Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          gm44XMAURo11G4Bupx/rO4a3YdAY+wbJYa6iIEuE8X4=
Subject key identifier:   95:FF:86:AC:44:29:FE:4D:64:2E:19:AA:08:E4:11:E7:5E:74:B1:44
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       1522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          1517
Signing time:             Sun 04 Oct 2026 16:50:24 +0000
Manifest this update:     Sun 04 Oct 2026 16:50:23 +0000
Manifest next update:     Sun 11 Oct 2026 16:50:23 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: QMfoHxGkBMRZHpCMHXp0h58gmIhVYmSYy9VYE+wvxzI=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: W6FOTcn74gf4+0BoMZOpH6DC5rviJxuaWu2OotOF9rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5410 (0x1522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Oct  4 16:50:23 2026 GMT
            Not After : Oct 11 16:50:23 2026 GMT
        Subject: CN=6ac283d0-03a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:04:7b:28:fa:de:8b:d3:84:77:2c:92:cf:
                    58:df:6e:e9:ee:d4:4c:28:3e:a5:46:64:13:a5:46:
                    0d:1c:78:d5:4d:80:5e:4e:b7:5a:c8:16:28:72:39:
                    8f:c2:80:f7:6d:0c:05:5b:54:5a:13:9b:06:ae:d6:
                    7b:13:36:89:41:92:b0:cf:5a:05:01:7b:1c:bb:2b:
                    b9:9d:6d:82:28:70:dd:fe:cd:31:13:e3:36:08:d6:
                    ef:f1:22:96:21:84:f7:f7:d6:a2:bf:37:17:a4:53:
                    06:c5:88:7e:f4:f3:d2:89:da:85:36:66:a2:7c:25:
                    bf:da:b1:21:93:46:67:6a:c8:ff:13:1c:a5:43:a0:
                    f3:0d:99:96:f8:7a:55:5f:d3:a9:be:b3:2e:0d:ea:
                    64:58:e5:72:df:80:36:b0:88:cc:1b:e4:51:98:33:
                    51:ad:25:83:73:7d:6a:cf:f2:eb:bf:de:04:d8:20:
                    cc:ed:17:76:f3:f5:59:d6:05:d1:61:dc:5f:e6:7a:
                    75:35:a5:b7:89:7f:04:54:44:2e:00:e2:5c:ae:04:
                    f7:31:4a:f8:4b:eb:3a:a5:aa:67:d0:63:3d:60:b4:
                    d2:c7:ec:a6:4d:e1:2a:84:4e:75:f4:f9:d0:fc:31:
                    01:7b:3b:2f:e8:13:bf:fe:f5:73:8c:c3:d8:e9:ea:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:86:AC:44:29:FE:4D:64:2E:19:AA:08:E4:11:E7:5E:74:B1:44
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:82:ae:53:31:d0:cf:36:bc:14:d4:11:93:cd:5f:81:b9:12:
         ff:5c:9f:53:58:2c:b1:af:dd:5c:14:ac:2e:39:cc:ae:a1:96:
         31:02:e7:92:0f:22:b6:ec:73:0d:7c:3b:7b:57:ba:3c:7f:00:
         fd:23:ef:05:66:7b:26:01:80:e2:c7:b3:2a:51:b1:be:3e:ee:
         79:bc:84:e7:05:c6:40:d8:39:c6:52:7b:ff:72:5b:b0:43:3e:
         15:d1:46:dd:d9:73:84:0a:19:2b:90:7c:6f:58:35:51:82:0f:
         b6:74:01:8f:10:f1:77:7f:23:e7:92:16:c4:10:de:1e:19:46:
         e7:ec:71:8d:d3:0c:7f:10:93:fa:c3:89:88:38:2a:17:2d:3b:
         5e:54:dd:f2:d7:d4:73:45:56:af:68:ce:03:b5:15:c7:b7:11:
         c5:70:7f:58:bf:d1:cc:f3:20:5e:ee:0d:f9:af:56:3e:7c:d1:
         10:2d:1d:c5:c9:14:f1:d6:8d:00:be:f6:b2:c9:92:85:5d:08:
         58:59:52:12:ab:72:f0:e7:4c:dd:ef:74:7a:dc:20:d7:eb:f4:
         4c:0e:b3:44:25:ad:ef:a9:2c:d0:d2:ef:08:13:2d:0d:e9:45:
         12:34:29:df:db:8c:52:6d:da:b2:c8:8d:6f:c0:08:3b:22:f6:
         52:29:c4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:14:25 2026 by rpki-client