Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File:                     Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier:          HqZw3IGybigndXqWjSMws3MlXi5KC7Z3FkdFPuj+Ydc=
Subject key identifier:   55:DB:F6:99:01:59:0D:BE:FF:9C:EB:30:F0:B2:F0:2B:AE:9B:1B:BC
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer:       /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial:       2840
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number:          2840
Signing time:             Sat 10 Oct 2026 15:36:36 +0000
Manifest this update:     Sat 10 Oct 2026 15:36:35 +0000
Manifest next update:     Sat 17 Oct 2026 15:36:35 +0000
Files and hashes:         1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: tkfQaSh4Hdvt25XkDIt81mC3TQQU0ojCz3Vl65X6GZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10304 (0x2840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
        Validity
            Not Before: Oct 10 15:36:35 2026 GMT
            Not After : Oct 17 15:36:35 2026 GMT
        Subject: CN=6aca5b84-e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3c:7b:e7:9d:de:37:58:e8:cb:6a:3e:51:00:
                    c4:cc:a3:71:9c:73:be:ef:c5:44:f0:d6:f8:fe:e5:
                    b7:67:8f:d2:fa:17:77:d8:53:27:7f:12:66:79:29:
                    3f:65:03:3f:7b:d7:6d:93:7c:fd:4d:20:47:f4:2c:
                    97:15:df:d2:54:c5:0a:73:75:9b:a8:9c:9a:9c:66:
                    7b:11:84:4d:1b:2f:b4:ec:57:dd:92:00:2b:72:dc:
                    0d:ed:31:96:26:6b:87:77:88:ff:24:cd:7d:0b:9b:
                    a8:62:9e:4f:88:a8:13:09:8b:79:2f:b5:cb:f1:a2:
                    1d:25:40:5a:aa:7e:dc:96:23:15:9d:f1:ff:b8:14:
                    16:99:3d:0d:cd:8b:29:1f:c9:f8:ae:0b:b8:fd:9f:
                    6e:f0:4f:08:e0:81:bf:2f:10:ce:bd:b7:4e:91:31:
                    9e:76:46:65:58:0f:85:4e:f3:75:c6:bb:00:6e:15:
                    31:6e:7f:6e:8f:ba:8c:61:4d:09:a2:ce:ca:90:9c:
                    fd:e0:85:5d:79:ac:95:f9:5b:c4:9e:4a:b8:37:b3:
                    0b:f4:eb:36:7c:a6:88:58:dc:57:a4:82:67:3f:34:
                    46:c2:40:f7:e6:61:92:91:ee:43:60:7a:df:9a:57:
                    f5:45:ef:90:c1:a7:b1:70:80:f3:40:c7:6b:2d:ee:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:F6:99:01:59:0D:BE:FF:9C:EB:30:F0:B2:F0:2B:AE:9B:1B:BC
            X509v3 Authority Key Identifier:
                keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:a0:cf:da:ba:cb:3c:b5:fa:5c:d3:56:52:15:92:b4:41:c2:
         6f:de:e3:24:90:f3:ee:b2:42:e0:28:39:04:33:4a:6e:db:76:
         d8:47:57:ae:66:58:3e:e6:40:fb:ef:ea:8b:6e:65:61:81:71:
         c4:b4:68:73:41:36:25:66:37:9b:31:ef:b2:73:eb:61:79:a7:
         59:68:a1:0f:36:55:5b:38:0a:f3:3b:10:ba:3a:45:3f:d1:43:
         0c:74:50:c8:e1:c3:ce:5f:d8:66:e5:08:d4:44:fb:45:6c:9a:
         b9:9c:b6:8d:6c:6f:37:2a:af:50:49:76:b5:23:36:9f:39:95:
         ba:6e:78:c1:b5:13:32:91:50:c3:8e:82:09:15:49:34:44:c6:
         26:1a:a1:8b:c1:b9:07:61:6b:6e:2f:78:5d:30:7e:c6:ca:b5:
         86:c2:13:12:45:69:db:1b:ef:6f:a4:f0:33:e6:f6:90:9e:b6:
         51:2f:2b:4d:7b:86:66:a6:f9:4f:2d:ca:23:cd:ba:a6:64:04:
         3c:e4:a7:af:c3:66:70:7c:09:eb:df:51:c8:32:e0:6e:85:5e:
         a0:c7:f8:3f:b1:6e:cb:f8:81:49:7f:b6:8f:f8:3d:e7:0f:94:
         df:fb:eb:f5:b8:2f:16:8f:a3:19:a2:e1:fb:94:cf:e1:19:58:
         1f:4d:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:06:15 2026 by rpki-client