Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File:                     NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier:          tdliCGgttsGVdw6Cm9s5PFwBIf9r1AifivduHrQCiL0=
Subject key identifier:   B8:B3:31:3E:C8:B9:E8:40:86:9D:3E:56:2A:42:68:77:02:92:99:1E
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer:       /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number:          0182
Signing time:             Mon 05 Oct 2026 04:57:33 +0000
Manifest this update:     Mon 05 Oct 2026 04:57:33 +0000
Manifest next update:     Mon 12 Oct 2026 04:57:33 +0000
Files and hashes:         1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: XIO44gb4IfWTXNg1sycg5ZD7LxJ2M3ibxJIzh7raXvw=)
                          2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: WWBACUh4p1PPK9KcHPTTQfFx5ubcC8J0wopYYr+Csh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
                          rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
        Validity
            Not Before: Oct  5 04:57:33 2026 GMT
            Not After : Oct 12 04:57:33 2026 GMT
        Subject: CN=6ac32e3d-a06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b8:0f:94:10:9f:49:53:ea:51:c2:0a:d3:df:
                    5a:2a:8d:df:9e:28:69:64:ce:9b:c6:9d:17:71:e5:
                    f2:b5:71:ab:80:49:d8:1e:ea:bf:bd:e3:4d:35:77:
                    e8:f6:ba:f8:2a:e0:07:53:2e:c9:4a:19:ef:39:c1:
                    8b:19:8e:99:dd:81:95:3d:a7:38:d0:2f:18:53:14:
                    84:d4:4f:44:9e:46:61:79:3b:8e:0c:f9:0c:67:41:
                    7d:56:ce:b3:83:e4:99:42:89:23:de:d9:e0:72:56:
                    6d:9a:03:15:4b:91:7b:c4:8e:c3:6e:31:b0:e8:e7:
                    62:a4:df:8b:8a:08:e7:4b:0d:9a:e5:1d:29:18:20:
                    aa:18:b4:c4:af:b1:98:99:01:f3:7d:b7:59:57:28:
                    83:4a:e4:7f:ee:0c:99:84:54:e3:9e:b1:25:6b:f3:
                    ec:53:21:64:d3:e0:2f:07:bc:1d:97:3c:9d:b3:87:
                    ac:07:dc:0a:b9:c9:76:f5:f3:74:8c:7b:d2:07:db:
                    e9:73:46:d4:4a:f8:02:4a:ed:da:b5:4e:ae:4e:25:
                    4d:60:42:d4:9c:09:6d:71:2c:12:b4:b2:f2:fc:1a:
                    be:76:f6:51:71:42:ee:ab:43:65:6a:f4:66:3c:d9:
                    07:08:53:44:97:68:e0:3a:94:fe:66:fb:de:80:f1:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B3:31:3E:C8:B9:E8:40:86:9D:3E:56:2A:42:68:77:02:92:99:1E
            X509v3 Authority Key Identifier:
                keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:45:98:ac:89:65:ad:1f:33:a6:f3:3c:7e:b4:f7:00:e2:23:
         d6:0d:48:c4:a6:d1:52:bd:8b:90:61:41:f6:89:d1:30:f3:0f:
         59:92:6c:2d:cd:71:4f:f8:6a:4b:5b:d2:f2:74:18:31:bb:de:
         be:40:1d:08:21:3f:15:c9:fe:08:89:07:96:43:30:73:d6:7f:
         06:02:29:6e:36:05:13:7a:99:5c:69:93:55:18:eb:2e:a5:78:
         0b:4d:fb:d9:7f:c1:d7:2d:dd:22:ac:ad:af:52:ad:e0:d2:5a:
         04:21:75:f3:b4:98:d1:e2:4e:1d:15:e8:55:49:76:1e:58:89:
         ed:1d:cf:69:95:ff:c6:29:c0:71:b7:5c:f1:45:16:75:de:b2:
         de:64:f6:20:4b:79:f0:75:04:65:79:a0:bb:75:21:74:cc:ad:
         b3:d7:65:47:34:f7:47:d9:01:97:6d:fe:b6:c6:ff:b4:f2:2c:
         c5:9c:8e:a5:f4:f0:c7:b5:b5:69:75:6d:f4:e5:3c:b2:4c:9d:
         e8:77:fb:da:85:b9:61:6d:58:66:b7:4e:31:69:98:7a:cd:11:
         bf:69:2e:02:92:bf:b4:c3:71:7a:08:d9:3e:c2:f3:ba:b6:c0:
         3f:e8:9b:68:cd:d2:14:2d:d1:09:74:75:51:bd:b7:da:f8:75:
         4a:75:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:37:33 2026 by rpki-client