Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File:                     NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier:          a/iP0wf+P66BG5dtFToEKXk/OqHJzfC9oiMfXvs8ock=
Subject key identifier:   FF:FB:BD:D1:85:7A:3E:F9:84:E8:57:4E:E9:BB:86:7D:9A:4B:4D:6F
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer:       /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number:          E1
Signing time:             Fri 25 Sep 2026 06:38:50 +0000
Manifest this update:     Fri 25 Sep 2026 06:38:50 +0000
Manifest next update:     Fri 02 Oct 2026 06:38:50 +0000
Files and hashes:         1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: PL548467GmKs8+F5SeIIK6sFZ+BiJMx2icHJuTpHEs4=)
                          2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: kENDVh6RH1qeZlCkf0uhEn8QDOreUtcC3M+ErBdzcRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
                          rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
        Validity
            Not Before: Sep 25 06:38:50 2026 GMT
            Not After : Oct  2 06:38:50 2026 GMT
        Subject: CN=6ab616fa-b741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:2e:56:d7:15:4b:df:6e:7a:e9:73:b0:46:
                    af:4d:c9:1e:b1:2b:45:01:91:c8:59:f4:7b:61:e9:
                    df:d3:f6:6b:11:51:82:49:cc:93:57:2d:59:d9:a8:
                    aa:71:59:ee:f5:13:aa:c2:11:37:a1:61:3b:53:aa:
                    c1:df:a2:dd:0d:a2:06:4e:de:a8:52:8e:02:c1:d0:
                    f7:84:c9:86:7f:a0:de:83:a4:c9:5a:4e:bd:89:26:
                    d3:60:21:e5:41:d4:c4:68:bd:74:de:cd:4f:1b:00:
                    3d:8a:ed:cb:2f:a3:4a:df:c7:f6:fd:33:8e:7d:24:
                    18:49:26:97:c0:ba:31:29:c6:a7:b9:86:36:f9:92:
                    42:95:47:36:f1:36:ab:3b:94:93:a2:90:85:16:66:
                    30:48:bc:4c:d8:cb:8b:56:2e:db:bc:58:94:f5:55:
                    c1:90:09:b7:e4:a9:9e:ba:e6:aa:46:c8:82:34:6e:
                    b5:db:a1:15:00:05:29:79:ee:00:05:d6:f5:37:f7:
                    46:c4:4f:4f:86:e6:42:22:da:4d:35:8b:44:0f:ba:
                    eb:81:5e:ea:ad:f8:71:0c:88:f7:58:2a:2a:3e:c4:
                    7f:ee:e1:ba:68:ea:1c:98:60:e2:8a:ec:52:24:aa:
                    fb:5a:e9:d5:5c:26:f1:44:31:a0:77:ad:7c:45:a2:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FB:BD:D1:85:7A:3E:F9:84:E8:57:4E:E9:BB:86:7D:9A:4B:4D:6F
            X509v3 Authority Key Identifier:
                keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:a7:f2:7b:50:4e:f6:a1:13:9f:21:39:74:db:d7:92:31:
         6f:40:33:ea:15:36:e8:e6:60:0f:b1:ba:e4:f1:c5:c6:cb:cb:
         e0:49:e0:2d:55:cd:08:94:df:24:07:ac:ab:8d:ea:85:2e:9b:
         11:bd:cf:75:45:05:38:9b:b8:3c:8d:1d:d0:f9:5f:41:cc:c3:
         ae:5d:a4:78:af:1d:90:b2:c4:de:40:e6:2e:09:1b:29:00:94:
         50:fd:0a:97:ab:6f:0e:89:48:36:8c:72:2c:ad:3c:6e:13:4a:
         65:13:16:03:be:18:2b:e3:0b:4d:5b:dd:1b:bd:2b:82:3f:f9:
         73:f9:01:11:0a:de:bb:2b:3d:24:7c:58:4b:e3:e2:f8:19:0b:
         1e:73:47:04:a9:81:f2:0e:99:ea:6a:94:b1:07:6a:3b:9a:0a:
         ce:62:88:23:79:60:bf:0c:ae:29:9f:7d:a3:f3:dc:31:8c:a7:
         88:6e:36:84:41:5f:c1:75:0d:c1:bd:09:d2:cd:e2:6a:0c:0a:
         5c:70:53:d7:c4:74:4e:6b:ad:9c:16:e3:06:97:29:a6:75:9f:
         45:c2:88:65:c3:3e:0e:00:06:6a:94:07:04:77:5d:f9:14:40:
         d5:8b:7b:89:60:4f:32:43:27:e4:ea:cb:7f:31:a1:47:6b:c2:
         da:b4:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:59:03 2026 by rpki-client