Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
File:                     Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json)
Hash identifier:          993+5WW1Ku2RWGtE+HEwExMGoKSs2PcIJv/vW97boD4=
Subject key identifier:   61:C6:52:67:AE:8E:8F:1D:82:1C:BA:8D:57:E4:A1:B0:EA:F2:78:FC
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Certificate issuer:       /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial:       02E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
Manifest number:          02D9
Signing time:             Sun 11 Oct 2026 01:28:48 +0000
Manifest this update:     Sun 11 Oct 2026 01:28:47 +0000
Manifest next update:     Sun 18 Oct 2026 01:28:47 +0000
Files and hashes:         1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: SbhCZeF584GGLwmdkj8cvm1yBiLKaxnYZU4XB2AvgTU=)
                          2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: JhQP+mcUaNPHBqxU1e/1HhxGjSkQQVMKp70bq/iMgKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
                          rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
        Validity
            Not Before: Oct 11 01:28:47 2026 GMT
            Not After : Oct 18 01:28:47 2026 GMT
        Subject: CN=6acae650-57e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:1a:01:69:fc:e5:a8:29:fe:27:78:19:63:
                    fd:16:e7:e8:f9:4d:85:b2:59:d5:40:48:24:47:23:
                    fb:67:08:17:93:2a:9e:79:83:55:59:2d:c3:83:e3:
                    6d:8f:5d:e2:78:c9:6c:e1:84:17:1f:9f:dd:46:5c:
                    54:a5:2f:6a:cb:dc:13:20:fe:21:2a:4a:c0:28:8c:
                    1b:52:d2:4a:40:c3:f0:d5:dd:d3:43:f8:b4:93:c3:
                    4a:34:c5:c3:f8:82:0d:85:b3:9c:a9:40:96:af:e6:
                    1f:42:28:72:cc:fc:90:20:ea:58:87:dc:f4:33:28:
                    0a:26:99:48:0b:03:3f:d6:2a:fc:66:56:56:03:1f:
                    16:f7:54:fb:eb:7c:09:6c:39:ba:fc:db:e6:14:2d:
                    ee:1a:6f:11:86:5d:9b:a3:99:72:26:2b:87:22:d0:
                    df:dd:c0:df:a6:24:a4:3e:53:40:64:d0:1e:a3:b9:
                    04:ad:c5:12:8f:ee:8b:75:81:28:ec:32:e9:20:9d:
                    33:6d:06:7f:11:9c:57:99:26:7c:bc:34:f4:54:f7:
                    3c:ef:cb:5c:7f:dc:71:f7:f8:51:af:ab:d2:a0:96:
                    2a:c5:dc:b2:fb:31:55:3d:b1:a4:ff:90:13:9d:34:
                    12:8b:f9:16:89:07:ae:e1:e7:33:43:75:78:ca:c0:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:52:67:AE:8E:8F:1D:82:1C:BA:8D:57:E4:A1:B0:EA:F2:78:FC
            X509v3 Authority Key Identifier:
                keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:15:7f:ad:5a:90:43:76:02:bf:bc:dc:e9:a8:78:a8:16:
         c8:0d:c2:ca:b4:eb:a7:c2:c8:98:3d:eb:0f:72:8b:f8:d7:89:
         e6:29:27:fb:21:8e:68:e5:88:47:8c:47:cd:48:f5:08:56:1f:
         70:3d:1d:21:cb:d3:7b:31:1c:9a:4a:f5:6d:9c:1e:f7:1d:f9:
         0c:79:01:b8:28:63:fe:4e:d5:a3:b8:db:42:49:d5:a5:7b:0e:
         c8:c5:a3:a2:b7:13:dd:0f:04:87:c7:bc:be:a5:cf:48:6e:70:
         d4:a0:af:3b:32:23:6d:fa:47:e5:f3:83:35:32:02:a7:38:d9:
         14:19:c1:c9:c5:e7:73:09:86:b9:0d:8f:77:80:c2:26:45:69:
         72:19:b2:41:06:45:57:90:c3:e4:f5:79:20:d0:ce:51:67:5b:
         27:66:a5:8e:fb:73:bf:c3:19:15:aa:22:72:92:3f:b9:66:86:
         ff:ab:27:c1:2d:dc:10:bd:a3:97:6b:52:ab:49:34:82:24:ae:
         25:ff:72:77:36:c6:9d:b4:8b:64:e3:e0:33:9d:66:0c:d1:71:
         9f:4b:2c:a1:b8:5d:0f:58:4d:80:43:16:93:60:69:c0:d8:e6:
         8e:e6:ea:e5:a7:05:ac:78:a0:6e:aa:de:ed:50:11:e0:a4:2c:
         39:73:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:17:31 2026 by rpki-client