Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File:                     nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier:          +KWKTAUw00L6WRaNnHF/wE6CKA5caGTlMb2t7hMiWuU=
Subject key identifier:   59:9B:ED:76:9B:2F:45:32:0D:B2:64:BF:69:23:0C:76:78:F2:28:8A
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer:       /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number:          08FA
Signing time:             Wed 14 Oct 2026 20:32:41 +0000
Manifest this update:     Wed 14 Oct 2026 20:32:40 +0000
Manifest next update:     Wed 21 Oct 2026 20:32:40 +0000
Files and hashes:         1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: yRioq5pN8TPC7HNv6inyHjEtQU2xKdvh82ZaZe8vqng=)
                          2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=)
                          3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: q5Y0uGRmUCg4iSbCFOqAPFa+DSzHUTjKsRs6A7GCSWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 20:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
        Validity
            Not Before: Oct 14 20:32:40 2026 GMT
            Not After : Oct 21 20:32:40 2026 GMT
        Subject: CN=6acfe6e9-ec9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:e0:7d:7d:1b:19:25:3a:97:ba:04:d2:05:
                    a3:9d:6f:aa:45:a9:79:d0:a6:99:31:5c:c9:18:6a:
                    10:2b:3a:d8:64:ce:13:ed:c4:84:44:c6:55:ab:aa:
                    59:52:59:7c:73:cf:c0:ee:dd:6f:fb:a6:06:27:7b:
                    96:7f:01:83:75:2b:cd:fd:08:68:e6:8f:8e:89:3c:
                    6a:18:73:30:66:db:dd:de:01:23:a4:6b:38:d7:2b:
                    41:29:42:dc:a2:08:cd:e4:23:48:6e:61:d1:5d:a5:
                    53:f6:93:30:fc:0a:11:8c:9c:3a:b8:a9:80:7b:c3:
                    6f:c4:13:96:d5:a6:bf:b8:61:72:db:39:01:6b:2f:
                    33:8d:2b:46:02:0b:14:91:ed:12:3e:1b:17:42:a8:
                    24:c9:34:d8:91:a2:6b:1d:19:20:08:8c:69:6a:71:
                    b2:ae:6d:eb:01:bf:bd:90:b0:fd:11:95:87:28:91:
                    ce:57:88:a3:63:17:04:7e:da:33:0a:d5:93:8d:c7:
                    52:eb:61:8d:61:17:86:ac:3d:6c:95:c7:35:f7:1f:
                    c1:1e:0c:bd:f8:d9:b8:df:f9:ed:a9:6a:ce:eb:d4:
                    3b:5f:da:2d:86:80:8d:05:7d:8f:0c:e0:98:53:cf:
                    89:1f:ee:13:ab:99:7c:61:55:dd:4d:8b:42:54:8d:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:ED:76:9B:2F:45:32:0D:B2:64:BF:69:23:0C:76:78:F2:28:8A
            X509v3 Authority Key Identifier:
                keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:fd:a3:69:a5:ed:5c:26:f7:9a:7b:51:24:23:6d:3f:95:
         d2:e1:ad:85:9c:29:01:06:c5:2b:b3:f5:85:90:8f:19:50:2a:
         c6:93:41:bd:a8:bc:5f:b3:08:1c:c8:43:39:c1:84:2a:65:44:
         8f:fc:4e:e7:b3:e2:f7:33:81:ec:ec:b1:c8:65:2d:2a:88:19:
         85:21:05:a7:f6:21:80:e1:a7:0e:be:20:d1:23:74:6e:22:35:
         2c:52:4b:d8:9f:86:9a:b7:23:87:20:cd:85:47:2f:fe:11:7c:
         55:b2:91:82:49:6f:51:41:84:0b:c9:74:74:bf:b0:13:a1:27:
         0b:05:9b:eb:76:ad:60:2e:d6:7b:1c:0c:aa:e3:d5:9e:63:a7:
         bf:e6:ea:c7:a9:ce:18:12:d5:4d:4b:02:e0:79:98:fe:73:0e:
         28:9a:ef:12:ff:e7:64:25:cf:b7:71:3e:31:c5:cc:86:02:6f:
         95:8b:73:98:36:38:ef:48:c7:fe:4c:ac:7d:32:4b:cf:fc:aa:
         d6:4a:af:7b:90:6e:ea:8b:c0:1c:bb:67:ff:09:cf:c5:78:c6:
         ea:23:08:e9:98:cb:75:42:ee:dd:6e:34:b8:5a:83:77:56:47:
         c3:97:c2:e7:db:31:6a:45:a5:39:9a:ab:a8:e7:ce:eb:dc:fe:
         94:23:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:49:35 2026 by rpki-client