Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File:                     NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier:          ahz9wnXXktSA5R1SV43byj63GMAevk3s254QaEI/bLc=
Subject key identifier:   DF:14:56:CA:A1:77:BC:FA:75:11:D4:9A:E4:BD:EB:C4:2E:D1:67:4C
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer:       /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number:          95
Signing time:             Sun 27 Sep 2026 08:03:19 +0000
Manifest this update:     Sun 27 Sep 2026 08:03:18 +0000
Manifest next update:     Sun 04 Oct 2026 08:03:18 +0000
Files and hashes:         1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: bl5ZmC1EEcTzaGpkzwIJ1y70bW6ixxkJe6Xl6WuX48c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
                          rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
        Validity
            Not Before: Sep 27 08:03:18 2026 GMT
            Not After : Oct  4 08:03:18 2026 GMT
        Subject: CN=6ab8cdc7-b1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:44:33:b5:67:ac:86:6b:de:ea:37:8e:bb:ab:
                    28:ad:a2:16:57:80:8a:1c:78:90:db:72:cf:20:be:
                    17:11:6c:be:4e:46:83:68:8c:c8:cb:86:b3:4d:8a:
                    00:e2:b8:53:c8:8c:1f:eb:49:81:5d:7c:e7:48:4a:
                    50:81:c5:82:54:38:e9:0b:e0:e0:24:a5:4d:aa:2f:
                    8d:60:01:79:6c:c7:88:22:dd:fd:a8:3a:22:aa:f7:
                    9e:34:4c:50:61:19:81:37:b5:c7:a1:5e:ec:39:06:
                    7c:fa:d7:58:c6:94:cd:b4:2b:67:4c:7c:44:63:9c:
                    a4:a8:cf:54:de:05:84:dd:42:66:0a:cf:4d:59:6e:
                    88:5a:67:62:cb:46:1e:72:f9:fc:4a:0a:ed:09:7d:
                    76:91:da:c0:19:e3:bc:a3:39:08:64:d4:4f:06:13:
                    5c:72:ef:b8:21:c7:1e:e3:6a:8f:e0:bb:34:f8:16:
                    38:7b:53:51:79:56:4e:ad:23:ce:b9:67:48:2a:ea:
                    31:8c:12:d1:e7:15:bf:8a:89:de:34:f2:62:d7:6d:
                    ef:dd:a6:c1:62:65:b3:b4:1d:06:fe:97:3c:70:35:
                    a6:c9:cf:bb:9f:07:d8:fd:b8:be:31:e5:06:b3:fa:
                    b3:a0:f2:69:d4:33:15:a7:e5:44:54:dc:06:6a:9c:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:14:56:CA:A1:77:BC:FA:75:11:D4:9A:E4:BD:EB:C4:2E:D1:67:4C
            X509v3 Authority Key Identifier:
                keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:2a:83:d4:20:94:19:4c:3d:9a:7d:9b:e6:8c:9e:41:ff:
         38:79:63:88:dc:d8:6b:c7:65:8e:cc:e9:0c:8c:4f:e3:f1:58:
         79:c0:cb:8d:e2:f8:e4:04:b6:4f:47:aa:2b:02:48:66:6a:83:
         21:4a:76:e6:5b:66:0b:98:88:05:e5:ac:74:fb:e5:ce:ab:5d:
         c8:ef:ac:9a:40:fd:98:4b:70:9c:90:56:d4:91:bc:c7:ce:06:
         fd:4f:35:20:45:49:b2:b4:46:0d:1b:08:41:bc:55:40:14:09:
         1f:40:2c:bf:70:13:88:6a:09:57:c3:c8:d3:14:e2:ba:bf:4e:
         9f:7b:d8:ef:93:c0:f5:fd:d3:16:74:52:1c:09:14:da:c4:7b:
         21:61:da:82:24:67:b8:2a:97:ed:bc:e7:13:2a:b4:f2:47:0b:
         e8:3a:4d:46:30:cb:33:93:98:da:a4:e9:cf:46:05:81:18:a1:
         ee:97:6e:be:04:a6:fd:20:97:fb:f2:bb:30:99:eb:e0:be:4c:
         3e:18:b1:f3:d7:bc:18:ba:3e:26:0c:b1:af:20:fb:27:99:cc:
         20:1c:f6:76:67:05:9b:32:d8:50:a1:4b:c6:ce:ac:cb:b1:ab:
         9d:b5:7f:8c:42:98:ef:7e:e9:ad:0d:d7:72:25:60:4d:d7:c5:
         9a:9d:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:12:57 2026 by rpki-client