Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
File:                     nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json)
Hash identifier:          qOovvU8X6bB2uAsvs7/ece03KyLQazKsNN0+yXpG2VQ=
Subject key identifier:   A6:00:D2:8B:00:C4:39:E6:55:56:27:7C:6D:33:23:0E:AD:40:9E:F9
Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
Certificate issuer:       /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
Manifest number:          021F
Signing time:             Wed 07 Oct 2026 03:19:10 +0000
Manifest this update:     Wed 07 Oct 2026 03:19:10 +0000
Manifest next update:     Wed 14 Oct 2026 03:19:10 +0000
Files and hashes:         1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: 321Ts446V21Xmu8tLrH8M8578Apw0sAiVXgpM3lCZtU=)
                          2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
                          rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
        Validity
            Not Before: Oct  7 03:19:10 2026 GMT
            Not After : Oct 14 03:19:10 2026 GMT
        Subject: CN=6ac5ba2e-275d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:fe:5a:0e:f6:5a:f6:dc:7c:df:88:0b:d6:18:
                    98:89:d7:f1:fe:e6:28:4b:fb:51:ef:82:33:c0:49:
                    a3:45:54:c7:4b:0f:b5:c5:ff:90:a1:cb:a4:a0:7f:
                    c1:66:1f:86:68:df:d9:d6:85:8a:9c:a5:6e:c5:bd:
                    9d:6f:4b:82:75:cf:06:2f:a6:8a:b1:b2:f6:69:86:
                    f5:80:ff:36:48:80:b1:c1:54:c8:77:9b:82:66:4a:
                    d7:54:56:d8:85:d8:3b:64:28:cc:7c:26:4f:09:91:
                    af:5c:a2:9f:a8:31:35:d0:2d:b6:70:d8:5a:cc:e0:
                    ca:73:34:76:9b:a0:2b:47:79:5f:f0:85:b1:58:52:
                    7e:2e:2a:bc:59:0c:0b:5b:e2:53:ce:01:95:2b:45:
                    fc:05:bf:e8:cd:3e:d1:68:28:40:26:84:d8:1d:21:
                    07:90:4d:8b:3b:be:b4:b1:4d:97:d2:57:44:41:53:
                    64:1b:94:cf:99:7e:91:2b:cc:d5:d8:50:bf:86:7f:
                    3c:1f:b2:bc:ad:6f:c0:85:d5:6f:56:2e:b4:94:c1:
                    6f:3e:48:1f:3c:e2:23:2d:09:fb:7c:9f:9d:c5:18:
                    31:8b:25:e9:ed:94:50:80:4c:d5:e9:2e:56:09:6c:
                    2c:21:19:05:57:f7:5f:c5:d6:38:59:34:50:0b:ac:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:D2:8B:00:C4:39:E6:55:56:27:7C:6D:33:23:0E:AD:40:9E:F9
            X509v3 Authority Key Identifier:
                keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:8f:85:17:bd:4f:35:59:39:d9:f7:6c:5e:80:67:d8:f8:
         27:ec:37:e3:7d:56:91:b0:6b:19:12:aa:c2:16:18:2a:4e:36:
         0c:83:62:06:01:f7:65:32:67:fc:7a:fb:80:69:ea:4b:0e:bf:
         23:ca:53:37:64:90:75:cf:b3:10:a1:16:a9:ef:c7:28:98:ea:
         19:b3:4c:f1:53:03:42:e1:72:00:a6:3c:19:0e:d2:29:5f:36:
         46:d8:6b:80:1d:66:0e:01:f1:04:52:c3:f6:5d:7e:c2:2c:70:
         22:8e:a5:54:16:64:7f:f8:49:e6:4e:02:cf:ce:ea:2c:9a:4b:
         9e:86:0c:6d:02:7f:2a:91:a7:5a:04:c0:ab:21:56:7c:37:fc:
         5f:1c:56:e4:4b:00:37:fd:71:a6:3f:d2:c4:65:76:c8:7b:ee:
         56:9f:b8:52:f8:c9:ba:00:aa:ae:0f:cc:ee:03:48:c3:cf:57:
         e1:13:e7:bd:60:a4:45:cf:be:c8:d5:48:b8:2b:0d:5a:de:56:
         da:e4:9e:0e:9b:c3:58:0a:4a:8b:79:54:dc:0e:b6:c0:73:8c:
         56:2d:6c:fd:a8:1c:4f:6a:dc:0b:3e:2a:02:5d:21:a1:47:23:
         30:61:31:88:1f:0d:4e:70:a9:39:71:86:35:a7:04:07:e2:f2:
         e9:c9:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:29:39 2026 by rpki-client