Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File:                     NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier:          ntMy/3w7oWQ72yQhBjeBIri44MIgMskz6vm7G/RP9yc=
Subject key identifier:   D1:4F:F4:1F:10:19:3F:02:53:9C:69:BD:CF:FB:52:C7:9A:B0:9D:3D
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer:       /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number:          0203
Signing time:             Mon 21 Sep 2026 03:17:57 +0000
Manifest this update:     Mon 21 Sep 2026 03:17:56 +0000
Manifest next update:     Mon 28 Sep 2026 03:17:56 +0000
Files and hashes:         1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: YRfCz9keR8IzpfwL1RkzWhWvJ1uU8uUuWSNALZLdZsA=)
                          2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
        Validity
            Not Before: Sep 21 03:17:56 2026 GMT
            Not After : Sep 28 03:17:56 2026 GMT
        Subject: CN=6ab0a1e5-d5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:ab:19:d6:d6:68:e4:03:02:3d:df:1f:34:
                    19:51:37:6e:e3:49:00:3e:6f:65:fd:b0:e1:f6:f1:
                    c6:32:2c:95:ea:b3:39:f8:86:ff:2b:f3:fe:19:e8:
                    a1:25:f8:f3:54:99:c5:b8:0b:31:48:e7:21:7e:5f:
                    86:b9:e2:ae:fa:5e:1d:87:29:e6:43:d2:7e:82:33:
                    c3:93:f2:0f:bd:96:81:0c:57:00:76:85:f1:a9:74:
                    38:77:25:0e:bf:24:ab:d2:91:56:29:36:6a:08:fe:
                    ea:c4:64:f8:80:3f:cd:ee:56:82:5c:38:e9:bf:15:
                    24:d6:57:b9:95:7e:4a:70:c0:34:e6:d0:e2:5a:22:
                    c1:57:02:d6:fc:c2:e1:72:4d:28:a6:35:5c:72:87:
                    5f:fa:61:c3:06:20:c4:13:1f:5b:ab:b3:d1:98:00:
                    54:a6:00:79:34:80:7f:d0:a2:21:a1:c6:49:db:c8:
                    79:9e:80:da:1d:b5:a3:53:f7:ec:b2:d8:fa:8c:d3:
                    a0:e1:90:22:44:3f:75:a3:77:b7:fe:22:5d:34:db:
                    4d:d0:c2:2f:69:29:11:3c:80:d3:9f:07:59:d3:9d:
                    69:b9:49:bd:65:9f:7f:9c:2a:bc:5c:f4:2c:f8:3e:
                    82:66:0e:b0:63:fb:64:b9:a6:c3:f0:8b:0f:e0:cc:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4F:F4:1F:10:19:3F:02:53:9C:69:BD:CF:FB:52:C7:9A:B0:9D:3D
            X509v3 Authority Key Identifier:
                keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:1a:42:a0:4a:b0:27:3a:6f:20:5a:1e:85:83:57:c0:fc:
         b7:d7:09:de:6c:a0:16:75:f5:20:10:2e:d2:fa:44:c8:37:5a:
         50:0f:04:17:01:a2:07:4b:b8:16:47:86:1e:63:95:1b:0c:26:
         b5:6a:61:21:7e:20:ca:01:3a:65:27:72:d6:f6:6d:cc:5b:3a:
         b9:b8:61:34:7e:23:0b:c0:37:10:cd:54:07:11:fa:27:6c:45:
         e3:b6:2d:be:46:82:d3:3c:0a:8b:8f:05:1e:47:dd:6e:65:43:
         77:b1:ef:c3:49:5c:df:6d:f1:0d:b2:dd:a6:6d:a5:79:1b:21:
         b6:23:3a:c6:1b:27:34:4e:8c:40:32:1c:df:70:2d:2a:db:bd:
         0e:26:3a:58:39:cd:a3:66:c7:4f:f1:0f:e7:65:6d:68:87:41:
         c1:22:e6:c7:27:50:07:1b:41:2f:80:a7:6b:fb:38:83:42:de:
         a5:2b:65:93:5a:66:04:1e:18:a0:6f:d4:dd:58:e8:88:c0:11:
         3c:0d:99:71:67:04:8c:70:61:57:a8:ed:bb:72:52:e2:85:ff:
         0a:68:d7:9c:96:f4:a1:79:26:87:ea:64:0f:a3:b6:88:4d:05:
         80:df:da:c1:db:34:83:ee:df:50:2b:f9:4d:fa:56:57:03:c7:
         3f:1b:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:06 2026 by rpki-client