Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          iqIcMBPAlzX7/YWhrAOqHpIZZpj0wq8NKNEnRN6RuIM=
Subject key identifier:   36:05:24:FB:20:27:85:E7:4A:FA:D3:E7:77:A4:95:65:00:8C:9F:F7
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 06:20:26 +0000
Manifest this update:     Wed 23 Sep 2026 06:20:26 +0000
Manifest next update:     Wed 30 Sep 2026 06:20:26 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: xnXaXg8DlrQPBZ4AhIpeoXN8buMP7+sL2M6rdVXOjyE=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Sep 23 06:20:26 2026 GMT
            Not After : Sep 30 06:20:26 2026 GMT
        Subject: CN=6ab36faa-2d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:17:89:76:e8:91:71:4c:da:19:98:c2:ba:
                    fd:02:0e:cf:7a:da:23:d7:a3:e4:9a:d5:c9:2d:70:
                    15:11:ea:bd:2f:ae:14:6e:d9:3c:61:4f:62:00:55:
                    c4:80:2c:0f:f5:a7:90:ed:22:18:3a:da:81:9b:5d:
                    ca:73:61:23:9d:98:66:2c:ae:af:2b:b7:3d:88:65:
                    4f:9d:55:86:02:50:b5:3f:6c:fe:4b:d1:3d:db:00:
                    b8:cc:68:53:30:11:a7:db:a7:73:27:d5:c3:40:e4:
                    f1:25:8d:63:2b:8e:c2:3e:3d:20:1e:53:bb:04:ea:
                    f4:f2:83:0a:60:a0:51:b7:0c:eb:ea:34:f4:5f:bb:
                    0f:ed:84:30:02:1e:5b:34:8f:b3:aa:ff:70:04:ed:
                    0d:f5:6d:bf:d8:48:12:b3:0e:98:82:e1:75:e6:a0:
                    e1:56:02:7c:7b:d1:24:13:03:2f:1f:7a:8c:d5:30:
                    2f:e4:b5:f6:60:8f:eb:d6:30:d1:db:f5:2e:af:d5:
                    bc:3c:05:64:47:30:c7:53:2c:1d:36:69:5a:df:ef:
                    4b:9f:85:74:22:81:93:52:e4:55:22:04:3c:a2:08:
                    3c:38:8b:93:60:d2:ff:d7:ca:81:72:68:e2:37:66:
                    f9:ca:ef:1f:a4:a0:a2:08:aa:88:2b:99:a2:08:4c:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:24:FB:20:27:85:E7:4A:FA:D3:E7:77:A4:95:65:00:8C:9F:F7
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:a3:da:32:69:67:bb:10:ac:cc:ba:1a:cc:f5:8c:e6:12:
         18:61:69:15:e8:a0:c8:6a:c4:c9:41:27:b5:dd:ad:82:68:29:
         92:e3:5a:cc:82:16:e0:00:f9:f9:3a:25:3e:78:35:5e:ca:7a:
         82:30:ab:c0:c7:99:4c:9b:6f:d7:5c:b0:2e:9b:1e:5d:8c:de:
         81:99:35:1b:cf:33:3b:5c:dc:71:08:7c:dd:fa:da:22:f8:3a:
         1b:55:db:8f:ee:1d:eb:03:c9:47:6b:8d:a9:2a:c6:53:db:71:
         0c:c1:1d:24:18:6f:8d:80:fb:fb:88:8d:58:6d:e8:8d:8a:40:
         dc:cf:18:0e:99:a5:10:35:e4:de:66:8a:18:41:ab:89:d8:b9:
         c8:19:0a:cd:1e:b3:21:10:64:5c:a7:03:af:aa:55:20:89:80:
         38:24:6b:af:17:d6:83:a3:67:ff:cd:b0:80:3e:99:b8:c3:da:
         41:d7:b7:15:fb:e5:84:cf:fb:b9:e5:2e:6f:a1:50:e2:d2:6f:
         93:e0:84:b4:c0:41:7f:44:d4:d0:4e:47:4d:a8:b2:57:c1:d6:
         09:76:de:ad:9e:f6:dd:cd:e3:e5:dc:e7:9d:55:da:e5:af:45:
         67:8e:be:8f:af:29:4b:e8:08:ea:d1:73:32:de:f9:b3:b4:0e:
         10:7c:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:22:19 2026 by rpki-client