Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          8y9V/ITmgCosTZxxMdEopqcD7vw7ivq33iYhCXLjpvY=
Subject key identifier:   C2:6B:65:FE:88:8C:F0:45:32:52:A8:AE:9E:7D:E9:EB:CF:D6:30:8C
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       0745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          073D
Signing time:             Mon 12 Oct 2026 22:06:00 +0000
Manifest this update:     Mon 12 Oct 2026 22:05:59 +0000
Manifest next update:     Mon 19 Oct 2026 22:05:59 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: yRk1S0/+4B3lY3VoPa1vKC6G4JyfuORVDKpYMkQI/o0=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Oct 12 22:05:59 2026 GMT
            Not After : Oct 19 22:05:59 2026 GMT
        Subject: CN=6acd59c7-7fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:08:00:1b:99:32:e5:ab:18:2f:23:11:ab:
                    25:da:e1:59:d2:79:db:30:63:cf:91:be:c5:d3:ef:
                    01:5d:80:d9:b6:0d:41:2b:2a:c3:90:df:d2:2d:88:
                    1c:e1:f1:48:e4:7b:9d:67:44:f9:a0:ca:17:bc:71:
                    0a:fa:ab:c8:27:be:fb:63:44:32:c4:72:bc:c2:1d:
                    8e:c6:0d:0a:d7:c1:67:11:1b:2a:c9:a4:d8:42:8e:
                    2d:3d:25:bb:1d:3a:a0:07:a3:3b:23:f9:ac:10:3d:
                    42:6f:2f:7d:e7:3d:3a:08:53:2b:5e:d2:34:b9:fb:
                    bc:d6:01:a5:b3:df:35:67:98:47:80:58:51:f7:a8:
                    63:ba:3a:5d:6b:12:a0:75:3a:01:44:bb:4c:11:7c:
                    1d:43:88:f5:25:fe:42:ce:39:bf:77:d1:33:e5:ee:
                    1e:34:b2:65:6c:96:5e:01:c3:00:3f:3c:0c:b1:3f:
                    cc:88:95:c6:09:4d:1e:f4:d0:80:c2:76:b1:83:02:
                    99:5f:d0:4a:26:9e:28:35:17:32:93:f0:bc:0c:89:
                    30:09:47:ff:b4:ed:e3:f6:b7:a7:75:2f:19:21:6a:
                    7f:fa:49:c2:fc:8c:87:53:42:19:5d:6e:b2:43:21:
                    86:9c:6a:67:1b:ec:2e:18:ac:be:f4:4c:43:51:ed:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6B:65:FE:88:8C:F0:45:32:52:A8:AE:9E:7D:E9:EB:CF:D6:30:8C
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bd:9b:8b:dc:39:a2:24:cd:0e:98:51:24:88:fe:1f:53:0c:
         8a:b6:34:fb:4b:b7:79:5c:8f:aa:05:fb:e6:ad:d4:45:87:00:
         82:2d:a6:d3:3b:a0:ea:0c:07:ef:ff:05:3a:ab:9c:bc:08:e6:
         4d:6d:64:63:24:01:b9:1a:12:5b:19:1b:d2:bc:15:f7:18:7b:
         fc:b5:11:4a:dc:23:8c:7b:0c:a4:9a:7d:7a:fd:7c:15:4b:a4:
         0c:71:df:99:d9:1a:f0:99:cc:58:01:13:7f:e9:c2:56:b3:ac:
         d9:e3:ce:c7:76:ad:90:c0:e6:41:98:50:c9:27:49:62:d8:61:
         aa:2b:37:6b:84:ea:05:a7:07:da:62:52:f6:a8:a1:94:55:c0:
         63:dc:e3:11:e7:64:19:fb:db:a0:43:0b:48:11:3d:8f:0b:f6:
         2f:5b:3a:03:de:c2:f3:55:35:4d:ce:73:2a:5d:4f:57:af:44:
         a0:1a:e4:85:c1:f1:c5:b4:2e:2b:58:16:0f:0d:4f:5a:2c:d5:
         34:9c:19:3a:61:88:56:59:c2:bb:90:6a:e8:64:c6:08:6d:02:
         10:0f:20:04:26:ca:f5:49:f0:d3:32:12:cb:15:e2:55:01:00:
         7a:ca:49:57:73:33:f9:2d:d4:bb:6b:a3:46:bb:a2:3f:ae:1a:
         59:a3:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:07:28 2026 by rpki-client