Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File:                     NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier:          XsWZLKyxh2R4KcqIBOgzpVzGRoIQ9ehnP3qicTlyyqI=
Subject key identifier:   29:5C:86:CB:87:09:F6:46:F4:F1:A4:AE:13:AA:87:B7:3F:86:E1:B8
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer:       /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial:       0832
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number:          07FF
Signing time:             Thu 08 Oct 2026 21:32:44 +0000
Manifest this update:     Thu 08 Oct 2026 21:32:44 +0000
Manifest next update:     Thu 15 Oct 2026 21:32:44 +0000
Files and hashes:         1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: LbW4+tAUEHFFdOyJXdcZ88mHXwtTW7Idn/Y5BKzrl+0=)
                          2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
                          rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 21:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098 (0x832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
        Validity
            Not Before: Oct  8 21:32:44 2026 GMT
            Not After : Oct 15 21:32:44 2026 GMT
        Subject: CN=6ac80bfc-1dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:b4:10:46:0b:bd:7b:8f:a8:31:20:5b:52:
                    d0:49:ab:1f:3d:02:ef:2d:2a:e8:aa:27:e6:1c:23:
                    3e:de:41:47:9a:50:a6:4c:f8:3a:37:31:c1:20:ae:
                    6a:cf:35:1e:c7:0d:67:7f:8e:83:d6:e8:bc:c8:fd:
                    1a:c9:6e:b2:dc:24:99:b1:74:36:03:5d:0d:f6:9e:
                    bc:fb:d4:41:40:7b:d7:31:27:7e:cf:33:47:5a:61:
                    f8:dd:09:58:96:52:76:d1:d1:57:74:6b:bc:8f:43:
                    63:b4:a7:7a:12:c1:8d:08:b7:8b:e8:a4:e7:da:2d:
                    9e:a2:61:d1:22:cb:5d:bc:6d:fc:94:e9:db:8b:f1:
                    7d:f7:9e:26:e5:cd:b7:25:73:9b:19:e6:dc:19:a2:
                    0d:21:bc:68:41:93:79:a2:21:38:68:9b:a3:4f:7b:
                    0e:fe:02:af:9d:d0:94:27:c6:b2:2d:ae:15:a0:f9:
                    ea:25:9a:ce:be:86:c5:90:3f:2e:7f:8b:62:ae:e3:
                    71:c3:e3:dc:de:94:99:27:09:f6:04:96:77:d4:5d:
                    f3:6b:5e:95:07:2f:22:b7:0b:1a:b8:2b:fd:d8:9e:
                    c5:85:77:c5:8f:a0:b9:cd:8b:60:72:da:d1:fd:23:
                    34:ac:23:b6:1d:8b:53:b6:ef:2d:1d:75:48:27:e2:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:86:CB:87:09:F6:46:F4:F1:A4:AE:13:AA:87:B7:3F:86:E1:B8
            X509v3 Authority Key Identifier:
                keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:cd:f5:92:45:5d:2c:87:9b:8d:e5:06:54:71:f1:83:62:
         00:eb:a5:1c:30:c3:6d:b7:d0:70:8a:f2:46:4a:92:f2:84:c5:
         82:d7:ea:79:4f:18:8a:73:54:8a:dd:82:04:27:d1:c9:5e:13:
         47:df:6d:a9:eb:47:70:93:af:7a:ab:5e:fe:87:b1:31:03:44:
         cf:b6:cc:b6:f3:d1:fa:45:00:1e:00:8f:92:18:98:7e:88:b5:
         f0:a1:0b:5f:ac:00:4d:5d:b1:f2:ff:33:57:05:fa:ed:88:5e:
         e6:c2:78:8d:70:0d:4d:7f:87:08:29:5d:de:9d:11:51:2e:4a:
         73:14:11:36:00:60:b4:55:1b:c0:e1:ed:9e:b7:dd:cc:40:f3:
         20:c9:9d:7a:08:e9:d2:fc:86:6b:ba:41:64:03:45:e7:59:07:
         9c:e6:4a:9a:ee:a3:33:23:5b:e5:d9:5e:24:b8:20:f9:30:4d:
         d9:a3:12:d5:48:5d:31:a8:81:fc:51:00:c5:ac:2a:b7:f6:9a:
         15:4b:1d:e8:a4:bb:8d:dc:15:63:77:62:e6:50:b9:21:76:91:
         0d:ef:65:4f:65:ea:88:ef:05:ce:7e:cf:08:7b:9c:b2:19:c4:
         7b:2a:1c:3c:7b:af:7f:d0:c7:7f:02:62:57:aa:f9:5b:ea:8b:
         20:9a:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:06:56 2026 by rpki-client