Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File:                     Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier:          Xj4W3Yo96o2Ko6BAIuN023EKPmveHeQj770tGgjkN8M=
Subject key identifier:   5F:2B:CF:D2:79:B8:CB:65:B5:36:76:3F:1A:99:67:A9:27:B5:A8:3B
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer:       /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number:          013C
Signing time:             Fri 25 Sep 2026 05:37:43 +0000
Manifest this update:     Fri 25 Sep 2026 05:37:43 +0000
Manifest next update:     Fri 02 Oct 2026 05:37:43 +0000
Files and hashes:         1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: GHGv9FCZb/kyjbTccFyb+GFHGkMp6S355obUjnOw0jA=)
                          2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
        Validity
            Not Before: Sep 25 05:37:43 2026 GMT
            Not After : Oct  2 05:37:43 2026 GMT
        Subject: CN=6ab608a7-7c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:06:49:f1:cc:a9:2a:64:af:39:80:f1:7f:
                    6a:24:5b:bc:db:9c:ce:fe:a1:4d:13:e6:a4:73:ee:
                    05:58:75:c6:a1:d5:02:47:a6:bb:ac:83:e8:45:0b:
                    f3:ef:dd:a3:6c:b0:47:62:c9:b7:cc:d7:20:c1:99:
                    cb:f9:f1:23:dd:45:7a:1a:ef:5e:f4:fb:ec:ae:bf:
                    96:fa:73:42:d2:7d:6a:23:b7:60:ea:e5:6e:2f:58:
                    49:2c:92:44:a3:c4:f6:62:ec:f7:62:63:b1:09:eb:
                    6d:df:1f:ab:69:fe:15:32:3d:df:a5:07:22:56:25:
                    d2:8b:24:25:bc:95:c9:ac:97:d2:4b:5e:34:04:0b:
                    68:a0:1c:32:86:ff:bd:bc:33:44:0b:3e:83:d0:43:
                    42:4a:18:64:01:81:8a:09:2d:95:ca:d2:91:a3:72:
                    3a:fd:89:bc:77:37:8e:fb:28:25:73:1c:4f:6c:48:
                    75:a1:fd:a1:ff:ab:4c:c2:36:3d:f6:19:af:37:d6:
                    6f:5a:79:3c:a9:58:5a:dc:86:83:1b:51:99:25:62:
                    cf:8f:49:b3:77:d3:14:38:50:28:ff:09:89:cd:ca:
                    ed:56:d3:9b:1e:ee:16:05:e6:e3:be:b3:2e:02:fb:
                    01:15:3d:73:9b:f8:14:f2:4e:d5:05:d1:a2:64:f6:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:CF:D2:79:B8:CB:65:B5:36:76:3F:1A:99:67:A9:27:B5:A8:3B
            X509v3 Authority Key Identifier:
                keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:c2:96:10:18:be:b4:88:de:22:83:cd:6d:e9:fd:61:54:
         03:49:5b:77:99:b1:64:74:36:98:84:78:ec:01:a4:ea:e5:58:
         69:3a:5e:44:d1:47:76:8c:f3:09:bc:bd:1b:ac:5d:eb:fb:1e:
         6c:51:91:4a:ff:f9:2a:ba:b0:0b:39:7a:bb:fe:49:4b:37:8c:
         2f:eb:fe:a7:f6:60:0d:14:86:52:f7:44:95:5e:93:eb:6a:0c:
         8f:0b:18:26:98:df:35:20:0d:7e:5f:31:e1:d1:1b:3c:13:0d:
         61:86:0f:46:81:99:38:fb:6d:18:fc:9d:46:72:ff:9a:7e:2f:
         76:32:fd:5b:59:48:25:39:18:90:71:6e:4d:38:a7:0e:b6:5f:
         33:0f:3a:a1:58:31:59:fe:d7:52:54:2d:10:31:18:61:d4:00:
         8c:d8:fa:26:54:73:b2:8f:4d:9d:75:e5:aa:54:d9:8d:2c:4a:
         c0:55:c0:0b:b9:d6:91:ba:4c:c0:d4:90:bf:62:21:4a:4a:3c:
         d3:47:07:52:5f:35:9f:ea:b4:c4:95:27:b8:11:96:ea:ac:80:
         f0:f6:76:4c:c2:9a:53:1f:de:07:6a:d5:07:88:4b:ef:1f:30:
         34:d2:5c:29:cd:7b:04:cc:33:41:df:7d:6b:65:bf:bf:be:ab:
         4e:91:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:52:53 2026 by rpki-client