Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
File:                     nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json)
Hash identifier:          U7SdJLZdUa2W2zBzRruKHL7rPf5F9Jfumvqi+xZea7A=
Subject key identifier:   BA:F8:1C:7F:AF:22:AF:F3:CC:0F:B9:F8:B8:7B:8B:80:FC:0B:93:A7
Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
Certificate issuer:       /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
Manifest number:          5A
Signing time:             Thu 03 Sep 2026 08:24:04 +0000
Manifest this update:     Thu 03 Sep 2026 08:24:04 +0000
Manifest next update:     Thu 10 Sep 2026 08:24:04 +0000
Files and hashes:         1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: qoinAKFgwdb4HfH7HcHe0AZN9HqNSKVpCP1bnBjGNA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
                          rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
        Validity
            Not Before: Sep  3 08:24:04 2026 GMT
            Not After : Sep 10 08:24:04 2026 GMT
        Subject: CN=6a992ea4-d200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:96:e2:e0:fa:9d:89:3f:c1:43:b3:77:eb:07:
                    e2:b1:ef:08:e5:83:f8:d4:1f:34:5e:19:3c:6a:41:
                    90:af:8f:00:26:ae:d1:e5:24:ad:d0:e1:a6:6b:c8:
                    fa:dd:d0:83:b1:e3:30:0c:a4:0e:c7:ba:3c:32:e2:
                    5c:1e:be:8e:a0:19:cb:8b:8f:f8:3b:72:ee:13:af:
                    06:01:dc:1c:8a:6b:05:2a:c0:ee:4b:bc:3b:46:16:
                    29:5f:4e:af:4a:05:82:c6:27:d4:f2:b2:ee:a6:a1:
                    0a:53:0c:d7:e1:b2:c5:d2:1f:b2:3d:c9:50:5b:44:
                    fa:61:b7:73:cf:7e:ce:4b:44:3d:10:72:ff:ac:46:
                    25:73:ce:5b:d2:fd:98:b2:f0:65:49:54:86:ee:d9:
                    42:24:64:ab:bd:21:f0:0a:e7:f9:32:ab:db:ae:58:
                    81:9f:82:7b:73:18:f0:79:0b:2e:71:39:b6:5f:f3:
                    03:d8:74:3b:57:45:38:ba:3b:a6:47:62:37:62:83:
                    51:b9:87:5e:3d:7b:89:45:68:8f:cd:80:83:d3:10:
                    cb:5f:49:3c:d8:b6:02:91:ff:ac:99:c7:05:25:3d:
                    6e:d7:04:10:1c:56:5a:a9:d8:14:83:44:64:cd:78:
                    64:cf:d1:4b:3e:8d:65:1b:2b:07:eb:46:db:bc:d9:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:1C:7F:AF:22:AF:F3:CC:0F:B9:F8:B8:7B:8B:80:FC:0B:93:A7
            X509v3 Authority Key Identifier:
                keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:c4:91:2f:63:52:2f:83:6e:6d:60:c1:16:e1:2b:cb:f7:
         c8:54:0d:96:55:40:1c:9f:11:89:26:a1:5a:e9:6a:e2:dd:82:
         39:2a:68:fe:af:9c:7c:f9:22:0d:e4:b1:f8:8d:54:3c:8d:a1:
         82:c7:03:05:b0:40:fc:87:17:07:77:23:d5:79:36:6d:14:aa:
         0a:b3:1c:75:ae:2b:8c:28:3b:cf:b9:78:0f:23:0a:21:b2:ce:
         5b:bf:f3:f8:65:d1:fe:f3:61:4e:84:53:ec:84:48:bb:bf:af:
         81:ca:36:4e:96:97:1a:75:cc:42:37:11:43:06:16:41:06:03:
         37:1e:b0:84:2a:7b:8a:a8:83:97:5e:58:e3:2a:f0:a0:59:b7:
         4a:9b:2c:19:91:09:28:a9:81:20:ba:2c:05:9c:96:2c:35:17:
         b8:8c:e9:40:c8:37:b9:06:54:e2:20:8b:7e:3c:c5:15:17:ac:
         cd:55:98:2b:67:6a:8c:00:bf:7e:5e:d0:db:d8:df:34:c5:24:
         6d:f6:96:8e:d0:6d:3a:c2:cb:aa:75:03:df:7a:e3:a0:ab:87:
         ea:24:e2:08:fa:cf:a1:12:bb:69:9e:ba:16:d4:b5:46:dc:c5:
         e4:76:fb:0f:74:c3:43:ee:3b:66:df:2e:5c:55:19:c5:0e:21:
         33:ab:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:40:50 2026 by rpki-client