Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          K5EbCa3M6HgnVkn/WYhipIGS7b97YP2ypNWUtJ2v0qE=
Subject key identifier:   64:40:AD:6E:3F:4E:0F:34:D9:46:3C:A1:3C:D6:18:A6:E4:8B:FF:14
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          E4
Signing time:             Fri 25 Sep 2026 06:36:59 +0000
Manifest this update:     Fri 25 Sep 2026 06:36:58 +0000
Manifest next update:     Fri 02 Oct 2026 06:36:58 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: 4jbiQkBoHMEAaJfA4EJ4MTW4+xoAPv/OKiqNrDzCWsU=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Sep 25 06:36:58 2026 GMT
            Not After : Oct  2 06:36:58 2026 GMT
        Subject: CN=6ab6168b-f1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:71:ae:b2:ee:af:9b:75:b9:ca:ef:92:7d:
                    76:17:e4:db:a3:c3:f0:da:7f:25:53:0c:4e:4e:69:
                    5e:4f:e6:44:3a:d2:90:a4:81:61:8f:fe:e5:22:51:
                    9e:d2:66:c2:d1:72:0d:7e:dd:e0:81:48:95:48:69:
                    07:bb:ea:7d:da:ce:c6:c7:b9:0c:98:90:39:55:4b:
                    c0:27:1e:33:12:b2:50:58:60:cc:fc:02:13:c1:57:
                    d7:cb:f3:12:f7:57:63:62:38:7d:ac:97:13:62:d3:
                    43:c0:f2:e8:2a:2e:5b:ca:8c:14:a1:87:9e:f7:55:
                    84:03:fc:00:20:c8:ab:20:7d:3a:84:2b:da:5e:3d:
                    02:7b:2c:5c:de:82:00:7a:d2:92:9b:07:51:46:69:
                    0f:9b:56:71:bc:d0:41:2b:a6:9f:90:35:8e:58:47:
                    35:e3:65:b6:a8:ee:b2:d2:7d:40:57:6b:63:49:fe:
                    4a:c5:a6:f1:47:6d:12:f1:db:91:08:9c:1a:a7:5f:
                    76:c6:45:5c:bc:37:47:05:4d:0d:68:9c:db:cf:f4:
                    1e:df:45:bd:1a:42:51:8a:08:d0:2c:ad:51:a7:cb:
                    2d:78:0a:cb:ee:d5:97:05:4a:91:a4:28:1d:b6:4b:
                    a2:8a:37:ec:ae:02:ab:ae:b3:69:5c:3c:a0:69:b7:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:40:AD:6E:3F:4E:0F:34:D9:46:3C:A1:3C:D6:18:A6:E4:8B:FF:14
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:e2:e2:8a:85:b5:16:2c:cb:e3:70:eb:23:c9:71:45:d4:
         9e:a3:3e:97:37:a1:28:f6:1a:a8:ac:bc:00:c8:00:83:ec:78:
         b8:9a:84:34:a3:34:e7:d0:03:dd:1c:ce:c3:7b:24:03:a9:82:
         32:b3:54:5d:62:3a:f6:13:33:2f:a0:76:a4:35:22:e0:f7:8e:
         a5:ee:0e:67:12:6f:36:63:b7:71:0e:f8:a1:95:1a:3f:e7:3f:
         a1:78:7f:ea:ed:5c:9a:b5:e4:ab:70:c9:c2:dd:2a:2e:40:c2:
         25:ee:74:46:2a:c7:43:e3:6b:24:90:97:1c:a2:f0:2e:83:df:
         5a:68:da:23:e1:b0:e5:6f:91:36:fd:27:24:fe:3a:d6:09:aa:
         00:ca:82:b2:a2:f1:69:99:83:53:bf:5a:64:48:c6:c6:b6:11:
         09:e2:10:94:c2:e1:ba:62:20:de:3d:95:51:ec:72:f7:e8:74:
         ea:30:39:1d:36:37:36:83:49:80:cd:84:1b:9f:87:9e:0f:7d:
         ff:5e:d2:ba:76:59:d2:41:f3:fb:84:45:ba:e3:a6:db:d3:1e:
         ac:ae:55:e6:75:ab:c5:4d:9b:f6:a9:1b:59:d4:83:9c:8c:b9:
         ca:de:91:b8:c3:c5:01:1c:bf:77:43:c5:a4:44:c4:d3:a2:b0:
         bf:d8:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:18:12 2026 by rpki-client