Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
File:                     Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json)
Hash identifier:          LbBV3+PHokP4f/PpH1SGz2V9mwBrYrbLuU5HIqBYUqI=
Subject key identifier:   A8:73:97:D7:52:F4:78:99:01:EE:E9:AA:4F:16:18:D5:DE:1C:E3:64
Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78
Certificate issuer:       /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
Manifest number:          024D
Signing time:             Sun 11 Oct 2026 02:50:47 +0000
Manifest this update:     Sun 11 Oct 2026 02:50:46 +0000
Manifest next update:     Sun 18 Oct 2026 02:50:46 +0000
Files and hashes:         1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: flFcaFcpmCBc3QJ+MbTouoKv1LlYI47eLVjxDSat/Vs=)
                          2: 4501FE2855A411F1BF51EB6898833773.roa (hash: yG08lYLDDmHIqjTOg/iRWcQpM2TiZf/NyAxNKazIns0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl
                          rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178
        Validity
            Not Before: Oct 11 02:50:46 2026 GMT
            Not After : Oct 18 02:50:46 2026 GMT
        Subject: CN=6acaf987-3307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:22:76:29:2c:ab:e4:16:41:d2:4d:20:6c:
                    fc:08:51:75:ea:aa:e0:5c:17:5e:3c:61:c0:2d:57:
                    57:a1:85:94:9e:53:d9:c8:16:56:3e:ac:cc:b6:d2:
                    7b:08:5c:f9:b8:dc:2a:0a:fd:47:a5:50:6e:54:ef:
                    90:c2:77:4b:c9:2b:70:0c:1d:41:f5:60:2c:40:e1:
                    70:17:b8:5d:1e:0e:7b:6f:63:27:d3:02:dd:d9:4c:
                    71:32:21:6b:70:fc:3d:07:79:a8:1a:7f:3f:8b:aa:
                    e7:28:9d:9c:57:1c:a2:18:44:02:b1:cf:9e:ed:5d:
                    52:49:d8:f5:99:e2:09:f3:87:6a:b6:e6:f0:58:1a:
                    ab:8c:a4:59:8a:21:97:7d:5f:8a:6d:3b:05:27:4a:
                    4a:b8:45:2c:b8:61:8a:d5:fc:63:4d:ff:fe:23:e3:
                    72:00:af:74:8c:c7:dc:ae:f4:62:0c:11:bd:1c:0a:
                    9a:b1:03:db:da:f1:54:2a:98:1b:0e:b4:46:76:d0:
                    9a:cf:f4:fb:37:72:22:57:32:af:8e:2a:35:b8:a8:
                    bf:f5:91:aa:7c:0f:2b:98:63:1e:e4:58:0c:77:43:
                    e4:a5:1e:ca:15:7f:73:7f:76:70:6b:73:bf:6c:e5:
                    f3:c5:82:4f:95:1d:ff:1c:d8:60:34:a4:4a:e8:f2:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:97:D7:52:F4:78:99:01:EE:E9:AA:4F:16:18:D5:DE:1C:E3:64
            X509v3 Authority Key Identifier:
                keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c4:50:f2:1f:a2:08:a9:4b:03:6a:af:e0:b0:f1:3b:11:47:
         1c:33:ce:05:63:71:8f:0f:6b:fb:9b:84:b5:d2:35:14:28:c5:
         74:d9:ec:6f:d7:e2:c6:90:70:7a:55:a1:eb:bf:35:6f:3b:da:
         2d:f9:c3:93:7c:be:83:11:55:47:f7:fe:80:91:c4:ca:01:ff:
         a4:34:90:03:45:c2:cb:0d:a6:61:13:57:a8:0e:9f:1c:f9:88:
         f3:29:90:5c:bd:4b:44:05:51:4a:65:c6:d9:5c:34:97:7b:fd:
         2f:90:19:bb:5c:dc:53:60:25:3a:1c:91:09:1b:4a:00:b3:53:
         a6:bd:ca:5e:4a:90:41:58:f2:f8:9f:48:af:fb:23:b1:05:bd:
         92:61:b1:98:d2:8d:2c:19:07:09:ad:4a:d9:26:75:c0:c1:e1:
         4d:a2:da:c4:16:a5:06:d4:02:37:88:4a:16:97:4f:8c:03:07:
         eb:2a:b1:f3:fc:1a:e3:ba:9b:73:98:69:4d:e4:63:b2:af:c7:
         ff:5b:4d:a1:39:bc:20:e6:17:7a:76:5d:a8:03:05:a5:6f:ad:
         44:df:4c:93:4b:81:53:b7:d0:01:28:16:52:72:fc:f6:42:5a:
         95:7a:a1:e9:96:e4:26:c4:f2:f8:44:87:51:6f:8f:d6:2c:e5:
         27:e8:7f:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M2MzYxMTAvBgNVBAUTKDM2RjdGNURCNzAzNUI5MEZEQjI5Mjg1OEUyRkNGOEU2
Qjk5MTgxNzgwHhcNMjYxMDExMDI1MDQ2WhcNMjYxMDE4MDI1MDQ2WjAYMRYwFAYD
VQQDEw02YWNhZjk4Ny0zMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9Yidiksq+QWQdJNIGz8CFF16qrgXBdePGHALVdXoYWUnlPZyBZWPqzMttJ7
CFz5uNwqCv1HpVBuVO+QwndLyStwDB1B9WAsQOFwF7hdHg57b2Mn0wLd2UxxMiFr
cPw9B3moGn8/i6rnKJ2cVxyiGEQCsc+e7V1SSdj1meIJ84dqtubwWBqrjKRZiiGX
fV+KbTsFJ0pKuEUsuGGK1fxjTf/+I+NyAK90jMfcrvRiDBG9HAqasQPb2vFUKpgb
DrRGdtCaz/T7N3IiVzKvjio1uKi/9ZGqfA8rmGMe5FgMd0PkpR7KFX9zf3Zwa3O/
bOXzxYJPlR3/HNhgNKRK6PL5YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhzl9dS
9HiZAe7pqk8WGNXeHONkMB8GA1UdIwQYMBaAFDb39dtwNbkP2ykoWOL8+Oa5kYF4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzYzNi81NEQyN0UyMDQy
MzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVRX2JLU2hZNHZ6NDVybVJn
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL052ZjEyM0ExdVFfYktTaFk0dno0NXJtUmdYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzYzNi81NEQyN0UyMDQyMzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVR
X2JLU2hZNHZ6NDVybVJnWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAccRQ8h+iCKlLA2qv4LDxOxFHHDPOBWNxjw9r+5uEtdI1FCjFdNnsb9fixpBw
elWh6781bzvaLfnDk3y+gxFVR/f+gJHEygH/pDSQA0XCyw2mYRNXqA6fHPmI8ymQ
XL1LRAVRSmXG2Vw0l3v9L5AZu1zcU2AlOhyRCRtKALNTpr3KXkqQQVjy+J9Ir/sj
sQW9kmGxmNKNLBkHCa1K2SZ1wMHhTaLaxBalBtQCN4hKFpdPjAMH6yqx8/wa47qb
c5hpTeRjsq/H/1tNoTm8IOYXenZdqAMFpW+tRN9Mk0uBU7fQASgWUnL89kJalXqh
6ZbkJsTy+ESHUW+P1izlJ+h/rQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:39:45 2026 by rpki-client