Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File:                     nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier:          PUzNViSLhc7rEXC9uGaDDrM+GoVBtMgJVoM33IbQf/E=
Subject key identifier:   49:18:EA:26:8C:E4:3B:9B:C6:70:AE:AE:3E:C4:4F:83:83:03:48:F7
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer:       /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number:          017A
Signing time:             Sat 19 Sep 2026 04:50:26 +0000
Manifest this update:     Sat 19 Sep 2026 04:50:26 +0000
Manifest next update:     Sat 26 Sep 2026 04:50:26 +0000
Files and hashes:         1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: kU4l/FFd+1V5/1mW6wFPVtxFHQcufyzGowmeAYz+PLY=)
                          2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: WwFFmG8/4wsEls41tloUK6sLzod+S/W4CA8w6ITWHJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
        Validity
            Not Before: Sep 19 04:50:26 2026 GMT
            Not After : Sep 26 04:50:26 2026 GMT
        Subject: CN=6aae1492-0072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:0a:08:3c:4b:e3:bd:94:fb:f7:f2:58:f9:
                    0f:d1:80:42:75:88:5c:c5:46:e2:09:df:84:c6:cf:
                    8c:a2:6d:35:5b:0f:29:f4:23:19:20:8c:79:09:43:
                    ae:83:ee:3e:27:7a:71:7c:1f:9c:b4:0f:82:03:1f:
                    85:02:3a:33:f0:c2:d8:d9:1f:3f:5e:82:f5:7e:77:
                    5f:ae:51:12:66:a6:3f:66:bd:35:1c:5f:df:1a:3a:
                    c6:51:83:34:cc:97:08:d3:5e:62:1c:04:0a:a8:48:
                    71:73:fd:1b:b9:fe:b9:9f:24:ef:5c:0d:5a:ec:35:
                    dc:67:60:46:80:aa:9b:e1:7d:df:e8:c4:41:99:01:
                    bb:26:80:52:f0:26:e8:0d:ad:1a:b8:b2:64:46:7e:
                    ad:5d:ff:22:90:8b:ad:0b:62:89:aa:14:c7:e3:da:
                    ce:fb:48:f6:be:e7:77:47:25:b7:57:08:69:a8:86:
                    46:01:20:b1:dc:3c:c5:a3:f9:d5:0c:86:2b:81:cb:
                    48:a8:05:ba:5c:18:e6:1b:6b:da:51:99:7a:8a:5a:
                    db:50:5e:f4:fa:3e:73:0c:36:c8:80:aa:2d:19:bb:
                    03:e1:38:04:ee:ee:fe:7a:97:43:eb:1f:02:b0:46:
                    48:13:a0:19:2b:ba:bf:6a:07:f9:e6:ea:b8:f8:fb:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:EA:26:8C:E4:3B:9B:C6:70:AE:AE:3E:C4:4F:83:83:03:48:F7
            X509v3 Authority Key Identifier:
                keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:09:ed:3e:df:a4:36:0d:17:33:2e:13:e9:d7:8a:1a:15:
         aa:6c:e7:ef:c8:fa:1d:5d:ea:f2:c1:3a:f9:fb:6d:55:d2:98:
         97:cc:cb:5a:58:6d:12:91:76:e6:c1:eb:16:ff:2e:cd:15:4c:
         85:a9:40:ca:81:e9:ec:25:cf:eb:b3:c3:f9:55:ff:4f:3f:73:
         04:cf:a4:0c:96:9a:50:b7:9c:b3:a4:41:d0:e9:cb:02:74:50:
         1c:d2:a6:8b:bf:f6:12:63:2b:d8:ae:a5:ae:73:2a:a2:3d:72:
         13:28:a5:d6:19:63:bb:55:f3:c0:c2:8a:8c:9c:4b:b3:d3:20:
         99:cc:6b:69:4d:a0:aa:6e:7d:0f:f4:60:47:55:3b:30:29:99:
         1e:c6:95:31:eb:90:02:2c:d3:c0:c3:23:d8:ac:3a:2a:5f:70:
         30:29:13:3b:f2:0e:34:5f:93:9f:c2:1b:60:cc:31:d1:b5:69:
         12:67:d8:32:c8:17:4a:cb:6f:fe:4e:d0:86:77:3b:5c:24:37:
         a5:dc:79:79:86:b2:ac:84:c8:65:bb:e6:d4:c0:6b:1a:f1:8d:
         c8:97:d5:51:24:fb:33:69:dd:00:11:13:a4:70:3b:0c:ac:1a:
         49:da:4b:4e:18:a5:1b:d0:87:cd:85:e0:f4:48:65:b0:a3:1a:
         f3:a0:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:35:05 2026 by rpki-client