Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
File:                     NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft (raw, json)
Hash identifier:          eHCDMbNCPqW8ehE2qaRNtnTWldISfg3qUyjgyGn2KnQ=
Subject key identifier:   29:EE:B3:45:3C:D4:D7:56:40:AF:EC:F4:23:99:74:39:6F:C2:8C:F5
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Certificate issuer:       /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
Manifest number:          026E
Signing time:             Sat 03 Oct 2026 02:42:14 +0000
Manifest this update:     Sat 03 Oct 2026 02:42:13 +0000
Manifest next update:     Sat 10 Oct 2026 02:42:13 +0000
Files and hashes:         1: NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl (hash: UXhpXxujRYWatk0Xw2egfJKJ5/zdKJUnCY7n/CT/Zpc=)
                          2: 7588035C913E11EFB46E9A72C4F9AE02.roa (hash: dL/U4UhMZabXz3OJx25MIDSywgaSKV+Fyuq3FcC4oxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
                          rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327
        Validity
            Not Before: Oct  3 02:42:13 2026 GMT
            Not After : Oct 10 02:42:13 2026 GMT
        Subject: CN=6ac06b86-68ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:01:ca:e6:6d:69:f5:54:44:25:cb:49:61:06:
                    ff:4a:b0:9e:2c:e0:e1:fb:4f:79:a8:56:34:78:4d:
                    37:41:5c:fe:b0:3e:3a:a1:c4:b1:d2:c5:b3:8c:a4:
                    5c:06:93:0d:2a:a7:47:7e:cb:fe:8e:af:02:02:a3:
                    38:69:a1:3a:59:d8:34:bf:e7:37:fb:ac:ed:b2:76:
                    98:ef:b7:f8:f4:78:8f:7a:f4:09:2e:94:39:8e:83:
                    0f:20:f4:22:68:2e:92:76:0a:73:71:60:75:e5:a0:
                    c4:58:09:2c:d6:01:43:70:e3:a0:a0:2f:0c:8e:3c:
                    36:49:13:7a:5a:1e:1d:e9:19:a7:1f:d8:94:c9:df:
                    bc:3c:c7:26:d6:50:62:8b:bf:66:47:fc:fa:71:9f:
                    d0:47:4b:46:e9:dd:e7:b2:0e:da:2f:fa:b9:fd:c3:
                    a0:d9:22:8d:ec:87:ed:80:eb:f7:86:be:cc:40:89:
                    d3:77:53:bb:24:cf:f7:86:5b:63:bc:1c:89:cf:00:
                    5e:aa:04:e6:4c:0f:f2:4b:8f:cd:dd:7e:f5:7e:db:
                    16:dc:6e:99:33:17:fd:77:5c:22:fc:b4:96:05:48:
                    38:0c:13:16:56:48:8d:5c:47:be:39:fe:3b:e7:54:
                    5a:c1:e4:d7:ac:c8:b6:6e:ca:6f:04:64:14:d0:27:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:B3:45:3C:D4:D7:56:40:AF:EC:F4:23:99:74:39:6F:C2:8C:F5
            X509v3 Authority Key Identifier:
                keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:0f:f9:df:34:34:63:e3:20:37:06:54:14:58:27:3f:18:
         b4:c3:6e:36:ee:11:80:30:9a:6e:a0:c8:4f:91:a3:1b:d4:85:
         6c:24:bd:cb:7b:77:67:37:d2:93:a2:8b:4b:73:14:09:43:a4:
         f1:f8:f0:b5:24:af:be:04:8e:90:b4:1c:ef:57:f4:25:00:75:
         c4:a7:ac:af:c0:5c:0e:56:1f:33:de:de:8f:f2:2e:ed:f3:ec:
         b0:62:6e:e7:b5:2a:eb:d6:86:7b:56:15:d7:79:99:55:95:8f:
         be:7d:58:dd:82:11:97:8e:cf:cc:56:58:7e:f1:08:f1:89:90:
         c5:5c:d0:bd:ad:27:06:41:25:1d:2b:7a:25:78:53:33:20:49:
         05:d5:71:20:8a:a6:15:6e:7d:e7:79:75:12:54:5f:f1:88:4e:
         13:bf:56:96:a3:06:f2:bb:cd:96:74:4a:1e:19:dc:6d:e7:b3:
         aa:3d:bd:99:89:7c:b1:bf:cc:c8:42:5b:27:92:cb:79:d9:1b:
         7b:9a:29:f1:6a:4e:65:9a:ba:be:23:25:27:68:e6:dc:9f:b7:
         b2:20:da:45:00:67:68:34:2a:cd:d1:cd:4b:bd:b3:9f:52:77:
         85:89:50:ce:9a:24:d4:d2:27:c5:a0:18:b3:ff:06:cd:7d:89:
         d2:1a:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:55:39 2026 by rpki-client