Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File:                     NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier:          jr+hxVnED6DVX6MsUI+k8brD+avIBe7TNR+VVwlvpjo=
Subject key identifier:   E9:E7:63:A4:F0:6D:D5:8F:69:C1:DD:7D:AA:C9:1E:97:BF:5F:8E:F0
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer:       /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number:          84
Signing time:             Sun 04 Oct 2026 16:22:10 +0000
Manifest this update:     Sun 04 Oct 2026 16:22:10 +0000
Manifest next update:     Sun 11 Oct 2026 16:22:10 +0000
Files and hashes:         1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: 7W93aH+Vle0fe+fW9m4LGMfktKZw/Jfqv59jvtHs2gI=)
                          2: DBFD5AE29AC911F198A92D964911F970.roa (hash: w+n0GytCz1tL+nta12xN55dLplLzBUMuXjHXBaFBmg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
        Validity
            Not Before: Oct  4 16:22:10 2026 GMT
            Not After : Oct 11 16:22:10 2026 GMT
        Subject: CN=6ac27d32-c7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:c8:e3:e1:ac:df:d5:fe:79:c8:c2:ca:29:
                    8e:e7:0a:39:c7:a8:f2:6a:e6:8a:54:3e:2a:f2:f7:
                    d3:4e:36:d0:1e:4d:81:9b:14:21:07:9f:b5:d2:66:
                    57:d9:8f:81:e3:95:dd:0c:0b:98:e4:29:49:d7:0f:
                    42:e3:1f:b1:4e:13:34:38:94:aa:04:ef:f6:0b:70:
                    fb:16:fe:8e:33:5e:92:41:9a:ea:df:67:99:21:01:
                    4b:00:6c:66:ee:1b:27:32:32:22:3f:ea:47:bf:46:
                    c9:1a:ab:22:f3:b0:eb:d3:0d:f8:c3:eb:8d:5e:a3:
                    bf:11:c9:69:57:11:1f:3e:b4:a5:c8:16:55:6d:47:
                    a2:06:d6:ff:39:c7:fd:83:07:0a:39:b6:d9:59:e4:
                    8c:66:90:ce:4c:33:15:8c:96:cf:dc:fc:21:a1:0c:
                    c5:18:ee:29:21:9d:94:8d:bd:7b:27:5d:60:db:80:
                    08:27:13:ec:46:2b:27:8c:52:62:d9:f0:40:7e:8f:
                    b7:89:04:03:19:2c:87:f3:0c:0f:2b:93:2a:60:cd:
                    30:4d:f7:c1:22:9e:1c:3f:c5:d2:8e:3c:3d:ea:fa:
                    b6:3c:2f:a5:bf:5b:2f:d9:93:e4:53:c3:fc:ef:38:
                    fa:e9:e1:b2:3d:41:87:40:e8:bd:c0:e5:a0:3c:9f:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:63:A4:F0:6D:D5:8F:69:C1:DD:7D:AA:C9:1E:97:BF:5F:8E:F0
            X509v3 Authority Key Identifier:
                keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:bb:06:40:ab:55:00:e0:8a:b3:3c:84:e5:60:3d:d0:e2:
         97:31:3c:64:fe:40:b1:b0:6b:f1:04:bc:b7:52:0e:35:38:99:
         84:c2:f5:20:9e:b5:b7:79:24:d0:68:08:bb:e6:8c:87:fe:99:
         78:4e:f7:57:cd:01:5d:c2:94:54:57:3a:cb:dc:8c:b8:f6:2e:
         bc:ac:1c:01:5f:2e:d8:6c:57:53:3f:96:d7:8c:07:db:b7:40:
         09:53:4c:a4:1b:73:56:3f:df:10:f8:ce:f7:87:ec:6b:73:34:
         fb:5d:45:c7:f6:ab:65:f0:da:94:4a:11:2d:3e:9d:41:76:4f:
         30:96:c9:9b:b4:37:9a:ff:1d:8a:d5:75:0f:98:ce:9a:ff:14:
         da:d0:0f:17:d1:29:17:d8:a2:44:c6:8a:9d:20:c3:0b:d8:1f:
         1b:76:e4:ba:b9:51:06:d6:8a:68:35:7a:69:76:0c:39:b3:6d:
         bd:1b:ef:2f:94:45:39:75:7a:32:46:41:be:bd:63:da:9b:a2:
         7c:b7:39:9e:16:4c:92:4e:08:a5:21:ec:ed:1e:92:38:df:aa:
         25:25:45:95:9b:1e:28:04:1b:0a:b8:35:85:e5:19:78:25:7e:
         c0:cb:4a:3e:01:d1:b1:dd:49:a6:ec:59:e3:a4:b6:aa:94:3c:
         33:0c:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:13:47 2026 by rpki-client