Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          8qrsdm3oPAdtbswMioOoVDezRBCkQQmBEgbygLbto9g=
Subject key identifier:   DE:7A:7F:C8:04:88:FC:8E:3A:8F:9D:99:7D:FE:DE:ED:3A:EF:25:B0
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          0169
Signing time:             Sat 05 Sep 2026 04:43:48 +0000
Manifest this update:     Sat 05 Sep 2026 04:43:48 +0000
Manifest next update:     Sat 12 Sep 2026 04:43:48 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: 2S2LJV60jAMQmJ53aDEX4M7X0m45YcdyITJw0E9wvzM=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: V872BKoP+6xA+AKHKazK8vltDdfADU0ViwH62hx/F6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Sep  5 04:43:48 2026 GMT
            Not After : Sep 12 04:43:48 2026 GMT
        Subject: CN=6a9b9e04-c818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:19:8f:52:6c:af:e6:c7:27:8e:75:d2:c7:
                    82:b3:8c:be:b3:63:c2:bf:72:aa:d3:47:57:56:17:
                    54:b5:bb:50:80:fa:03:9f:23:a8:24:b4:93:63:8c:
                    78:dc:41:fd:40:97:72:f8:9f:ce:9f:46:52:58:ab:
                    75:ca:af:8e:c5:6d:a6:75:69:ba:48:d5:ea:fc:cd:
                    30:57:df:fe:2c:6b:df:5e:91:a3:c2:5e:4c:50:0b:
                    53:8d:a4:55:b9:fd:0a:03:76:15:ff:a0:1a:51:2d:
                    35:e6:d7:04:e6:5f:8f:eb:e7:50:74:e6:9c:e4:71:
                    0a:38:1e:19:3d:3c:f8:66:08:11:7e:03:40:a5:51:
                    7e:54:f2:4c:c3:f5:b4:1a:d8:0e:86:a2:73:de:dd:
                    db:d0:b5:5d:0e:2b:4d:9d:bf:82:76:2e:9b:69:bc:
                    3f:8b:c8:d7:42:6a:08:ef:b0:de:aa:bd:d7:ea:94:
                    c9:83:21:31:a4:9f:a4:45:53:6a:4c:40:05:56:5f:
                    9e:ca:07:96:43:c3:bd:2c:95:bc:1d:05:a7:95:c2:
                    9f:1e:3a:66:ca:78:5a:dc:fe:97:11:f6:cf:06:15:
                    e4:1a:b3:b5:d8:db:16:e9:fe:9d:60:e3:e6:50:77:
                    f0:67:cf:9c:13:d3:0b:5f:71:d3:f1:a8:f6:c0:96:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7A:7F:C8:04:88:FC:8E:3A:8F:9D:99:7D:FE:DE:ED:3A:EF:25:B0
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:67:cd:2b:4c:88:d2:c9:1b:4c:0c:ba:97:69:9e:f9:1e:18:
         25:24:40:28:58:a6:b3:a7:68:92:69:d2:85:2c:70:3d:66:f2:
         84:72:34:d7:48:88:a7:a1:07:9a:38:f2:22:7e:d0:83:03:b2:
         80:af:99:5e:1c:b0:36:25:a3:77:33:e3:b1:46:92:67:10:6d:
         1e:64:2e:73:c5:51:81:09:eb:c9:b1:dd:7a:1d:a3:3d:c6:54:
         26:93:01:80:16:62:05:5d:b5:09:c6:b2:65:a9:ac:f9:e6:3c:
         ab:3b:51:3f:44:9c:e4:f9:ab:b1:ac:9a:c2:30:90:28:a4:b0:
         30:58:04:9b:49:8c:5a:89:77:79:74:08:86:04:22:97:75:58:
         6e:e5:4c:65:9d:ed:9f:32:c1:fd:3b:2b:6d:42:4e:ff:12:9a:
         c0:88:76:33:aa:b2:82:4a:88:65:4e:d2:8f:17:0a:70:69:1d:
         26:43:4c:a9:ea:e0:bb:d1:a5:5a:1b:2d:5f:95:7c:54:ea:0d:
         22:80:65:83:65:8f:a7:8a:45:c1:61:9f:5a:32:f7:28:52:30:
         5c:ee:c0:27:9a:fc:21:9c:5a:57:b1:c3:f6:9c:27:6c:db:40:
         32:67:82:5f:70:c8:69:7d:c1:a3:a1:2f:24:d3:15:70:c4:b7:
         57:6e:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:14 2026 by rpki-client