Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File:                     npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier:          aHCKJCcee4kCthQ5r+NU37B5BiSFDERKBj2XeJloDpQ=
Subject key identifier:   FC:86:89:11:E4:95:0D:56:94:34:29:37:80:38:4A:4B:DF:23:07:A3
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       1663
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number:          1638
Signing time:             Sun 20 Sep 2026 16:40:09 +0000
Manifest this update:     Sun 20 Sep 2026 16:40:09 +0000
Manifest next update:     Sun 27 Sep 2026 16:40:09 +0000
Files and hashes:         1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: nvbNM+PN2hAhyPUwaewSg7JFwFDGGCg9XkcUn2IuxF8=)
                          2: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: f9TUDRfFjJQtgC8eJzlJhB1hYGwIccQ4M22mpUldh4A=)
                          3: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: CCfmB5nos7EF41BAAoxKCuLPSODNK5W/+bRi8fs1z+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5731 (0x1663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Sep 20 16:40:09 2026 GMT
            Not After : Sep 27 16:40:09 2026 GMT
        Subject: CN=6ab00c69-9202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:cf:21:2e:6b:8e:b7:6d:91:2a:f3:58:d7:
                    84:5d:ea:68:e1:bf:c5:e5:e0:ab:84:85:0c:25:41:
                    41:b5:a8:f8:b8:6f:0e:b5:f5:8e:56:3b:28:cf:1c:
                    63:cf:b1:ac:04:ad:84:7f:6e:87:2f:80:fb:96:f6:
                    fd:d1:60:e5:b3:df:ae:20:75:e0:ff:94:0c:89:6b:
                    cf:51:d9:24:c3:ed:4f:6d:d0:b5:e8:4d:8e:d2:85:
                    20:df:63:a5:ca:71:68:be:fa:d4:01:38:43:ad:59:
                    f4:1b:4a:1b:35:57:55:b4:ca:27:42:03:e0:9e:1b:
                    2a:82:23:0b:53:3e:2b:d1:06:33:5b:a8:c5:e0:d1:
                    6a:b3:56:32:d1:c2:69:08:2e:68:bc:ee:f5:a8:96:
                    6c:b8:61:ce:ca:c6:95:bb:08:00:9a:62:fe:dc:ec:
                    de:74:87:59:c6:0b:cb:96:e2:03:b3:e0:54:29:55:
                    27:27:ed:c4:38:81:88:2f:21:44:5d:a8:3e:a9:db:
                    6d:b2:5e:73:b2:e0:18:7e:f7:f2:66:3d:a7:a6:e0:
                    97:13:09:a2:d0:4e:38:8a:51:11:fe:26:c0:92:b2:
                    17:f6:52:b1:05:99:56:c0:51:29:57:52:a0:50:b6:
                    30:20:77:93:bf:73:6d:3e:85:fb:c2:92:5f:59:75:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:86:89:11:E4:95:0D:56:94:34:29:37:80:38:4A:4B:DF:23:07:A3
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:8c:e6:08:79:93:0d:cc:45:fd:f3:48:2d:f4:11:b0:d7:
         38:23:31:6c:b5:ad:2f:cd:b4:78:1b:c7:f6:aa:01:94:07:90:
         b6:49:5f:93:30:b0:1d:36:e1:cf:0a:ae:27:5c:c9:68:40:a5:
         6c:e8:ca:a4:00:5e:b2:74:50:58:0f:36:08:6f:b8:45:27:00:
         5e:1f:76:82:bb:13:6d:4b:44:65:01:40:97:ef:02:ed:ab:50:
         9b:19:a2:a4:ff:81:d1:5e:a4:ef:97:de:ac:41:d3:4c:c5:58:
         f9:d9:ae:f9:86:cb:88:fe:8c:f4:42:4f:a9:ed:8c:79:f3:cb:
         da:45:c4:42:a9:8b:68:0b:6a:9f:99:b7:8f:f6:96:9a:f4:a2:
         00:d5:c6:95:ea:93:9e:a4:31:ae:25:fe:97:8e:cc:f8:9e:01:
         1a:47:54:5c:d3:0e:c3:53:5d:21:6c:d1:86:cc:0b:04:f7:4f:
         67:85:45:0d:75:0b:db:02:47:7e:a7:96:0f:cb:e3:c6:b8:6d:
         a5:9c:0e:32:1e:97:50:9d:52:11:97:7b:84:34:f8:88:d1:89:
         48:59:4e:cb:ea:a9:5b:6f:52:49:f2:05:31:6a:81:8f:87:03:
         cd:0a:c6:0f:41:e6:52:6e:10:e2:22:e1:9c:f4:d8:f0:8f:72:
         26:8c:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:02:57 2026 by rpki-client