Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
File:                     nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json)
Hash identifier:          kZcojXnYwVjZDhXN/k2BOGZUjQ3h+NMTgkPXwM69o7Y=
Subject key identifier:   BF:75:76:3D:5A:E5:6A:E2:7A:18:F9:FA:B7:0F:F6:4E:53:BA:B3:70
Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
Certificate issuer:       /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
Manifest number:          EC
Signing time:             Fri 09 Oct 2026 07:11:12 +0000
Manifest this update:     Fri 09 Oct 2026 07:11:11 +0000
Manifest next update:     Fri 16 Oct 2026 07:11:11 +0000
Files and hashes:         1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: b8Eu3V55gz35O53psWnexS75yTQeRHrY5z+v8nR1yik=)
                          2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: IYXOhXL6bJ68pYNK/kTrLKmd+mngJz9PldPbItCSzvQ=)
                          3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: mEE2s8TFrbg3u/2M8DQXMANj0UbWZqDl7u6JBf6OnyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
                          rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
        Validity
            Not Before: Oct  9 07:11:11 2026 GMT
            Not After : Oct 16 07:11:11 2026 GMT
        Subject: CN=6ac89390-4c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:5f:66:38:22:1b:e1:42:ab:9f:e9:f0:f8:
                    53:bc:a1:c2:cc:0f:45:95:a3:db:56:00:41:d2:a4:
                    f4:40:a3:3d:61:a8:0f:71:f0:09:66:8c:60:3d:2c:
                    b5:2e:4d:4a:6e:1b:39:1f:ab:1a:cc:89:71:38:86:
                    31:a0:a5:cc:93:96:c2:5f:96:9c:5c:f7:fd:c2:d5:
                    b4:5c:8e:0a:cf:7d:52:8b:7b:4e:15:e9:a0:a9:7d:
                    ad:a0:47:c5:0e:d5:9b:3c:31:0e:22:c0:6a:a6:7a:
                    fe:d4:50:73:b0:cd:ff:f7:7c:d3:1b:31:8b:e3:70:
                    2b:84:17:f7:11:5c:e9:cb:38:c3:f2:d9:af:33:e4:
                    17:42:9d:01:cb:e3:ab:15:75:39:0d:88:cf:1d:c9:
                    b8:92:02:12:7f:f1:2a:e6:5c:2a:76:30:62:52:69:
                    03:c2:70:a5:8e:e3:64:4e:5c:8b:20:43:f6:08:6d:
                    e7:44:cb:ad:5d:e4:b1:d9:a9:cf:21:85:57:7a:a2:
                    cb:15:5e:51:0f:d7:d9:49:b3:5e:d8:0b:33:8d:af:
                    46:b2:e6:dd:cf:4b:92:2a:48:af:3c:b4:34:da:f1:
                    26:cc:32:6b:26:6e:69:28:43:87:01:de:bd:31:0d:
                    39:c5:28:e5:e3:c4:e4:8f:26:92:f7:57:27:3b:5f:
                    b7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:76:3D:5A:E5:6A:E2:7A:18:F9:FA:B7:0F:F6:4E:53:BA:B3:70
            X509v3 Authority Key Identifier:
                keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:32:21:c6:59:42:ac:1d:29:57:31:42:3c:72:a2:ce:ae:
         37:44:35:c5:13:22:04:7d:85:6e:ff:c2:38:01:f7:1f:cd:72:
         86:21:9d:3e:26:7e:4e:cf:9f:ba:23:02:4d:24:ab:54:e3:bd:
         c5:84:a3:22:65:da:1f:99:af:39:b9:24:6d:b3:97:d6:38:9a:
         7e:6a:cd:83:d2:3c:96:11:b7:b2:29:e3:87:53:f6:5a:99:5d:
         28:16:6e:70:cb:84:7e:6f:58:86:aa:3f:85:c0:88:59:03:78:
         3a:e6:b6:e5:da:f6:0f:e0:18:d5:ab:6c:53:80:55:e8:5a:11:
         66:82:ff:fe:17:e6:fe:8e:4f:91:58:df:8b:36:ce:af:19:87:
         74:d5:04:b9:8d:7d:b7:de:f4:eb:ba:61:75:ef:81:3b:2e:1a:
         e1:c9:1e:d5:ae:79:ad:2c:d1:3e:27:3a:59:65:fd:0b:43:eb:
         4c:ea:e5:8e:0d:60:af:a3:74:d3:15:80:e6:7f:1d:cb:88:57:
         e9:58:2d:fa:1c:bd:e7:f4:49:ec:59:bc:b8:f1:84:8f:a3:1d:
         7f:44:2d:1f:7d:a7:a5:2e:a3:98:b0:10:52:b9:c5:5a:0f:bd:
         7c:b3:e8:af:08:17:c7:9c:fd:a7:15:bf:12:36:c2:b8:bf:da:
         2b:ff:62:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1
N0ZFNTQwNkEwHhcNMjYxMDA5MDcxMTExWhcNMjYxMDE2MDcxMTExWjAYMRYwFAYD
VQQDEw02YWM4OTM5MC00YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovZfZjgiG+FCq5/p8PhTvKHCzA9FlaPbVgBB0qT0QKM9YagPcfAJZoxgPSy1
Lk1Kbhs5H6sazIlxOIYxoKXMk5bCX5acXPf9wtW0XI4Kz31Si3tOFemgqX2toEfF
DtWbPDEOIsBqpnr+1FBzsM3/93zTGzGL43ArhBf3EVzpyzjD8tmvM+QXQp0By+Or
FXU5DYjPHcm4kgISf/Eq5lwqdjBiUmkDwnCljuNkTlyLIEP2CG3nRMutXeSx2anP
IYVXeqLLFV5RD9fZSbNe2Aszja9Gsubdz0uSKkivPLQ02vEmzDJrJm5pKEOHAd69
MQ05xSjl48TkjyaS91cnO1+3vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL91dj1a
5Wriehj5+rcP9k5TurNwMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2
MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR
R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3
bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkqsyIcZZQqwdKVcxQjxyos6uN0Q1xRMiBH2Fbv/COAH3H81yhiGdPiZ+Ts+f
uiMCTSSrVOO9xYSjImXaH5mvObkkbbOX1jiafmrNg9I8lhG3sinjh1P2WpldKBZu
cMuEfm9Yhqo/hcCIWQN4Oua25dr2D+AY1atsU4BV6FoRZoL//hfm/o5PkVjfizbO
rxmHdNUEuY19t97067phde+BOy4a4cke1a55rSzRPic6WWX9C0PrTOrljg1gr6N0
0xWA5n8dy4hX6Vgt+hy95/RJ7Fm8uPGEj6Mdf0QtH32npS6jmLAQUrnFWg+9fLPo
rwgXx5z9pxW/EjbCuL/aK/9iRg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:02:46 2026 by rpki-client