Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File:                     NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier:          DGTHF9ICML53UTItBLxGBPknbhcoinPWO82m8BTMCVo=
Subject key identifier:   98:6E:F4:29:03:0B:0F:C1:A3:EF:99:E2:B7:20:99:6D:97:BD:3E:8C
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer:       /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number:          01AF
Signing time:             Fri 09 Oct 2026 04:37:48 +0000
Manifest this update:     Fri 09 Oct 2026 04:37:47 +0000
Manifest next update:     Fri 16 Oct 2026 04:37:47 +0000
Files and hashes:         1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: yiTX+trWh6Ss+eiDGq3ARiabVc2hi8vVKL8XvhTczqk=)
                          2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
                          rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
        Validity
            Not Before: Oct  9 04:37:47 2026 GMT
            Not After : Oct 16 04:37:47 2026 GMT
        Subject: CN=6ac86f9c-fd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:e6:46:e7:bf:7a:cf:18:4b:dd:f0:ff:42:
                    5e:46:d5:7a:3f:38:78:60:e0:fd:fa:2e:1b:2d:74:
                    4a:8c:8c:37:00:e8:7c:6e:83:ca:6f:b8:5e:e0:26:
                    31:13:e5:5b:cb:d2:2f:75:bc:54:fa:a4:f6:1d:1a:
                    dc:45:70:21:ba:55:4c:36:08:63:a5:42:2d:6c:97:
                    aa:ea:fe:ae:6d:6c:fa:43:23:3e:24:93:55:05:1c:
                    49:c1:4e:ca:4e:fd:47:e6:3e:e1:dd:39:d6:ce:d0:
                    d2:52:06:66:58:84:74:f7:33:f7:21:4b:7f:2c:a8:
                    51:cf:15:91:2b:75:0a:39:e8:02:8b:47:c4:6b:5a:
                    97:48:fc:0e:70:8d:63:18:fd:23:0c:88:d5:bf:ea:
                    78:9d:4f:a2:8e:7f:31:77:75:ff:be:b0:b3:9a:f2:
                    1b:b4:7d:da:df:8c:a0:b1:86:bc:e4:f3:49:e8:4f:
                    2e:03:a3:4c:c0:ed:33:0a:c3:3a:aa:94:e9:18:1a:
                    7c:d9:9e:5e:d9:b3:5b:53:77:69:05:03:de:cc:e7:
                    d0:30:2b:32:48:d6:0c:f5:6c:71:6d:d4:49:7f:2b:
                    01:62:3d:36:1e:b0:0b:39:2f:87:8f:f7:dc:30:db:
                    09:6e:7a:a0:b4:16:0d:c0:9a:94:32:31:1f:cd:a4:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6E:F4:29:03:0B:0F:C1:A3:EF:99:E2:B7:20:99:6D:97:BD:3E:8C
            X509v3 Authority Key Identifier:
                keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:76:8c:0b:c0:98:81:ad:1e:93:c4:41:77:eb:ca:46:ca:
         f4:29:d1:0d:cf:98:ce:b8:ac:45:e3:4b:7c:e7:d9:05:b9:fa:
         9b:65:a1:9d:9e:56:f3:f4:05:d8:4d:d7:9d:24:62:70:b8:42:
         a1:b1:e7:2e:67:c6:37:2a:f0:c5:fe:e9:ce:8f:6a:df:dd:81:
         9b:7f:ad:1c:5f:8e:57:1c:8d:f9:ce:ef:aa:10:1b:e9:24:1d:
         83:fb:58:3e:25:3f:60:8c:76:e4:bf:97:2c:0e:ba:b1:da:18:
         18:e0:c0:41:e4:97:92:32:20:b6:ca:84:39:5a:41:a5:55:64:
         b5:c0:19:69:82:84:a2:15:13:86:0a:78:38:81:6d:4b:ef:bf:
         98:33:f9:90:33:69:9b:4b:16:d9:1b:a9:4e:e6:a1:3b:8c:40:
         2b:8d:ca:da:98:52:21:27:c6:6e:2d:12:80:72:e0:34:f3:b1:
         1b:a2:5f:73:de:92:2f:90:13:4d:cf:df:09:7a:f9:c9:ee:58:
         d9:58:d5:7d:02:94:38:a5:e9:7f:47:2c:06:cb:e2:95:14:e9:
         b1:09:c5:4d:6b:ef:7e:4d:d3:2b:2b:79:33:4c:55:a4:85:f2:
         aa:ea:aa:76:f5:9f:b9:d1:a5:53:d4:69:b3:dc:c3:d9:62:ad:
         30:cb:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:27:45 2026 by rpki-client