Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
File:                     NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json)
Hash identifier:          IBYZfFfVg4hmrU51N3ObJz5zFCuXQ2un4VqBqC0NHeg=
Subject key identifier:   E8:97:BA:67:63:C8:91:88:07:59:EA:05:A0:56:73:18:3C:D6:70:2D
Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B
Certificate issuer:       /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
Manifest number:          012E
Signing time:             Sat 03 Oct 2026 06:20:24 +0000
Manifest this update:     Sat 03 Oct 2026 06:20:23 +0000
Manifest next update:     Sat 10 Oct 2026 06:20:23 +0000
Files and hashes:         1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: z88SEcpzTwQuRcW5YCJ3eyEAUnjTHGNlBSs5djwLABk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl
                          rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
        Validity
            Not Before: Oct  3 06:20:23 2026 GMT
            Not After : Oct 10 06:20:23 2026 GMT
        Subject: CN=6ac09ea8-bb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:13:1b:ba:ed:aa:ca:c1:ab:43:ed:de:b9:
                    6d:be:d3:d0:bc:68:4e:3c:de:34:f1:67:71:1a:46:
                    22:45:39:dc:5b:7f:7d:d0:25:6a:e3:87:7c:1d:17:
                    54:3e:53:ac:9c:d8:f4:26:7f:b2:f5:ff:f4:59:4b:
                    95:a9:53:5b:28:1c:91:8d:e7:72:c4:bf:88:45:3d:
                    0e:14:c8:88:ff:48:f1:41:3a:d3:28:5b:e9:df:47:
                    7e:ba:15:84:d8:62:48:b1:36:bb:ed:c9:21:ca:0e:
                    80:3d:c7:27:37:65:0a:c7:69:6f:d0:3e:a6:a2:e3:
                    5e:52:e1:ac:9e:d7:bd:ab:49:8b:90:b3:71:d1:cd:
                    cf:89:2f:f5:ba:23:04:24:7d:3a:c5:a1:b1:ad:fb:
                    b5:38:b9:6d:33:81:be:f3:de:e3:aa:f3:cd:c8:ca:
                    b2:81:54:98:c0:70:dc:af:ae:a7:7f:21:eb:f7:17:
                    87:26:29:1b:71:49:df:c9:b2:dc:23:2b:5e:ee:17:
                    1a:68:09:33:85:ec:87:a7:dc:b1:f0:b1:09:2e:73:
                    ca:f2:77:c3:38:e8:2f:32:57:fb:6a:51:18:d5:70:
                    cd:d6:e7:b4:79:6e:fb:2f:ab:70:09:14:35:c7:7c:
                    9c:98:64:ce:4f:c7:ac:22:12:ac:7c:99:42:c2:bd:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:BA:67:63:C8:91:88:07:59:EA:05:A0:56:73:18:3C:D6:70:2D
            X509v3 Authority Key Identifier:
                keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:aa:7d:80:6c:2a:44:cc:81:88:80:2d:e4:ce:94:53:41:
         66:a2:4d:83:77:be:44:af:32:8a:db:7e:d8:0d:f2:92:0b:c2:
         38:79:c2:96:12:1c:87:da:02:01:6f:60:9e:83:ee:b1:19:4d:
         f6:b2:dd:c5:a8:c4:2a:ee:25:22:c1:d1:89:8f:99:f6:03:12:
         c6:52:04:d9:12:41:0f:51:df:83:ba:5d:9d:33:6d:20:f0:aa:
         0b:b2:65:e0:33:34:56:93:64:a7:13:b8:9d:f8:a6:76:5e:58:
         a4:74:96:2a:8c:4b:a5:56:51:0d:04:44:6b:18:2c:9b:40:02:
         c8:17:b5:04:9e:b1:0a:54:1e:b8:55:4e:0d:ce:e1:c4:58:d6:
         e7:4d:c2:33:2d:0e:fa:62:49:96:86:d8:99:2b:03:a7:d4:d1:
         3d:3a:04:bb:0d:23:53:25:a5:4a:3c:da:22:6d:2b:f9:50:8b:
         17:98:9e:1c:a8:c3:e2:26:1d:94:13:61:d6:d1:66:a6:16:64:
         4e:3a:70:c2:47:24:7d:28:da:ee:f2:04:f7:67:f0:cd:ab:fa:
         73:1d:bd:a4:b7:c5:d6:c8:28:02:40:f6:81:37:67:13:f4:d8:
         e4:e4:3a:a3:c2:19:ea:b5:df:7d:29:77:d7:64:63:ad:07:42:
         ff:ee:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:50:16 2026 by rpki-client