Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
File:                     nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json)
Hash identifier:          XE5iWw6y3wtnkb2EEG2zsR5QNtdM1tz3g1TTZq2J9wc=
Subject key identifier:   A1:4D:9D:09:64:88:05:F1:E9:E8:4E:75:9A:E1:96:41:AE:C9:82:E2
Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43
Certificate issuer:       /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
Certificate serial:       0493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
Manifest number:          048B
Signing time:             Sun 20 Sep 2026 23:48:50 +0000
Manifest this update:     Sun 20 Sep 2026 23:48:49 +0000
Manifest next update:     Sun 27 Sep 2026 23:48:49 +0000
Files and hashes:         1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: wS0XRrIiWHPd3Kv88hh+LdKCQY+9/nhe7O+2ubxrq/s=)
                          2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: vm/bISjHKsGuLd0meyNv8HwVVF1AvaGJUeldwZLSTSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl
                          rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
        Validity
            Not Before: Sep 20 23:48:49 2026 GMT
            Not After : Sep 27 23:48:49 2026 GMT
        Subject: CN=6ab070e2-d13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:4f:84:29:e7:45:3a:f1:69:5b:68:91:6c:
                    fe:65:cc:66:e9:c6:85:98:ab:b0:ff:cf:35:64:13:
                    8e:9f:31:ea:6a:8c:33:13:bb:db:bf:27:37:97:69:
                    df:06:a7:70:35:59:19:35:2f:78:aa:ca:71:ba:33:
                    be:f8:40:3d:db:f0:a6:ed:86:65:cd:c1:8b:6a:ed:
                    e6:7b:c3:16:1c:26:b7:cc:e0:13:52:ba:d3:d7:97:
                    71:f0:e4:ff:ee:8f:47:2c:82:bd:f6:28:14:ad:0b:
                    53:42:2d:99:bf:3c:71:9d:b7:f1:9b:9f:4a:c4:2e:
                    b0:43:98:03:2c:2e:66:74:c2:c8:2c:06:4f:60:06:
                    9f:41:9f:d4:46:8d:41:7b:e9:3c:6b:02:20:3f:ca:
                    d9:04:8d:db:1e:3c:4f:d7:dd:86:b1:c4:1e:55:f6:
                    18:48:ba:5c:08:91:97:ea:0d:c7:33:6e:f2:2f:7a:
                    3e:50:61:1f:86:de:74:1d:ea:7f:e8:3c:6a:89:ec:
                    33:ff:28:3e:89:5d:7f:57:a4:d6:b8:05:e5:a2:de:
                    b4:a4:30:9c:33:70:e7:19:a7:af:26:07:60:3e:e0:
                    09:96:29:06:e6:a8:f4:01:13:21:f4:56:26:a3:36:
                    e0:08:e5:76:5e:b5:42:1a:2f:4f:9d:9a:60:ca:15:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4D:9D:09:64:88:05:F1:E9:E8:4E:75:9A:E1:96:41:AE:C9:82:E2
            X509v3 Authority Key Identifier:
                keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:92:34:43:ae:fc:21:a2:c1:f0:b0:f4:07:50:6a:f5:85:
         f4:95:e5:1e:68:0f:13:d6:b7:0c:e5:4d:83:00:14:d5:41:82:
         80:06:ab:64:e8:13:d1:06:03:ff:2a:69:ea:6f:4e:2d:d0:d3:
         78:d5:93:8c:ef:d3:52:e9:a9:41:ba:4c:4f:b9:64:34:fb:f9:
         03:6a:29:89:89:12:7e:65:bd:45:6a:f5:14:d7:19:bb:d4:be:
         7d:42:5e:f3:29:28:5e:c6:b4:9d:a1:7e:69:70:ba:dc:b5:0d:
         ce:c9:4a:91:48:26:9f:fb:d1:2d:76:78:50:dd:73:c7:90:3a:
         30:d9:99:f0:ee:5d:b6:fa:ac:4a:09:27:7e:94:e3:a4:02:70:
         7b:14:46:f2:5f:cc:6b:7b:05:aa:47:f0:a8:73:be:9d:a5:32:
         8f:4a:28:f2:4a:6c:f3:66:68:0a:d5:8a:74:2b:49:52:fb:be:
         75:75:35:af:ec:15:e7:7e:88:ee:1d:26:fc:de:6a:3b:54:d6:
         15:d1:06:a5:5f:10:b1:31:fd:ef:82:b8:56:19:2d:4c:2e:34:
         1f:c8:e0:34:3b:52:36:cb:9f:7c:78:df:8f:40:a0:1e:1b:c6:
         bf:c0:b2:e0:0b:7f:13:14:79:d1:28:30:12:1b:18:1b:0c:25:
         12:59:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:11:47 2026 by rpki-client