Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File:                     NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier:          cm2L+l5R9Uttt1JbxOdS9ucPJWJx0+ijDKTVvHVXEPk=
Subject key identifier:   41:20:84:7F:8F:76:D5:5C:19:7B:64:57:97:76:BC:4E:47:06:92:01
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer:       /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number:          0205
Signing time:             Fri 25 Sep 2026 03:19:26 +0000
Manifest this update:     Fri 25 Sep 2026 03:19:25 +0000
Manifest next update:     Fri 02 Oct 2026 03:19:25 +0000
Files and hashes:         1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: z7A/O6RA/5pAS7Z/Byg9X9Ggho/WfX9j+SGRP/B6RTc=)
                          2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
        Validity
            Not Before: Sep 25 03:19:25 2026 GMT
            Not After : Oct  2 03:19:25 2026 GMT
        Subject: CN=6ab5e83e-1d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:fe:a2:eb:95:78:eb:2f:54:c3:df:24:aa:
                    a1:0c:40:93:58:ab:df:83:2a:79:5d:ad:c3:5d:ce:
                    ba:d7:21:aa:7c:91:eb:3a:28:03:a9:72:ca:10:ff:
                    93:27:a9:7b:d9:0a:13:53:13:bf:81:c1:86:dd:81:
                    21:84:23:34:8b:22:e2:21:7b:7d:27:93:f6:32:fa:
                    b4:ab:18:cb:88:ed:b7:28:d1:64:6c:6b:9e:40:0d:
                    d0:91:ad:07:73:dc:3a:2e:78:69:8a:09:09:55:23:
                    71:fa:a6:9b:a3:c9:e4:9b:47:27:8a:80:fc:3e:e5:
                    fd:b9:18:b3:88:2f:dd:93:7e:69:19:a5:84:0d:da:
                    74:06:62:3d:95:83:01:5b:df:c9:d3:6b:ad:9c:f2:
                    39:9e:30:bd:c9:e5:03:f0:7a:65:a3:4a:55:a5:10:
                    6c:6c:41:35:18:f9:83:ac:7f:2f:f5:dc:f2:4d:14:
                    5a:c4:11:c8:e2:43:ee:a1:23:33:85:90:70:cf:8d:
                    39:8c:b0:33:a4:2f:f5:b0:7f:99:ab:4f:24:2a:38:
                    6b:19:8c:26:14:b0:ed:a5:30:f1:65:66:06:99:51:
                    f0:65:63:b3:3a:cf:d2:ce:fe:53:1c:0f:a2:66:08:
                    c2:4b:0d:18:f6:c3:91:b8:04:5e:81:80:ee:c9:8d:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:84:7F:8F:76:D5:5C:19:7B:64:57:97:76:BC:4E:47:06:92:01
            X509v3 Authority Key Identifier:
                keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:05:ba:e5:d2:55:82:8f:ef:89:61:1e:28:2a:c6:4f:ea:
         45:b7:6a:ad:c6:7a:ec:76:d3:c5:da:7c:f4:82:ab:c1:8c:b2:
         1b:34:07:0a:07:5c:90:51:ab:d0:6c:ee:64:61:dd:0b:80:ae:
         db:d3:b9:f3:48:74:95:f3:c0:3d:34:b2:8d:46:ed:97:6c:fb:
         aa:f4:0a:da:dd:bd:14:9e:61:d3:87:88:08:34:e4:78:05:0d:
         e9:9f:2a:f5:90:b0:f5:aa:02:a2:2d:f9:bc:a2:22:72:d3:a2:
         98:f7:f9:3a:67:7e:3e:65:da:bb:9a:40:3e:ae:ad:33:26:83:
         e2:2d:92:5b:0b:17:b6:eb:3c:74:f9:c5:a0:46:b9:50:cf:6d:
         18:cc:16:04:0e:bc:99:c5:e0:37:06:33:dc:47:77:62:7b:29:
         c9:a1:4b:3b:59:5b:b0:30:d2:37:51:d2:93:ba:32:b3:93:73:
         6f:47:6f:42:d4:88:f6:a4:05:27:ea:84:37:b4:7f:88:3e:f4:
         86:a1:4d:0c:02:ed:25:99:6d:7a:ae:4c:ba:26:15:38:96:84:
         4d:2d:a6:ab:04:06:23:0e:1c:82:69:30:aa:e5:db:db:cc:1e:
         32:29:f3:5a:5e:17:07:0b:5b:72:7f:90:b4:ff:87:f8:84:fb:
         ad:00:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:46:36 2026 by rpki-client