Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
File:                     NakpRAWKu-k3TFV7sIThgTRARH8.mft (raw, json)
Hash identifier:          lCJmQ6+d5LLHYtVNqELYdnmBoYbqGozDoT3z3j5l9Z0=
Subject key identifier:   E9:CA:39:BC:30:76:4C:D3:8C:4E:BF:24:95:38:FD:4D:65:9A:7A:06
Authority key identifier: 35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F
Certificate issuer:       /CN=A91923E8/serialNumber=35A92944058ABBE9374C557BB084E1813440447F
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
Manifest number:          45
Signing time:             Sat 03 Oct 2026 09:10:46 +0000
Manifest this update:     Sat 03 Oct 2026 09:10:46 +0000
Manifest next update:     Sat 10 Oct 2026 09:10:46 +0000
Files and hashes:         1: NakpRAWKu-k3TFV7sIThgTRARH8.crl (hash: sO8qAst4DyKL3qwVgt6eX77T2Mt93pwowJaPHtxXAlE=)
                          2: 1257DEDE54F511F18BFCC077A2833773.roa (hash: DZsp3kp44FtbJD7jaWrhsQw5V2T437I/DrbmUoEFoeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.crl
                          rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E8, serialNumber=35A92944058ABBE9374C557BB084E1813440447F
        Validity
            Not Before: Oct  3 09:10:46 2026 GMT
            Not After : Oct 10 09:10:46 2026 GMT
        Subject: CN=6ac0c696-846a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:05:52:7a:0f:d4:e2:53:cd:d7:11:e7:df:
                    96:3a:7d:2e:fc:c0:55:17:fb:af:6e:32:21:e6:23:
                    42:24:17:16:f7:45:fa:c1:9b:db:d8:66:cd:e7:86:
                    7b:a1:ff:bd:33:5b:af:cc:0e:60:b7:33:60:32:77:
                    6a:f4:09:79:fb:98:2f:c6:a2:b8:ea:76:ed:2b:6f:
                    00:c9:a9:00:27:d5:45:a8:6b:3d:ff:50:d2:41:f6:
                    5d:e5:73:dc:a3:c0:27:a0:c3:fe:76:d4:93:c0:55:
                    ed:a4:22:5c:2b:66:52:10:50:31:91:cc:0f:e0:ef:
                    aa:39:42:1e:92:d2:5d:d0:0b:34:f9:a0:e7:b2:07:
                    75:1a:43:da:ac:47:8b:98:04:01:19:d1:ce:9c:bc:
                    a7:ba:4f:e2:64:bd:de:f4:71:28:ae:ab:07:54:31:
                    6b:b7:84:67:7a:fc:ea:71:02:64:45:37:52:08:ff:
                    87:7d:ec:2c:c6:98:81:0c:6b:e7:b2:18:af:f2:e4:
                    36:06:13:33:e8:66:13:fd:0c:89:db:9a:16:3b:da:
                    22:26:25:ef:7f:ce:29:83:ab:21:0b:0d:08:12:79:
                    8d:2a:06:34:05:fb:4a:57:17:62:a5:90:0e:2d:50:
                    09:40:99:dc:6b:05:71:3e:2d:ca:9f:99:28:3d:a1:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:39:BC:30:76:4C:D3:8C:4E:BF:24:95:38:FD:4D:65:9A:7A:06
            X509v3 Authority Key Identifier:
                keyid:35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:21:b4:2c:4e:b9:69:77:42:c0:b3:9b:c7:63:49:c2:a9:1f:
         8e:42:c1:85:01:0d:70:3a:7f:12:24:3d:45:9f:91:0a:a8:06:
         ab:0b:c4:1e:23:8e:6c:6b:a5:5f:d4:b0:9c:d5:dd:90:ab:59:
         6c:4a:1d:8b:88:ae:5b:64:24:18:db:e5:54:b2:00:87:7c:6c:
         92:d1:cf:0a:1b:3c:52:66:0c:9d:bf:a6:b2:b8:41:64:27:07:
         7a:28:d6:62:1c:f7:00:1d:c7:21:c1:7d:3c:1f:40:50:23:a0:
         65:0e:8a:11:58:02:56:90:e2:de:63:20:d9:47:ab:c5:c6:8f:
         e9:b5:03:ce:9e:9b:f0:5e:de:8e:20:7f:86:83:bb:c7:d4:dc:
         b8:5e:d8:d6:4e:da:91:e9:82:b9:96:b0:55:37:c0:00:30:9c:
         62:85:ce:27:cf:37:63:53:7a:bf:76:10:e6:43:a1:b6:c8:a7:
         a1:ea:17:1f:f6:06:30:3c:9c:39:a4:32:0b:a5:25:53:00:ec:
         11:8d:b7:a2:51:4d:17:7a:bc:d7:f2:43:d6:e9:2f:a3:c0:a8:
         30:75:a7:77:aa:5a:b6:c0:98:01:8b:71:89:55:72:90:f6:54:
         be:ca:98:05:62:bd:b8:76:8e:c5:a3:74:2f:17:eb:cc:ef:af:
         64:a2:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:56:24 2026 by rpki-client