Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          JYxQWXj/EGrhLOhkVmrLdoGTRIGd5zuSfFtkBUnrqdg=
Subject key identifier:   31:10:19:6B:ED:03:2B:9A:0F:AC:E4:AB:5F:52:E3:67:18:D5:9C:02
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       04E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          0A25
Signing time:             Thu 24 Sep 2026 23:37:04 +0000
Manifest this update:     Thu 24 Sep 2026 23:37:03 +0000
Manifest next update:     Thu 01 Oct 2026 23:37:03 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: +KFn1mtYtH3Gs+CCdmSEdJAcPWmJKIBgsd60wDV6x/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Sep 24 23:37:03 2026 GMT
            Not After : Oct  1 23:37:03 2026 GMT
        Subject: CN=6ab5b41f-c285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:04:53:86:50:51:0e:97:aa:60:b4:30:df:
                    1e:9f:73:a6:66:00:85:08:50:9e:45:e3:b8:27:44:
                    39:91:25:66:f7:35:20:6d:f6:88:d3:d3:49:19:27:
                    cb:2f:c5:da:f1:26:6d:24:f5:8d:04:af:ba:24:14:
                    f1:dd:13:8b:17:ba:ba:84:fb:83:b9:2b:ef:34:98:
                    1d:58:1a:0a:40:25:8d:2a:24:b8:71:10:e6:d3:51:
                    1c:4e:5d:6a:ab:ff:a3:1c:bf:47:7d:d4:7e:9d:41:
                    fa:e8:f8:bb:f5:c6:ee:80:bf:e5:5e:c3:8a:95:ed:
                    0d:d8:28:92:90:40:df:1c:cd:65:2f:d7:f8:cf:d1:
                    fe:c1:4f:a3:2f:25:bd:21:ab:b2:33:fb:5b:84:c5:
                    21:0e:16:a8:2e:1b:ea:ae:df:1b:db:9f:04:8f:51:
                    08:f5:3c:2c:0a:99:d3:d8:4f:4c:2e:11:b6:67:35:
                    ae:28:60:95:ad:43:5d:38:88:98:5d:15:a3:8b:05:
                    75:9b:2b:62:7e:d7:a3:65:ba:95:62:be:f3:a1:23:
                    4f:59:49:cb:9d:07:7d:d3:84:62:c3:93:39:9f:ff:
                    d1:a6:ba:e2:48:69:78:e8:d8:0b:e8:21:27:8d:1c:
                    94:6b:84:19:59:ac:3c:f6:b5:d3:7e:f7:d0:2c:4d:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:19:6B:ED:03:2B:9A:0F:AC:E4:AB:5F:52:E3:67:18:D5:9C:02
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5b:5b:7c:ec:07:65:1a:1d:f2:5f:de:07:d7:cf:9e:7f:aa:
         13:f5:1a:fb:f5:2f:97:67:15:c1:31:ed:14:2d:97:49:e6:2b:
         ab:27:fc:4d:20:29:10:3d:6b:1d:37:7d:e1:68:1d:3c:36:1d:
         f6:9d:56:1b:bb:30:97:2d:23:56:e3:16:12:74:0b:7a:b2:b4:
         60:3e:bb:9d:1f:57:c0:ba:9c:a2:f3:83:ca:0e:43:df:e4:75:
         6d:cc:55:47:74:7a:03:fd:8a:a8:ed:9b:af:67:2e:cb:9a:b1:
         f5:94:89:e8:3b:1d:b0:f3:c3:51:a1:b8:7e:4b:7f:30:4b:73:
         f0:a4:8b:51:09:f9:1e:7d:a2:3c:e0:f3:5f:83:75:3a:c5:58:
         35:d6:32:a8:28:b8:95:07:bd:f1:52:43:4a:58:1c:00:87:11:
         ad:86:27:f7:d4:8e:88:03:c7:9e:8a:1d:d5:61:4d:1e:ac:e2:
         b5:c3:80:6c:25:cc:76:d1:a4:22:63:fa:e4:28:65:18:fa:f8:
         3f:ca:f6:87:f1:51:13:a1:51:71:64:76:3b:38:cf:19:c2:b7:
         05:b6:72:e5:80:fa:6a:cf:0c:b2:4d:10:e5:12:e8:2c:c7:5f:
         f2:d3:75:c7:8d:86:b7:ae:a6:c0:37:5b:f3:b0:32:ce:d6:f0:
         95:f2:8f:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE
RjYzQzg2Q0QwHhcNMjYwOTI0MjMzNzAzWhcNMjYxMDAxMjMzNzAzWjAYMRYwFAYD
VQQDEw02YWI1YjQxZi1jMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdcEU4ZQUQ6XqmC0MN8en3OmZgCFCFCeReO4J0Q5kSVm9zUgbfaI09NJGSfL
L8Xa8SZtJPWNBK+6JBTx3ROLF7q6hPuDuSvvNJgdWBoKQCWNKiS4cRDm01EcTl1q
q/+jHL9HfdR+nUH66Pi79cbugL/lXsOKle0N2CiSkEDfHM1lL9f4z9H+wU+jLyW9
IauyM/tbhMUhDhaoLhvqrt8b258Ej1EI9TwsCpnT2E9MLhG2ZzWuKGCVrUNdOIiY
XRWjiwV1mytiftejZbqVYr7zoSNPWUnLnQd904Riw5M5n//RprriSGl46NgL6CEn
jRyUa4QZWaw89rXTfvfQLE3W/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEQGWvt
AyuaD6zkq19S42cY1ZwCMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy
NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z
ZUNJSm5CLTVrZnpmWThoczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATFtbfOwHZRod8l/eB9fPnn+qE/Ua+/Uvl2cVwTHtFC2XSeYrqyf8TSApED1r
HTd94WgdPDYd9p1WG7swly0jVuMWEnQLerK0YD67nR9XwLqcovODyg5D3+R1bcxV
R3R6A/2KqO2br2cuy5qx9ZSJ6DsdsPPDUaG4fkt/MEtz8KSLUQn5Hn2iPODzX4N1
OsVYNdYyqCi4lQe98VJDSlgcAIcRrYYn99SOiAPHnood1WFNHqzitcOAbCXMdtGk
ImP65ChlGPr4P8r2h/FRE6FRcWR2OzjPGcK3BbZy5YD6as8Msk0Q5RLoLMdf8tN1
x42Gt66mwDdb87AyztbwlfKPVQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:45:38 2026 by rpki-client