3f:21:73:ff:0b:17:6c:
                    d3:e4:07:fe:64:83:b1:de:34:b9:82:10:d1:53:8d:
                    53:f6:2a:31:06:80:d4:a7:09:26:a9:01:1f:53:81:
                    34:1a:ed:4c:89:2e:c9:17:d0:78:3a:68:61:9e:c9:
                    6d:cc:67:61:31:a9:64:b2:cf:ca:c6:06:0b:ff:17:
                    c6:6b:27:75:00:5b:de:a2:bd:12:95:09:28:65:f0:
                    d0:18:11:f8:c8:fd:9a:43:57:00:eb:4d:fb:b7:d9:
                    d1:cd:39:83:a1:13:76:15:b4:1f:e1:6b:e0:90:83:
                    29:46:03:48:d8:c8:ad:a1:80:cc:a2:98:1a:5a:1c:
                    9d:e9:83:b3:a8:cb:13:26:82:7c:48:23:30:ff:3c:
                    81:ff:0b:74:f5:15:ec:86:dd:d3:c8:0c:00:f7:42:
                    35:64:54:95:26:11:36:24:55:2a:b3:64:5c:ec:69:
                    9d:54:f1:cf:f7:52:42:da:aa:20:9b:b0:bf:c4:85:
                    b1:c2:49:f3:7b:a8:95:a2:5c:5a:08:04:2f:e3:77:
                    ed:ac:87:6b:d8:ab:59:56:bc:2e:f7:ed:a8:dd:f7:
                    57:11:d9:0d:b5:15:14:04:76:aa:37:a4:5c:67:54:
                    5a:86:96:48:e9:04:a5:57:34:f1:21:59:ad:04:58:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:47:61:95:D3:4C:FF:D1:ED:45:64:D8:E2:D5:00:A4:09:47:80
            X509v3 Authority Key Identifier:
                keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:24:cb:77:2e:05:9d:53:5b:b2:e5:62:c1:e8:e7:5d:b7:81:
         b8:23:84:3a:75:e2:43:6d:6e:4c:41:e2:82:e2:98:8b:b3:65:
         5e:d0:29:a6:a2:db:87:ec:e9:54:a7:b1:d9:23:93:8a:87:33:
         da:90:5b:67:6a:47:60:1c:46:75:8f:e0:6d:37:b8:e8:5e:80:
         0a:9f:4c:81:66:13:5e:b3:c3:4a:2d:51:1e:ce:f3:c7:61:11:
         3b:62:f7:72:b6:3b:86:8e:07:d7:3e:bf:95:cd:df:a0:ec:4b:
         47:87:8b:a8:44:87:7a:cd:e7:13:e1:26:21:8a:6e:84:36:b8:
         97:cf:fb:88:6b:ff:c6:e8:59:4b:a8:a6:e9:9a:4d:89:bd:3b:
         a0:6d:e5:6d:63:da:af:8f:42:9c:e8:8b:d8:97:c8:f4:07:b2:
         da:1b:67:46:38:e3:a9:32:d6:b4:8b:c9:4d:71:35:94:90:e2:
         34:03:32:49:34:99:e3:01:c3:e1:37:3a:03:ff:37:fa:e3:38:
         29:2b:49:0f:09:18:5e:7e:79:76:88:f2:f2:5a:1f:52:7a:bb:
         11:0c:79:e9:1d:53:06:9a:92:4e:b9:68:1c:81:d0:8e:85:34:
         68:59:b1:c4:68:da:3e:0f:cf:a0:6e:fd:72:a1:da:7e:72:df:
         28:0f:1c:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0
MDJCOUYyODEwHhcNMjYwOTIzMDQzMzU2WhcNMjYwOTMwMDQzMzU2WjAYMRYwFAYD
VQQDEw02YWIzNTZiNC0xYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvd9EPYY6Qz8hc/8LF2zT5Af+ZIOx3jS5ghDRU41T9ioxBoDUpwkmqQEfU4E0
Gu1MiS7JF9B4OmhhnsltzGdhMalkss/KxgYL/xfGayd1AFveor0SlQkoZfDQGBH4
yP2aQ1cA6037t9nRzTmDoRN2FbQf4WvgkIMpRgNI2MitoYDMopgaWhyd6YOzqMsT
JoJ8SCMw/zyB/wt09RXsht3TyAwA90I1ZFSVJhE2JFUqs2Rc7GmdVPHP91JC2qog
m7C/xIWxwknze6iVolxaCAQv43ftrIdr2KtZVrwu9+2o3fdXEdkNtRUUBHaqN6Rc
Z1RahpZI6QSlVzTxIVmtBFhF5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMIR2GV
00z/0e1FZNji1QCkCUeAMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC
RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY
dmRKdGJkRFNBbnBBSzU4b0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABSTLdy4FnVNbsuViwejnXbeBuCOEOnXiQ21uTEHiguKYi7NlXtAppqLbh+zp
VKex2SOTiocz2pBbZ2pHYBxGdY/gbTe46F6ACp9MgWYTXrPDSi1RHs7zx2ERO2L3
crY7ho4H1z6/lc3foOxLR4eLqESHes3nE+EmIYpuhDa4l8/7iGv/xuhZS6im6ZpN
ib07oG3lbWPar49CnOiL2JfI9Aey2htnRjjjqTLWtIvJTXE1lJDiNAMySTSZ4wHD
4Tc6A/83+uM4KStJDwkYXn55dojy8lofUnq7EQx56R1TBpqSTrloHIHQjoU0aFmx
xGjaPg/PoG79cqHafnLfKA8cEw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:16:53 2026 by rpki-client