Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
File:                     NXR5DY34KztVHjtwJXG69VqemWE.mft (raw, json)
Hash identifier:          NZ515p2zzF1vsU1oDoabejB/39wz+x45nraXpbbd9zM=
Subject key identifier:   2F:0C:FB:DA:ED:79:18:20:A2:EF:C8:E5:C3:CF:E9:C8:C8:51:50:30
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Certificate issuer:       /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
Manifest number:          0183
Signing time:             Mon 21 Sep 2026 04:49:57 +0000
Manifest this update:     Mon 21 Sep 2026 04:49:57 +0000
Manifest next update:     Mon 28 Sep 2026 04:49:57 +0000
Files and hashes:         1: NXR5DY34KztVHjtwJXG69VqemWE.crl (hash: X5yGPbsgCo0GA0hDNRHdlPSH4D8Y4rSXQjJI6jMEsOk=)
                          2: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (hash: KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
        Validity
            Not Before: Sep 21 04:49:57 2026 GMT
            Not After : Sep 28 04:49:57 2026 GMT
        Subject: CN=6ab0b775-f51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:35:ea:5d:cb:25:b4:98:07:5a:53:f1:6e:
                    0c:57:b6:d1:c1:d8:8a:48:e8:6a:a6:8e:2d:1f:68:
                    09:12:6b:85:2b:54:32:83:49:8c:8e:81:1e:e8:23:
                    7e:d0:5d:cb:72:3e:e9:75:f7:d0:25:5d:85:0c:98:
                    c5:b2:45:83:81:00:26:ab:74:4a:18:d7:8f:2b:af:
                    32:97:7c:66:53:8a:de:ac:7d:e7:86:01:db:9b:f2:
                    30:9d:43:83:51:a3:12:d6:26:ce:ad:5e:0c:71:51:
                    9e:11:df:f9:b6:9b:f7:e5:bb:e4:d5:f8:27:34:cd:
                    d5:02:27:90:32:de:c1:5b:f1:a4:7e:d0:15:f6:a3:
                    5e:8e:07:c0:8b:b5:1e:e0:e2:c0:b7:35:a1:13:0f:
                    1e:3b:33:1c:38:3c:4b:77:3e:19:ff:07:f9:0f:7e:
                    ba:f3:3c:f9:87:da:1c:15:ca:34:46:47:53:61:44:
                    c7:35:7c:fe:c2:d9:31:5e:29:e0:d2:a3:9c:91:c1:
                    b3:d6:fe:a2:04:fc:41:29:08:37:2e:ca:e0:01:68:
                    94:1d:f7:66:fd:7a:bf:0b:12:7a:6c:62:0b:f5:fe:
                    12:4d:1a:1c:37:19:31:f8:9f:1e:7f:b0:a9:23:27:
                    0e:5c:2c:e7:4a:dc:32:7d:f9:89:5f:dc:dc:21:39:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0C:FB:DA:ED:79:18:20:A2:EF:C8:E5:C3:CF:E9:C8:C8:51:50:30
            X509v3 Authority Key Identifier:
                keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:22:30:71:17:c2:7d:01:a4:90:6c:5f:a3:02:bb:8d:c1:
         87:10:7e:fd:41:0c:c3:68:60:bc:6b:b2:1e:ea:d3:74:ca:43:
         0d:7d:51:1e:73:8b:6e:24:cd:14:ab:22:42:d7:a3:11:ad:48:
         8c:c2:89:29:53:ad:02:c4:0c:14:8c:f9:47:4a:b0:35:e4:f2:
         d2:ad:ff:35:6c:4f:94:03:b2:13:87:f1:ce:67:2f:25:7e:29:
         a0:e4:dd:b5:7c:1a:fe:7a:27:a0:f5:4b:96:eb:1f:5f:10:ba:
         30:23:83:f6:ec:b2:7d:59:52:08:fb:ed:1c:07:7b:8a:40:1c:
         dd:5c:61:e4:4d:1f:db:00:ed:c2:c4:f1:24:48:18:82:97:ec:
         9e:5b:b5:1c:13:1b:8e:71:1c:21:da:a9:36:d0:e6:73:c3:6c:
         3b:3d:8f:3a:66:ae:c4:2c:85:fb:4a:59:91:6c:9d:f5:0b:1b:
         63:67:e3:8d:6e:53:3d:67:74:c7:68:09:e7:b9:43:1c:fc:15:
         08:3e:cb:ef:82:c7:5a:2d:0c:c0:01:f8:7d:75:58:98:ba:ec:
         09:5d:3a:e1:a8:4b:c1:ce:ca:b5:96:d5:98:33:e1:57:a3:75:
         71:ea:fa:0c:6a:d0:a3:90:a0:43:52:5b:02:7e:ca:ec:3b:f3:
         1a:30:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:01:33 2026 by rpki-client