Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File:                     nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier:          1F9EkJP36NnBP7B6koBJmN48OXxQjxn8Y/WLz7LYnB8=
Subject key identifier:   52:C6:C4:74:33:48:4E:DB:0D:17:7F:9B:6E:8D:C9:2B:27:4C:B3:5E
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer:       /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number:          0113
Signing time:             Sat 19 Sep 2026 06:04:01 +0000
Manifest this update:     Sat 19 Sep 2026 06:04:01 +0000
Manifest next update:     Sat 26 Sep 2026 06:04:01 +0000
Files and hashes:         1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: WlOODzT8ci5S/q6vmf3nOk3IA4WLjKHNqQ2IgT7nCu4=)
                          2: AF75682A101911F09363D44DC4F9AE02.roa (hash: Yc/a5kzN1S+i861++mE7mShXzSmH/he0caVJdxP2DHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Validity
            Not Before: Sep 19 06:04:01 2026 GMT
            Not After : Sep 26 06:04:01 2026 GMT
        Subject: CN=6aae25d1-05f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:f1:54:bc:78:6f:0e:f9:e6:aa:e2:3f:d4:
                    66:76:1f:9c:80:5b:b5:76:e0:2f:c0:f6:1e:47:bb:
                    ec:8c:d5:24:5d:df:1e:dc:f3:4c:16:93:08:2b:46:
                    b3:8f:d7:6a:59:39:6b:52:ee:01:ee:ff:2a:ec:3e:
                    35:79:3d:03:64:c8:a1:fd:a0:e3:4e:b3:1f:09:9d:
                    53:b1:c9:8c:6a:23:03:32:e5:fe:a8:3c:32:f0:df:
                    f4:b2:05:be:c6:b7:d2:58:90:d3:f2:b0:2f:09:77:
                    84:5a:cc:90:f7:21:e2:ed:ca:cd:21:51:e9:e5:0c:
                    d3:55:e7:0f:ae:12:b7:64:8f:1f:98:c1:05:1a:ba:
                    1c:14:3c:54:b3:9f:0b:c9:d2:8e:2e:74:9c:23:4a:
                    06:58:4c:75:4d:54:6a:cf:ab:ce:00:ee:a9:4e:d0:
                    a0:1a:a9:8f:09:ae:da:37:00:6b:e7:30:96:13:30:
                    3b:f6:fc:c6:9c:f6:4a:ab:b9:8e:d0:81:fa:43:05:
                    65:b3:f1:bc:83:5c:49:b5:97:61:7b:ae:b6:07:ce:
                    36:09:cd:1e:16:fa:b3:3e:b0:69:e5:92:1c:3f:db:
                    a9:fe:40:57:09:27:2c:e3:95:66:5f:38:9e:2d:62:
                    e7:3f:46:f0:75:43:12:d1:f4:c6:40:9e:8f:9d:8c:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C6:C4:74:33:48:4E:DB:0D:17:7F:9B:6E:8D:C9:2B:27:4C:B3:5E
            X509v3 Authority Key Identifier:
                keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:27:8b:27:03:d8:66:7c:73:d7:7b:55:97:d4:0a:dd:52:
         86:72:de:fd:5c:66:16:da:a7:bb:68:95:2b:3f:ee:50:5a:4b:
         da:a7:a1:63:5e:40:0a:69:4c:43:a3:ad:85:23:20:54:35:95:
         25:26:3c:2e:54:64:71:b0:82:5b:49:fa:85:64:14:a1:59:73:
         02:af:75:ed:b1:ac:d5:94:2f:1f:72:68:b0:61:b3:d4:43:87:
         3b:ff:b9:fa:c3:f5:88:af:dd:0b:b5:55:c6:0a:4c:3e:c2:e3:
         22:c2:f5:d2:56:6c:3d:8c:b2:79:24:ec:fd:2a:b4:50:33:27:
         b5:78:19:78:22:a1:41:34:04:f7:7f:d1:d4:6c:19:f8:15:a8:
         93:24:ef:13:db:93:b4:72:53:32:a9:8b:97:21:f3:a0:8f:66:
         b0:56:8c:a9:1e:b6:a5:04:7b:18:de:ee:50:ef:84:18:c8:8b:
         7a:21:90:a0:12:e7:86:9e:66:4b:ed:d3:28:96:94:8d:0b:d3:
         16:30:16:08:02:b7:e9:25:50:93:29:a1:8a:ff:5f:c3:80:2e:
         83:4f:e5:1d:2e:f6:5a:c8:36:12:19:22:49:a0:58:f0:40:ac:
         3e:1d:8e:bd:b1:00:a3:b6:fb:8e:b0:9b:20:ae:7e:df:99:47:
         8e:52:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:10:05 2026 by rpki-client