Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File:                     Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier:          PhcVy8vHKUwHNheA1Dq9XGKCWiZAqpc1SaWzcAy6Ld4=
Subject key identifier:   D1:BF:56:3D:75:7C:2F:CB:AD:B1:24:4F:D3:9B:00:56:BC:04:2F:34
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer:       /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial:       0334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number:          0328
Signing time:             Sat 05 Sep 2026 00:44:32 +0000
Manifest this update:     Sat 05 Sep 2026 00:44:32 +0000
Manifest next update:     Sat 12 Sep 2026 00:44:32 +0000
Files and hashes:         1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: IXLdivjQf6JOnjqwF2UC9D9XxS40VGwka7KwAgWfggY=)
                          2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE=)
                          3: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: pcUI164QP94dET6vxGqZiMWs2E97pOagQxpOZq2263A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
                          rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
        Validity
            Not Before: Sep  5 00:44:32 2026 GMT
            Not After : Sep 12 00:44:32 2026 GMT
        Subject: CN=6a9b65f0-2f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:70:46:f1:15:d0:04:d5:3a:8d:62:90:d9:
                    9e:2a:80:ab:27:c8:f7:6d:7b:57:34:8c:6e:50:d8:
                    08:7b:98:6a:fd:d5:0d:86:a2:7c:0c:38:c5:54:1b:
                    17:c2:92:6e:5f:c8:13:72:6e:25:7a:5b:37:8a:25:
                    34:c3:9a:c9:7f:62:1a:41:55:f2:91:ff:0f:f8:cf:
                    42:bc:fb:7a:ba:d5:e9:86:85:62:da:0e:41:0f:b9:
                    19:e6:a5:6b:75:86:b5:ad:29:21:b4:fb:e5:ea:d6:
                    a9:0c:1d:f1:75:93:99:72:7e:18:10:46:c4:53:35:
                    60:4b:70:be:4c:c2:f1:bb:c2:d6:98:35:30:06:3a:
                    27:9a:97:76:dc:22:a4:4d:1f:38:d3:37:12:aa:b1:
                    5e:cc:0f:36:17:59:a6:b9:0c:49:72:bf:6f:49:94:
                    c5:a3:17:a6:56:c5:f2:d8:24:8e:71:fd:2f:d8:99:
                    4b:ea:df:c7:af:82:d4:1f:fa:ad:0a:f0:2a:c6:c1:
                    e0:14:4f:ca:a4:85:3b:3b:b6:71:db:29:86:cd:ad:
                    67:64:45:2c:72:ef:92:78:aa:09:98:d1:3e:8c:e8:
                    6b:f3:8b:47:64:48:63:de:4c:f6:9c:ea:e4:20:89:
                    d3:51:d3:0d:c2:73:ad:75:42:d1:44:b2:73:51:ed:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BF:56:3D:75:7C:2F:CB:AD:B1:24:4F:D3:9B:00:56:BC:04:2F:34
            X509v3 Authority Key Identifier:
                keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:48:15:2c:56:01:54:8b:65:71:c9:e5:91:1d:d5:87:e2:
         0a:2a:99:1d:39:cc:b1:f9:7f:24:04:64:7c:64:56:1a:34:f1:
         9e:11:6a:5c:6d:3e:f8:3c:e4:c2:99:b3:ca:67:a2:94:07:85:
         6f:ce:4e:be:b2:ca:52:e3:26:28:44:c4:55:85:df:94:46:7c:
         fe:e1:e4:c3:3a:8c:62:8d:d5:13:81:db:8b:09:2b:84:f2:a4:
         4d:f4:00:98:8b:ab:4a:f3:32:0a:27:7f:d2:79:85:b0:b7:5a:
         6c:e6:c1:8a:b7:b6:4a:9d:24:ea:b7:59:4e:78:1c:9d:97:24:
         7d:ae:cd:73:07:e6:b3:91:c8:ce:fa:1c:54:08:96:56:cf:30:
         8f:3a:52:4e:16:6d:60:96:67:27:08:c9:83:05:15:c8:de:8a:
         77:cf:19:26:08:9b:1f:d5:d4:cb:78:ea:6f:9c:e6:a9:9b:de:
         fc:a3:8a:14:5d:59:2b:d7:87:ba:b4:5e:f6:92:12:ff:6c:f7:
         f9:54:74:b5:20:b4:50:6d:75:fc:9b:40:3f:3a:f0:08:a8:0e:
         d4:3e:5a:34:00:cb:03:d7:28:29:0d:6a:9e:c4:6e:7d:14:36:
         c1:78:13:2c:e1:c9:43:78:0f:07:8b:9f:09:80:89:0e:45:bf:
         25:31:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:47:16 2026 by rpki-client