Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File:                     N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier:          vO6YvE7xkxhHHXg3bOw1sNI1yF3TfXNpSV5vXBReNSM=
Subject key identifier:   EF:1D:B1:62:75:6F:88:87:5C:1F:45:62:E9:CF:E6:DA:65:31:F0:30
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       048E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number:          0486
Signing time:             Sun 20 Sep 2026 23:51:49 +0000
Manifest this update:     Sun 20 Sep 2026 23:51:49 +0000
Manifest next update:     Sun 27 Sep 2026 23:51:49 +0000
Files and hashes:         1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: WjBVLnpijrwzK0nC4AkvLDiETkH2SUzQUxs9Q4vGmkY=)
                          2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: 9lzXvcPlg/l/tlAmlqyfga76fKpdYYXjmSDlWTcG17o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Sep 20 23:51:49 2026 GMT
            Not After : Sep 27 23:51:49 2026 GMT
        Subject: CN=6ab07195-8571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:c6:14:41:7b:78:ec:5a:22:0a:e7:b8:3d:
                    7b:58:73:f2:57:63:81:3c:80:60:c3:90:a0:6c:68:
                    57:62:dc:0d:3a:ed:77:cc:7f:27:05:ad:19:93:af:
                    33:a0:06:54:6f:47:73:41:28:42:c6:be:cb:e6:20:
                    2d:4f:d9:6a:cd:87:f6:37:54:b0:01:0c:b0:6d:c4:
                    de:be:17:4a:cc:00:3f:2b:ce:e3:50:2d:3a:71:5d:
                    09:cf:46:10:6c:c8:8f:9b:d6:90:81:49:0d:01:f0:
                    11:36:d9:85:0b:bf:87:07:55:d9:88:85:37:20:e1:
                    2f:4b:21:7c:ce:0d:e3:1b:7e:2d:f1:98:b9:bc:a5:
                    6d:0e:f8:2f:14:2f:7c:e1:b5:b6:b1:8e:c9:71:5a:
                    b0:03:f0:05:c3:44:a6:67:af:2d:5b:00:24:8c:e5:
                    0b:bb:27:c1:28:cd:66:80:8f:70:c3:c3:fe:75:9d:
                    87:52:e9:61:99:5f:26:90:37:41:a8:ef:15:93:bd:
                    de:69:9e:a6:76:bf:33:54:74:7b:d3:03:23:4b:26:
                    19:b7:50:34:fd:ad:b0:72:1e:51:e9:04:be:74:f2:
                    25:49:68:53:52:71:e4:2d:b0:07:42:38:2f:6d:4e:
                    f6:f4:9c:51:83:56:e2:ae:83:3b:9e:40:a3:45:4d:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:B1:62:75:6F:88:87:5C:1F:45:62:E9:CF:E6:DA:65:31:F0:30
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:e2:d6:f2:0a:06:e8:82:46:13:77:9f:b0:d7:43:59:61:
         b1:87:80:91:d2:a3:bd:7f:01:91:8d:7f:8f:0a:c6:be:2f:ad:
         f8:5b:92:46:ed:53:c0:fc:e7:2a:dc:08:9b:da:b2:ea:f8:bd:
         f8:5e:89:58:7b:e0:5f:ce:a2:f4:99:8b:6d:da:39:80:8b:28:
         f3:a3:f7:56:c3:90:21:e5:27:32:db:c7:22:e3:68:9c:0b:9f:
         ee:65:cf:8a:96:e1:ed:76:00:7f:28:ab:ec:ca:b1:e1:7c:dc:
         d8:78:b1:ef:49:99:83:18:06:b8:9b:ef:8f:1d:08:33:67:0e:
         36:1b:b5:34:4d:8e:c2:e0:d4:24:62:ee:2e:0e:1a:b4:56:e6:
         6e:28:3e:bb:05:f7:62:ce:64:0c:c3:e0:84:01:0c:22:0f:c3:
         31:7a:86:33:0e:ac:8a:d5:eb:7f:bc:eb:57:90:70:50:7e:1d:
         b8:79:a4:92:a6:cc:71:9a:5a:b7:8d:6c:6f:a1:4f:5d:3d:9f:
         e4:82:d6:52:b1:74:76:5e:74:9d:a6:8c:39:86:b8:22:a5:42:
         59:ec:53:9f:6a:79:33:2e:73:9d:4d:8b:4a:83:c9:d3:c0:36:
         82:b2:99:e9:e8:e1:cd:18:92:88:68:26:9f:e2:b9:07:cd:68:
         05:9d:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:58 2026 by rpki-client