Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
File:                     NjEWXebubQcy5I-6Klzn3KjUA3w.mft (raw, json)
Hash identifier:          uIXcAS1NgUu9ln3khEJnxinC69HhnwI2Y89amLQ4I2U=
Subject key identifier:   6F:67:0A:24:2F:88:15:B7:84:62:C9:CC:E8:68:0E:66:85:F6:FD:49
Authority key identifier: 36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
Certificate issuer:       /CN=A913BBCF/serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
Manifest number:          36
Signing time:             Sun 25 Oct 2026 08:58:55 +0000
Manifest this update:     Sun 25 Oct 2026 08:58:55 +0000
Manifest next update:     Sun 01 Nov 2026 08:58:55 +0000
Files and hashes:         1: NjEWXebubQcy5I-6Klzn3KjUA3w.crl (hash: j7L6xtXzRsaRIuQ83/qfTG9mZvGs5oRIE6Y3ZAy122M=)
                          2: A8386F1880BA11F199241D7E93A30FBC.roa (hash: X3b6yFfF3a4hrZ2AmVdCmz6pbLFnZ96Z+2HaXzQujlk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
                          rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BBCF, serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
        Validity
            Not Before: Oct 25 08:58:55 2026 GMT
            Not After : Nov  1 08:58:55 2026 GMT
        Subject: CN=6addc4cf-673f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:bd:c7:46:2d:51:76:b7:ea:01:7d:9e:2f:
                    68:ff:df:b4:68:16:58:ee:8d:61:52:9c:ea:26:70:
                    3f:ee:5f:1f:a7:60:86:8c:5c:4a:4c:e9:97:b0:43:
                    b9:25:dd:4d:6d:be:c0:7b:d8:76:73:dd:59:57:2f:
                    7c:dc:f1:9b:6a:48:a0:b0:67:04:e4:1a:e2:f3:4c:
                    62:89:b3:17:07:aa:02:7b:6a:d6:21:08:a7:67:5a:
                    8e:0f:22:ea:2c:5a:a1:c7:e1:9d:46:a1:24:2e:47:
                    0f:a9:b8:90:78:95:13:28:e1:4a:c7:40:b9:9d:d1:
                    95:11:a6:ad:94:4a:e3:19:d5:05:ca:2c:ed:06:f0:
                    28:34:86:f4:24:3b:92:29:d2:12:7b:ed:22:e9:db:
                    c4:1e:9e:10:f7:0f:a5:fa:e4:68:db:78:b4:9b:a8:
                    68:16:a5:83:c5:48:44:6b:9b:90:2a:b5:ed:a2:0b:
                    7c:0b:fc:b6:59:56:a9:70:ee:b0:43:ae:ca:be:12:
                    aa:92:89:6d:98:de:79:f1:dd:d5:d6:f4:26:f4:82:
                    7e:d2:8b:7b:b9:d4:ea:cf:3c:f2:8d:6f:7e:3e:a9:
                    ea:c4:64:db:a6:09:fe:8e:2c:eb:64:4a:42:5f:e0:
                    c1:3c:7d:d6:21:c6:f7:2f:b5:81:83:0c:37:29:42:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:67:0A:24:2F:88:15:B7:84:62:C9:CC:E8:68:0E:66:85:F6:FD:49
            X509v3 Authority Key Identifier:
                keyid:36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:a1:54:9a:6d:db:a6:23:db:1e:26:56:45:49:cc:49:1a:
         32:83:b3:c4:f6:7f:f8:e8:d1:41:52:5f:16:92:5d:9d:6d:36:
         4b:28:84:df:31:9c:70:67:90:fc:5b:be:07:1b:ff:be:ae:0d:
         97:4c:e0:4b:2d:38:86:5e:a8:1e:e9:ed:0a:63:3d:6f:fe:d1:
         6c:fa:10:0f:65:b5:08:dd:53:35:ea:06:28:1c:5f:e0:2c:ca:
         5d:e6:f6:3a:7f:8d:86:c1:45:ec:4b:ca:83:6f:af:86:ea:56:
         b8:e6:12:36:4a:30:bb:ff:f8:c5:8f:ee:55:0a:2b:41:4a:e2:
         fa:c1:04:fb:cb:e6:67:6d:11:ff:67:87:ca:bc:8a:d8:c9:cb:
         e1:4a:b1:8d:0c:40:c8:01:76:09:43:88:3e:b5:e9:d1:a8:bd:
         51:fb:47:af:25:27:7a:c3:09:2c:f4:65:48:68:32:3a:d7:0b:
         bb:21:ca:f0:85:d8:f2:10:4e:e2:a2:7e:7c:f1:0f:61:c1:cd:
         70:19:13:17:88:ba:0a:02:ff:fb:43:d5:26:b7:94:6f:47:f5:
         5c:99:f1:05:9b:81:30:90:71:63:08:bd:98:2c:33:03:b3:ea:
         c7:c6:1d:5f:01:2f:06:95:6d:38:70:f3:e3:00:92:f8:5e:ac:
         bb:d8:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:26:08 2026 by rpki-client