Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File:                     nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier:          W1y/BZrl0+pfSep6FsVk6EKNTzy8kfBHCAkkJVugxUY=
Subject key identifier:   86:13:B8:F4:3C:EB:F9:22:8F:53:00:9F:F0:B7:09:69:BC:97:70:3D
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number:          01E5
Signing time:             Wed 23 Sep 2026 03:39:23 +0000
Manifest this update:     Wed 23 Sep 2026 03:39:23 +0000
Manifest next update:     Wed 30 Sep 2026 03:39:23 +0000
Files and hashes:         1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: /Zxkjw4Ey4CgNsKtg6AR4njAh6trsdInQX/6HvgoGOc=)
                          2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: b4+csE685B8vXmBeYhE1afbxpZz6mNZMcg0Inl+/Jyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: Sep 23 03:39:23 2026 GMT
            Not After : Sep 30 03:39:23 2026 GMT
        Subject: CN=6ab349eb-0a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:35:0b:23:ae:1d:5e:11:b1:7b:87:13:5d:
                    20:1c:23:b3:ff:e6:9e:6b:fb:e2:a8:c1:da:b9:1c:
                    a4:b2:5d:3f:11:10:39:c5:6c:5c:3e:09:5a:56:fd:
                    e0:26:bf:1e:4c:c4:27:9e:32:0e:cc:f4:18:6e:ce:
                    07:72:e7:0b:8d:73:31:17:d4:c7:02:9e:6f:67:89:
                    6e:09:32:65:0d:e6:5f:3d:05:f8:29:ab:d0:68:ce:
                    8a:1a:14:4b:dc:77:eb:d4:57:28:62:1e:f2:e4:06:
                    bc:32:96:80:35:35:ff:50:68:84:c9:da:90:88:9e:
                    6c:79:d3:f1:02:4e:ef:a1:47:2d:47:5c:55:5e:e1:
                    b2:0e:96:d1:ed:32:ea:f4:24:c4:bc:bd:ca:06:6b:
                    fe:36:94:5a:73:65:71:a6:b8:c4:5c:22:99:b5:f4:
                    3f:be:7a:d7:1e:bf:a8:2d:42:e0:09:99:89:ae:7d:
                    05:31:e4:cb:17:f0:d6:55:f3:26:6f:f7:af:af:ee:
                    4f:67:30:b7:c2:78:13:22:4d:b4:c1:65:f6:9b:d4:
                    d0:e4:49:f6:cb:12:64:12:ab:3b:da:47:8a:f5:a8:
                    59:80:d4:7c:63:b5:fb:08:20:16:c8:60:59:35:d3:
                    f8:01:97:86:a3:5b:59:f3:d0:09:00:1b:94:38:9d:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:13:B8:F4:3C:EB:F9:22:8F:53:00:9F:F0:B7:09:69:BC:97:70:3D
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:5f:87:6e:0f:16:9d:4b:6e:a5:5c:03:15:de:fd:ed:a2:
         be:ef:22:e7:3c:b6:8d:80:a6:7e:9b:5f:74:ab:a2:eb:2a:39:
         aa:cf:cf:d8:b9:2b:a4:5d:58:73:07:e6:c0:88:d5:ad:ee:a5:
         59:44:9d:97:84:c6:c4:9d:2f:93:28:33:8c:e9:0b:25:46:59:
         92:16:ca:0d:b0:67:b3:20:47:7c:c5:f9:ae:8c:eb:3a:d6:15:
         f8:46:98:79:ec:4d:5b:3a:6a:5a:f5:e2:80:53:f4:77:52:80:
         5d:6c:90:e1:4e:81:86:11:79:a7:36:8e:a8:63:9c:1c:96:a1:
         01:db:f5:e2:24:e8:d2:c0:ee:9b:a9:ce:91:17:3c:b6:d7:0a:
         e9:8a:40:12:9c:81:ad:06:99:bb:b4:cf:3b:3c:b0:be:9e:cc:
         fd:71:f1:cb:db:c6:b7:db:2f:f7:a1:b6:8b:ec:31:c7:b1:2c:
         ec:e1:97:b5:5c:68:65:8f:2e:94:0e:a9:bc:a4:6e:03:72:84:
         5b:7e:6d:4b:cf:b9:48:30:b8:d0:b2:b1:7f:3d:e7:d6:5e:f6:
         bd:bd:82:8e:2a:0b:b2:02:02:31:b4:18:d1:ae:76:a4:e9:88:
         bd:88:92:2a:cc:41:16:d4:0a:7b:91:88:b3:7d:b0:aa:24:d9:
         fb:86:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:05:02 2026 by rpki-client