Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File:                     nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier:          Wx+tGOhNhizEAtt/arTwVMdR/LonGkJArl6ZnbheUug=
Subject key identifier:   06:F6:A0:A0:52:2C:F3:71:C8:D4:83:29:2B:73:78:E1:2B:0C:AE:FA
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer:       /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number:          014F
Signing time:             Sun 11 Oct 2026 05:58:38 +0000
Manifest this update:     Sun 11 Oct 2026 05:58:38 +0000
Manifest next update:     Sun 18 Oct 2026 05:58:38 +0000
Files and hashes:         1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: YzQobJeNyW4FhFZXR/MZpbCed9tgqUMrR9XsE63JwhU=)
                          2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: QATPpzGS/ZP7kNOUm90TMsTc1uCxiE2w36dBLpw4fDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
                          rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 05:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
        Validity
            Not Before: Oct 11 05:58:38 2026 GMT
            Not After : Oct 18 05:58:38 2026 GMT
        Subject: CN=6acb258e-b769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:af:75:f4:b9:39:43:69:83:44:7b:fe:62:
                    f0:9c:77:89:27:53:8f:d3:7a:36:61:93:63:41:f2:
                    ee:28:34:f3:33:52:39:05:d8:45:46:8b:7a:3b:eb:
                    4e:ef:39:01:03:02:f4:18:8a:9d:f6:a9:2c:be:f6:
                    20:b2:ad:14:a7:9d:30:27:8b:b6:c0:d6:58:4a:48:
                    5b:33:0a:15:89:e2:e0:3c:25:1b:a9:ea:d5:14:c8:
                    4a:c3:5c:28:b9:a4:3d:b1:ec:2e:76:c6:fd:a3:30:
                    28:14:df:7e:dd:79:a9:93:98:6b:eb:66:65:13:7c:
                    e4:3a:38:ed:db:33:1a:09:65:0e:17:e9:63:ef:69:
                    05:98:e0:36:1a:44:09:27:62:47:0e:ca:24:00:79:
                    5e:f9:7e:30:ed:1d:4d:6d:86:96:a2:d3:eb:b3:3f:
                    d2:03:9f:59:36:02:ef:10:0b:8a:89:50:8f:2e:0b:
                    37:63:a6:86:c6:a9:af:18:8f:05:f1:7c:5f:6b:6c:
                    92:f4:7b:7c:f7:5c:36:5f:29:94:a5:22:82:c7:87:
                    1c:d4:c5:80:69:86:dc:3d:7c:94:9b:82:cc:43:79:
                    96:f4:82:39:c2:f1:03:d6:0e:39:d0:13:7f:dc:76:
                    41:45:0a:0f:25:cc:d9:f1:cd:7e:e6:a9:1b:26:1b:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:A0:A0:52:2C:F3:71:C8:D4:83:29:2B:73:78:E1:2B:0C:AE:FA
            X509v3 Authority Key Identifier:
                keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:f3:4e:50:13:67:05:89:1d:ad:7b:b7:98:a6:69:fb:ea:
         bd:47:97:37:6d:47:7e:37:1d:a7:ec:6c:6b:f8:2e:4a:41:9c:
         82:17:e7:07:84:bd:bb:1c:f6:af:73:a4:f3:e5:97:ea:c3:d7:
         4c:37:1b:97:44:7f:05:5b:cf:56:bf:bf:40:db:d4:88:56:b7:
         ff:6f:73:5c:51:ed:53:ae:f0:0b:2e:38:b5:40:32:61:1c:c5:
         45:71:bf:dc:1b:26:1e:65:10:76:ce:92:3c:ff:30:9e:cf:0a:
         bb:37:21:da:47:ab:cc:56:7f:89:58:70:4a:ae:1c:83:74:21:
         8d:66:d8:6c:ba:ed:20:e6:ea:19:4e:bf:a8:26:f7:74:07:f3:
         04:d8:38:53:ea:75:fa:a7:eb:15:e9:7b:66:de:fc:68:41:b7:
         76:3d:76:d8:0a:ba:ec:82:c7:60:7d:4b:23:14:40:46:5b:a2:
         54:13:25:60:0e:c7:92:78:84:b9:1a:ca:93:9a:ed:4a:80:77:
         48:be:55:30:bf:4e:87:ce:8d:dc:74:1e:c0:8b:f0:8e:9d:4d:
         51:fa:c7:90:a0:1e:70:b6:10:02:56:9c:3b:14:46:09:f6:8c:
         cf:f8:c5:d9:57:ee:76:f9:a4:de:be:07:01:d8:7f:f0:9f:66:
         07:b1:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:28:41 2026 by rpki-client