Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File:                     Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier:          JHUz2V0ram46Dr/SIaXire4DTNNptJYvgMeLcgYo9kc=
Subject key identifier:   BD:83:C5:94:E1:8B:61:C7:B5:9E:97:60:48:D8:14:8B:4E:67:5A:F8
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer:       /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial:       0D2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number:          0D21
Signing time:             Sat 26 Sep 2026 18:20:18 +0000
Manifest this update:     Sat 26 Sep 2026 18:20:18 +0000
Manifest next update:     Sat 03 Oct 2026 18:20:18 +0000
Files and hashes:         1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: TN+GR6pI3Vz8V5tIzAG3/Mpf0kHhtfN6C0Sl8gE33Ys=)
                          2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3372 (0xd2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
        Validity
            Not Before: Sep 26 18:20:18 2026 GMT
            Not After : Oct  3 18:20:18 2026 GMT
        Subject: CN=6ab80ce2-e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:91:d7:48:77:88:0c:91:48:e9:9c:bc:76:
                    44:3d:5a:c9:f8:a1:57:13:69:34:b9:f1:5a:ef:ba:
                    1c:f4:b9:78:be:79:c0:22:8a:bb:57:f1:52:62:6a:
                    97:26:cc:c3:14:c0:4e:ab:81:7c:fe:17:54:8a:fa:
                    a1:93:31:2e:0e:11:a7:2a:b3:de:ba:86:7a:f6:4e:
                    f1:29:cd:01:4b:9c:d4:06:d0:4d:05:15:6f:e3:f4:
                    a1:06:a0:4d:36:03:76:14:50:fb:5a:7b:2e:bc:91:
                    33:95:b6:23:ab:2a:cc:fa:e3:6e:51:60:e8:2c:9a:
                    e9:a8:da:9d:36:82:1a:a2:da:81:0e:74:83:4c:ce:
                    1e:87:4b:df:3c:ae:9e:79:41:18:31:53:77:c7:fa:
                    75:70:ed:ce:b7:03:2d:78:a3:65:3c:79:40:86:0f:
                    7e:51:ed:5b:e2:d1:1a:5e:54:94:4b:e1:0c:41:9a:
                    e6:56:4c:a3:89:53:ae:1e:8c:8b:69:c5:fc:40:aa:
                    3a:16:15:c7:f2:fc:1b:4e:3d:34:a6:6f:e7:6f:63:
                    12:e2:d2:09:61:5e:4d:6d:4b:e9:9f:fe:10:24:79:
                    de:06:97:18:ed:1f:3e:c5:7d:8d:29:08:c4:b5:d3:
                    0d:36:cd:86:b0:ea:b3:29:e6:60:0e:e3:f1:46:78:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:83:C5:94:E1:8B:61:C7:B5:9E:97:60:48:D8:14:8B:4E:67:5A:F8
            X509v3 Authority Key Identifier:
                keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:29:58:44:de:b2:6d:5b:14:50:f6:56:e5:b6:3f:73:56:
         68:32:43:0e:a2:55:67:47:60:09:00:ed:3a:18:23:53:b7:ed:
         65:84:ac:c4:10:9b:fe:e1:3f:7b:2c:b3:4c:12:0a:2e:3e:d4:
         83:77:50:d9:50:b6:c1:30:bc:72:f8:7c:99:ab:c7:de:b2:03:
         50:f7:03:24:05:55:55:ae:86:2e:aa:21:10:7f:8e:42:c0:5f:
         7b:5c:44:02:b5:89:2e:b3:f7:5c:3c:67:78:43:3c:af:42:30:
         2c:cb:cb:76:fb:e7:03:38:e9:37:0c:58:e8:59:77:c2:32:8f:
         d7:44:60:5e:2f:32:fb:77:1d:c8:82:04:41:03:56:ab:2e:fc:
         a6:37:29:bb:c2:ad:40:be:44:f1:17:6c:84:56:cf:4c:93:ea:
         7c:cf:c4:3e:cb:70:ce:6d:d2:8d:f5:11:fa:af:33:04:bc:36:
         14:01:c1:7f:ae:9f:9f:e5:9e:30:75:f3:d2:ab:26:dd:b2:c1:
         1a:f3:48:ad:80:86:0e:88:1b:f0:bf:33:1f:89:39:54:8a:e9:
         05:60:be:6b:3c:c2:50:30:60:a9:c6:35:4b:c0:ad:ef:cb:fb:
         98:d2:47:c2:28:61:42:d9:e7:f1:1d:80:8d:1d:82:31:52:5d:
         0e:57:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:06:28 2026 by rpki-client