Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
File:                     Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json)
Hash identifier:          tFJsrXX/skcvAUmJf5+Wy3q+DdvL6TRKZRorvLcURks=
Subject key identifier:   41:76:AC:ED:F3:14:3A:7B:6C:99:FB:58:AC:56:67:47:2E:0E:55:26
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Certificate issuer:       /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
Manifest number:          0669
Signing time:             Fri 02 Oct 2026 22:54:29 +0000
Manifest this update:     Fri 02 Oct 2026 22:54:29 +0000
Manifest next update:     Fri 09 Oct 2026 22:54:29 +0000
Files and hashes:         1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: ZIqjW3DHYTC/wqOTZKlz8BHs/ElTH1XgaSuPAW2VlRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
                          rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
        Validity
            Not Before: Oct  2 22:54:29 2026 GMT
            Not After : Oct  9 22:54:29 2026 GMT
        Subject: CN=6ac03625-6e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:f3:c3:58:6f:02:92:8f:fd:ce:2f:87:f2:
                    d9:9b:9c:2a:69:f8:2e:1f:c2:00:de:21:41:e7:2d:
                    e3:c1:be:ce:0b:8e:8d:fe:d3:0a:1e:25:68:20:c7:
                    96:44:76:4e:07:a0:05:aa:58:36:3a:73:1c:f0:9f:
                    dc:37:e8:b0:8b:75:72:a0:ee:e7:81:d5:89:52:6e:
                    91:a6:20:ad:d8:4c:65:c6:13:3e:8c:ce:fb:41:b6:
                    0d:a7:35:34:90:c1:a4:de:00:c1:99:39:5b:1f:ed:
                    c4:88:73:65:74:e4:ec:52:7b:82:44:c8:4c:08:a2:
                    e1:63:8e:c1:f4:24:b6:18:d7:dc:6d:e6:ed:79:f2:
                    60:bf:4f:00:e5:9b:0e:f1:bb:e5:e9:17:21:e8:41:
                    8a:5f:0d:64:28:a8:3b:9b:08:12:dd:02:97:3c:37:
                    03:69:b8:4f:06:80:cd:dd:32:89:38:2d:50:55:60:
                    95:64:f7:da:63:cb:45:32:a8:a0:fe:ea:2b:e4:de:
                    59:21:0a:9b:d6:3a:3f:99:c7:cb:c2:aa:45:18:df:
                    9f:b8:0d:1b:4f:5d:f6:ca:ee:9f:74:ac:62:44:12:
                    2b:26:8d:19:66:82:01:ec:10:bb:c1:8a:08:0f:79:
                    72:45:ee:89:bb:ea:cf:c6:5a:98:ad:97:d8:ea:d8:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:76:AC:ED:F3:14:3A:7B:6C:99:FB:58:AC:56:67:47:2E:0E:55:26
            X509v3 Authority Key Identifier:
                keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:60:7f:13:6f:69:ca:eb:80:b1:58:65:2a:98:ba:0e:34:44:
         f5:c5:48:ac:a0:54:17:c1:63:22:8d:32:d0:be:c5:db:c0:7a:
         61:0c:56:1c:6e:4b:e3:08:d6:ee:d1:e5:24:5a:b6:a1:b3:b5:
         c0:4d:3f:a4:c8:47:05:27:c8:78:54:f7:a3:1a:d8:87:57:07:
         07:07:ab:aa:0e:9f:ac:d4:d5:32:48:3b:1e:51:46:2f:a1:ae:
         c3:51:b1:17:93:92:f1:cd:c4:c9:18:94:b7:5c:00:36:55:c0:
         26:a0:54:28:cf:75:50:51:e7:4f:a6:fe:ff:97:c3:f8:4f:54:
         22:a1:a9:49:f9:35:5e:d7:4f:50:ec:ce:0f:e7:94:77:0d:7a:
         d1:c3:41:e6:24:9c:ee:d4:11:cc:dd:90:f2:a0:a8:d4:a4:2e:
         5d:c9:48:71:ac:81:18:6f:40:0a:a4:0d:57:f2:57:44:97:33:
         af:63:44:0d:53:61:d5:29:d6:3b:83:d7:5f:7a:c1:d8:72:62:
         52:bd:cc:99:43:38:b5:23:c9:5e:50:12:f1:1d:c3:b8:e3:6d:
         7a:d7:ff:c4:9c:3e:ee:c4:39:07:95:51:f8:9a:f4:ab:5b:1a:
         34:0d:d1:3c:fe:1e:61:d2:57:37:1e:7f:cd:8d:8c:a9:ee:b2:
         ea:cc:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:58:30 2026 by rpki-client