Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File:                     NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier:          IunWHhou8nj1Oj2W8AfFEj6Xr4UIImEL8GX25Uu7hfg=
Subject key identifier:   E0:23:89:4B:96:AB:FF:28:A2:80:14:BC:00:CC:DC:6B:F9:34:D2:7A
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer:       /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number:          015F
Signing time:             Tue 13 Oct 2026 05:43:49 +0000
Manifest this update:     Tue 13 Oct 2026 05:43:48 +0000
Manifest next update:     Tue 20 Oct 2026 05:43:48 +0000
Files and hashes:         1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: l6C4+C0HiSCaQbfBQo+VjVw9HpkxcH+mlRXtVphaXSM=)
                          2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
                          rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 05:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
        Validity
            Not Before: Oct 13 05:43:48 2026 GMT
            Not After : Oct 20 05:43:48 2026 GMT
        Subject: CN=6acdc515-182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:44:4f:d9:d6:65:ec:83:01:79:d0:c3:9b:
                    cf:f5:09:b9:d4:61:f0:5c:78:c7:ff:6d:eb:cd:5f:
                    ea:e8:55:17:85:a5:23:4c:3b:79:b8:88:b1:f7:0e:
                    93:e8:21:2d:81:1c:0e:00:0b:84:af:07:d4:eb:98:
                    9e:3d:47:f1:ad:7d:d0:ff:30:3a:98:01:26:6c:6e:
                    50:c2:31:f0:e4:d6:ca:30:16:23:54:8d:93:eb:ad:
                    29:14:84:9d:53:d5:6f:17:63:58:d7:57:01:de:0f:
                    6c:81:14:3b:7c:64:d0:38:13:91:c2:9a:9c:ee:81:
                    ff:91:02:7a:8c:54:73:0f:9f:2d:3f:8e:fa:00:90:
                    29:da:33:6f:6b:de:ad:d5:97:08:dd:b6:36:25:65:
                    a0:2c:8c:db:49:fc:a2:3b:11:ac:33:a8:ac:79:a3:
                    bc:2e:19:ad:ae:56:1a:f1:3a:af:7e:e5:6a:df:98:
                    8e:21:f3:65:fb:8b:b3:a1:a6:58:30:2b:fe:9c:26:
                    3a:5d:fc:52:dd:aa:33:66:3c:a8:b4:be:99:c4:24:
                    e2:61:4f:e9:b7:0b:e9:f2:59:c9:1b:7f:66:b2:1c:
                    7b:12:ed:a3:aa:d1:ca:f4:07:93:10:b2:4e:89:0a:
                    5b:ec:93:95:e2:8a:88:f4:57:a8:d6:62:a2:12:ed:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:89:4B:96:AB:FF:28:A2:80:14:BC:00:CC:DC:6B:F9:34:D2:7A
            X509v3 Authority Key Identifier:
                keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:56:6c:67:1f:3b:dd:e9:05:48:e1:b1:b6:7a:b5:c2:98:
         8b:bd:f0:76:a3:fe:20:73:96:26:e0:cc:51:75:3c:7a:76:ba:
         1e:d9:8b:db:4e:d0:c2:f7:f6:ca:6b:08:22:13:97:83:ba:88:
         34:d4:a9:fc:14:f7:24:b7:6c:4c:cd:0f:b1:17:14:f3:ea:8b:
         ef:20:87:bf:bd:ee:f5:52:b2:46:cb:c3:00:d1:cd:13:e5:b2:
         a9:2c:db:7b:b5:a2:76:d1:02:24:b6:57:47:e3:58:4b:64:c6:
         6b:97:97:f5:2d:77:32:fc:b4:c8:d9:e5:ef:9a:05:dc:ff:0c:
         9a:2a:fb:76:ab:b7:b8:34:d3:ba:63:2b:24:b2:06:32:0c:1f:
         53:19:bb:19:41:fb:c7:99:1a:45:6c:e0:8f:d0:a4:f3:27:94:
         7b:ca:88:e4:e1:8a:67:64:30:a4:56:4b:c8:45:6d:01:40:66:
         70:a5:80:c3:8e:5e:fd:15:4a:d5:55:93:f2:a0:c2:c5:7d:b2:
         02:d0:f8:0c:f4:0d:ac:e8:52:4f:7b:25:f3:3e:53:31:e4:b2:
         22:ef:5f:e3:ef:4f:a3:04:41:59:54:e6:a8:87:f3:d3:8e:e8:
         ad:12:cf:20:77:57:3b:72:7b:28:15:e8:d8:30:96:2f:c3:ce:
         90:d0:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:19:33 2026 by rpki-client