Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File:                     nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier:          Qhlk5O760RmJ0QuIz8fExki5XypBWO6BlTCerUaZlfM=
Subject key identifier:   1E:79:14:DA:07:E2:54:93:4D:7C:A5:55:69:28:42:FF:76:40:DF:BF
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       0659
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number:          0639
Signing time:             Tue 22 Sep 2026 22:25:20 +0000
Manifest this update:     Tue 22 Sep 2026 22:25:19 +0000
Manifest next update:     Tue 29 Sep 2026 22:25:19 +0000
Files and hashes:         1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: YL7v4G6+0B/+/TS00XDLsjy1CuEwdoeajX+iDLnoYow=)
                          2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: 0gpxn+LFfnOKpxuOSksfeYmDkEyohwtADQR3Mk8Jkrg=)
                          3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: ygP33q0RkY5m431TK8mMBj98/E5fJw5QVCf5+wBvW5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Sep 22 22:25:19 2026 GMT
            Not After : Sep 29 22:25:19 2026 GMT
        Subject: CN=6ab3004f-4e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:60:b9:00:40:0c:94:29:ad:6a:99:7b:53:
                    3d:e1:9e:81:f0:55:23:2b:79:5c:c5:6d:32:f8:a9:
                    90:ad:d7:6d:51:34:db:e1:a9:80:bd:60:7c:85:26:
                    14:0f:10:5c:5b:c8:67:9e:fe:a7:86:7c:22:94:33:
                    11:e9:fd:36:5e:9e:35:e9:bd:7e:04:40:b4:75:ca:
                    b5:97:88:ab:43:0f:91:ce:35:a6:19:ab:47:0d:b8:
                    1b:f4:5a:18:a5:d3:39:01:05:b1:70:ef:f0:e8:16:
                    a7:d7:ef:d9:54:90:29:32:91:fa:d2:c8:a2:81:84:
                    08:8d:ed:1a:ca:73:fc:95:a4:b2:92:a4:3a:9a:38:
                    1c:18:12:04:50:51:fc:ad:fa:41:07:e0:71:d5:9b:
                    78:f7:58:fe:fd:7e:1e:e8:07:44:11:e4:ba:7e:0b:
                    ab:11:6c:5b:54:51:ed:24:8d:ac:89:58:4f:7c:f1:
                    1a:c0:fb:01:ad:8d:35:df:74:de:dc:7c:11:23:28:
                    54:50:6f:3f:34:46:dd:2f:13:b4:61:71:a3:d0:e8:
                    f1:40:58:8d:b4:f5:48:3e:10:47:b5:25:77:55:41:
                    f1:36:5d:31:ea:ed:e3:d1:f8:69:e1:1a:39:69:66:
                    ee:c7:f7:d8:f6:70:7b:1f:44:97:81:c3:5f:4b:93:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:14:DA:07:E2:54:93:4D:7C:A5:55:69:28:42:FF:76:40:DF:BF
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:37:6b:92:47:43:7d:8a:a3:4f:fd:8d:87:ea:6d:3d:9d:72:
         fa:4e:e5:ea:55:9a:84:11:d6:a2:b5:a1:b0:9e:1e:bd:eb:d7:
         26:d6:7b:09:1b:2d:6c:6f:d6:1b:e0:4e:13:cc:6b:3a:fe:e0:
         2b:c8:be:70:77:52:f5:ec:b8:68:da:45:64:10:d3:7b:5a:9e:
         df:b4:a6:de:71:49:0d:38:15:f7:a9:53:3d:99:5d:58:ef:c2:
         bb:23:bc:21:ba:57:3f:95:d4:c7:61:67:0e:ff:79:91:47:8a:
         51:ee:ce:8a:0d:5a:2a:c9:ac:04:29:55:3d:d2:ef:ab:44:d5:
         16:26:64:0f:7d:2f:2f:60:17:00:54:d1:60:ea:23:6f:0b:82:
         67:98:89:64:f2:7d:13:bb:0c:c3:a3:f5:82:23:33:6e:52:7a:
         bd:ed:16:29:6c:30:c8:c4:fa:49:ff:f8:36:da:b5:48:12:99:
         c0:a9:6c:94:59:69:df:6c:49:7c:40:f1:84:7c:4e:e1:3a:cd:
         1d:9d:9a:0b:9f:57:ea:3a:84:e1:b3:8c:c4:da:be:6e:09:d0:
         8c:e1:80:7f:1a:3b:06:2e:68:6b:38:e2:d0:df:64:dd:3f:1c:
         43:88:e9:34:9e:50:de:38:f2:8c:71:23:ff:c4:b4:7d:16:34:
         6a:5c:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:02:55 2026 by rpki-client