Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File:                     ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier:          rw8J/7ZSImYnYQWx4sYpVrL0if5y2q5NKH25u4TtVvk=
Subject key identifier:   B7:10:AD:C7:08:36:08:A4:85:26:36:65:CD:C5:D8:4F:BC:A8:E2:89
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer:       /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number:          0280
Signing time:             Sat 19 Sep 2026 01:58:19 +0000
Manifest this update:     Sat 19 Sep 2026 01:58:19 +0000
Manifest next update:     Sat 26 Sep 2026 01:58:19 +0000
Files and hashes:         1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: 5e32qE/DG/3aj6WHAPAzgb3qI8j/FEpankQxT1GCLcc=)
                          2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
                          3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
                          rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
        Validity
            Not Before: Sep 19 01:58:19 2026 GMT
            Not After : Sep 26 01:58:19 2026 GMT
        Subject: CN=6aadec3b-7373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:a3:2a:4e:91:36:87:f2:6e:2b:2a:fe:18:
                    4f:2a:29:66:d9:14:3c:72:d0:7d:88:9b:fe:95:39:
                    46:1b:dd:e7:ca:1b:6b:17:8a:37:43:12:e4:e1:75:
                    e4:eb:3f:06:19:12:89:4f:bc:15:2a:72:c5:65:06:
                    59:cf:1e:15:07:ed:6f:f7:5a:78:2a:cf:4c:0c:58:
                    ec:ba:8c:81:9a:17:11:c7:94:31:e4:19:19:e7:f1:
                    25:da:3a:c0:38:6a:1b:d2:5f:25:d0:6b:f1:d4:3b:
                    57:b9:82:49:27:d5:53:84:76:75:2a:72:27:53:63:
                    e1:3f:ea:bc:bb:3e:a1:1c:e6:36:9c:47:6c:fd:03:
                    1e:b8:78:14:d7:ea:ba:c8:36:f8:54:37:29:5b:c4:
                    6d:74:3c:a1:17:16:33:d7:59:39:5d:b5:87:e2:63:
                    cd:5d:fc:b2:ff:53:2c:73:22:8d:86:43:01:a4:a7:
                    dd:95:9d:e2:f6:20:eb:50:ab:cd:bb:9d:5b:e2:21:
                    5b:fb:2d:e0:38:ba:f4:f0:98:23:6b:7f:59:52:4a:
                    1e:2f:52:3d:30:0e:0d:89:ff:be:29:f5:51:74:a3:
                    d8:71:69:dc:91:2f:38:9e:c4:8d:b8:d3:36:98:b4:
                    85:86:72:01:fb:e9:a8:85:55:f1:00:10:e2:70:57:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:AD:C7:08:36:08:A4:85:26:36:65:CD:C5:D8:4F:BC:A8:E2:89
            X509v3 Authority Key Identifier:
                keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:31:f7:82:55:33:9e:18:05:e3:36:b9:49:3d:cb:f2:bf:
         f4:99:e1:00:1c:48:8a:09:59:f6:10:86:f0:0f:0d:7b:0c:70:
         b3:b5:05:83:d4:bc:2c:53:b1:03:81:49:a5:fb:a6:0c:1e:03:
         f3:7a:a5:3b:a3:bf:9a:4d:9a:c4:a3:59:e5:46:49:7d:b2:a8:
         e9:63:96:0d:93:fc:30:8d:05:6f:4d:08:2e:07:6b:f1:40:59:
         5d:c9:73:8e:71:8b:ac:69:1d:7b:a8:9f:04:95:c1:ac:42:c7:
         dd:eb:4b:7c:76:56:2c:96:77:0a:74:d7:66:3f:e0:17:7b:8c:
         05:7c:9e:9f:0b:d0:a5:db:3c:52:e3:e5:8f:d9:a5:8f:3c:b5:
         11:e9:3a:2d:56:2f:ef:31:8d:58:78:9b:a7:f7:f7:20:db:55:
         4c:7f:f3:92:6c:d1:f4:84:a9:64:de:6c:fd:45:2d:e7:c9:ad:
         e0:f4:5a:98:d2:4a:0d:7e:98:6e:b2:c3:64:14:56:53:f5:fd:
         53:7a:9e:01:85:f1:65:3b:8c:3e:4d:69:c0:1f:9f:4b:06:42:
         2c:81:26:dd:5b:ac:50:61:c3:d2:49:d2:b7:a8:0a:f5:2e:ba:
         e3:1a:06:27:60:4e:82:5a:bc:d3:5d:21:70:3e:3f:ca:e3:b5:
         25:a2:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:12:26 2026 by rpki-client