Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File:                     NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier:          ZJENTUu9g35B5E3WXkrl+vsY4KI7Dulln4H82SKgUhc=
Subject key identifier:   4B:76:BF:62:F9:21:04:22:4A:EA:4D:00:3F:BA:21:3E:7D:DE:8B:24
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer:       /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial:       1D69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number:          1D4C
Signing time:             Thu 08 Oct 2026 16:10:04 +0000
Manifest this update:     Thu 08 Oct 2026 16:10:03 +0000
Manifest next update:     Thu 15 Oct 2026 16:10:03 +0000
Files and hashes:         1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: uos135jGXxtbAtyleRXrESPIYc6HK0TLeECcIqHfylY=)
                          2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
                          3: xfIw3q3qM2oF8nKAJKiIyOXPmts.asa (hash: Iw8t2cOOoe9YoYuawbsMRtKnfr4RdcfMSHPUEPUr57I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
                          rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7529 (0x1d69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
        Validity
            Not Before: Oct  8 16:10:03 2026 GMT
            Not After : Oct 15 16:10:03 2026 GMT
        Subject: CN=6ac7c05b-bf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:8c:04:a0:5c:43:9d:6b:1a:88:09:2f:30:
                    9a:e2:e6:bb:20:7e:6b:f0:a9:20:29:53:be:75:9b:
                    d9:58:cd:06:9e:af:e8:71:fe:e4:c9:9e:aa:92:76:
                    5a:98:a6:48:40:85:9f:a0:c2:1d:93:ca:30:e9:f3:
                    2e:af:8d:da:2d:61:f4:87:55:fb:33:39:f9:72:61:
                    1e:8c:42:95:5b:c8:0f:72:6a:b0:19:bf:cf:2b:06:
                    c6:74:fe:53:81:2d:37:1c:a2:f7:a4:66:31:7c:64:
                    09:07:b9:bd:09:8c:9b:c9:95:9a:69:07:83:17:31:
                    3c:40:07:40:cd:b8:2e:b4:a0:04:4e:73:e3:5c:4c:
                    74:34:af:af:7c:6c:31:25:a4:e8:5e:2d:e8:88:37:
                    e5:14:ec:5e:bd:84:49:48:80:c2:ac:e9:5b:6b:6f:
                    4f:17:b8:7e:bd:45:3c:41:f8:9a:f2:a1:f3:f0:d3:
                    f8:e0:f6:79:f1:ef:56:5a:ee:8e:93:98:3f:f7:22:
                    6c:5d:52:8b:b5:b5:a5:90:a8:a3:01:82:95:3e:d2:
                    86:a8:f8:f0:74:06:04:b1:0f:da:cf:e3:c9:1b:d3:
                    e2:49:53:3c:20:66:be:39:ee:9f:f9:73:98:2f:ea:
                    44:c5:35:39:5c:ec:bc:68:48:55:29:98:22:b7:cc:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:76:BF:62:F9:21:04:22:4A:EA:4D:00:3F:BA:21:3E:7D:DE:8B:24
            X509v3 Authority Key Identifier:
                keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f1:77:7c:aa:ac:91:00:59:b7:35:10:9b:d5:a6:fb:ef:3a:
         b3:6f:55:55:7b:da:0a:42:9c:e7:01:1e:0e:4d:22:f1:c8:82:
         94:49:a9:c0:20:49:0c:01:44:98:ef:c1:6b:eb:e1:fb:87:2b:
         07:1b:17:93:db:c4:e5:25:53:da:62:01:46:24:42:4c:ff:f0:
         80:b4:5b:d4:d0:9d:71:b4:a4:80:ae:7e:fe:09:48:0b:fd:f0:
         38:08:1b:3e:a7:30:b3:48:3b:ed:18:e4:a5:60:f6:d2:67:78:
         4b:c3:81:e5:e9:b4:80:84:40:f0:bb:2e:ad:8a:ef:e3:96:08:
         39:76:64:8a:b5:2b:cc:8c:af:2e:f9:eb:f3:21:51:a1:d5:bf:
         0e:85:57:83:46:ed:4e:c6:6e:e1:66:0f:1b:dd:1c:62:98:99:
         d7:04:03:a1:86:83:fa:73:44:39:f3:3d:55:63:b2:e5:01:25:
         6b:9b:69:50:ab:54:be:68:8c:50:e8:a7:14:aa:7e:40:2f:13:
         bb:a1:fc:e3:0f:12:e8:11:b0:77:59:d3:d7:86:3f:63:5b:20:
         6d:b5:7b:61:2c:81:b1:5b:46:95:50:7e:e7:4f:cf:08:34:37:
         d0:40:3a:1e:ae:db:94:bf:07:1f:44:a3:5c:83:0c:ef:ab:f3:
         d6:5e:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:43:37 2026 by rpki-client