Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          BJJuh/ngQapZxzxcwddlpWUvTjORuKqKZoz0GGxLSoc=
Subject key identifier:   AE:44:43:19:25:48:15:1C:E8:27:57:BD:86:8B:48:A7:AB:96:83:98
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          0112
Signing time:             Wed 23 Sep 2026 05:49:45 +0000
Manifest this update:     Wed 23 Sep 2026 05:49:45 +0000
Manifest next update:     Wed 30 Sep 2026 05:49:45 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: NUHKCORENGzuiV5mOBl9kBxXVf1vPRhYoD/qQCylmyg=)
                          2: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
                          3: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Sep 23 05:49:45 2026 GMT
            Not After : Sep 30 05:49:45 2026 GMT
        Subject: CN=6ab36879-6911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:1e:55:c1:17:c8:ab:b6:d8:67:4e:16:86:
                    48:e6:cc:31:66:66:44:e1:f2:44:69:f9:0b:ab:af:
                    0f:a2:89:e3:f6:52:20:17:0c:9c:93:fd:43:0b:d2:
                    9e:b9:a0:87:ba:ec:3d:dc:43:4d:ec:e7:66:86:e0:
                    9f:29:26:e2:36:86:3e:80:b5:a0:ed:67:e9:ff:b2:
                    dc:4d:0a:c8:f3:d5:a4:a2:1d:2e:f3:06:d7:4a:51:
                    54:a8:a8:32:99:2f:ce:45:18:97:19:c2:82:1f:80:
                    d7:e2:53:bb:3c:c8:a5:03:32:3c:fb:48:70:9c:c6:
                    b7:5a:6a:2e:9b:b1:35:cb:71:35:17:04:87:ed:7e:
                    c6:1c:64:11:35:f3:55:26:77:21:ae:4f:1e:71:d8:
                    5e:b1:0e:c6:42:f9:cd:fc:5c:f0:94:3b:5f:d3:3b:
                    37:08:b6:ae:35:e2:fd:91:dd:a6:35:a3:aa:cb:15:
                    98:6b:d4:cc:74:bd:80:55:63:96:ba:56:5f:f0:9b:
                    48:f2:ca:17:c8:9e:5e:26:f4:01:6f:b1:4a:9c:c6:
                    60:43:71:07:e5:9b:84:e1:f6:7e:f1:68:53:ac:d1:
                    01:aa:c3:3c:37:a4:26:1d:c6:0c:2a:72:ea:56:1f:
                    cf:ea:2c:fd:a8:9e:7f:d7:0c:99:71:33:f4:a2:b8:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:43:19:25:48:15:1C:E8:27:57:BD:86:8B:48:A7:AB:96:83:98
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:de:10:7a:7c:71:ec:d5:4e:f4:df:11:2b:5d:05:76:49:68:
         6f:87:77:78:23:75:f2:15:63:d9:e8:9a:ba:d8:36:14:cd:97:
         a9:cc:90:23:6f:1d:92:d5:02:30:74:f6:89:bc:23:e1:38:ea:
         db:5a:61:2b:47:7c:8c:36:d0:ba:09:7f:26:bb:6b:1f:6b:3a:
         52:65:cc:51:be:85:b6:a4:0b:ab:a1:c2:68:c5:6d:c9:44:cf:
         ae:00:31:e5:e3:65:7c:67:74:f8:03:c0:60:9d:34:da:e5:2d:
         5e:82:d0:97:d8:2c:82:98:56:22:9b:08:ca:45:03:74:aa:0d:
         74:0e:0e:e9:a6:09:32:69:da:d8:3a:83:a2:bd:1e:3a:52:82:
         8d:62:88:4f:9d:ab:e6:ee:6a:15:c7:79:80:3d:91:e4:81:75:
         28:c9:e8:37:b7:b8:9e:ef:f7:e3:f2:fe:2f:14:7b:fb:bc:6b:
         31:78:b8:20:d3:d3:6a:7a:c9:ba:df:3e:d7:56:23:8f:c6:ce:
         f7:94:40:bc:91:cf:b2:85:07:1a:c2:4d:b6:a5:2e:89:03:b5:
         67:23:c6:39:00:32:16:74:03:06:1c:2f:12:0a:ed:f2:73:cf:
         e3:ff:f3:fb:c6:7c:01:79:eb:bd:26:55:9c:fd:bb:2a:b8:7f:
         02:25:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:20:43 2026 by rpki-client