Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
File:                     nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json)
Hash identifier:          zku6SQNVeAKEK1tqreO8t9V4LCUvNBpN6EfRgohgU9U=
Subject key identifier:   E0:0D:CE:F6:C9:56:61:48:F9:AC:E2:EB:19:5D:4B:DD:01:E1:25:30
Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
Certificate issuer:       /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
Manifest number:          01A5
Signing time:             Sat 17 Oct 2026 04:45:21 +0000
Manifest this update:     Sat 17 Oct 2026 04:45:21 +0000
Manifest next update:     Sat 24 Oct 2026 04:45:21 +0000
Files and hashes:         1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: 8IzpdilvCeHMj967RdZJ+nqB2BuENqsO/sC6ghuVi0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
                          rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 04:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
        Validity
            Not Before: Oct 17 04:45:21 2026 GMT
            Not After : Oct 24 04:45:21 2026 GMT
        Subject: CN=6ad2fd61-1d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b7:7e:2e:6e:32:9c:89:89:35:06:a8:e1:73:
                    1e:61:50:c5:ac:d3:11:64:e6:89:d9:0a:4b:d5:ce:
                    7c:b9:89:7d:4b:63:d7:dc:f5:f6:84:8c:6f:a0:70:
                    02:27:94:e6:11:0c:35:16:0b:e4:e7:c3:a1:56:46:
                    5b:e5:a1:15:97:4c:05:9b:2d:ba:02:cd:e3:e9:05:
                    f7:f2:00:18:f2:fa:9b:aa:c7:ff:03:6b:03:65:27:
                    92:8c:61:7f:71:e0:f7:8c:2b:4f:37:6d:b4:ed:79:
                    f0:7d:74:cf:14:0c:61:e8:73:91:0c:f9:de:6d:ac:
                    da:26:1b:52:bc:9e:b7:86:0a:db:9b:26:81:f7:42:
                    98:16:d3:8e:1a:10:11:1e:c7:03:af:d8:d5:b7:2c:
                    db:ae:ef:12:73:86:ab:0d:8e:8a:a8:49:da:dd:a2:
                    5e:0c:a8:a8:92:96:53:f3:aa:39:b2:b4:14:fe:8c:
                    76:58:34:94:53:4e:91:3c:38:4b:d8:6c:91:12:58:
                    54:ea:69:a8:d8:56:a6:50:80:f4:8f:1f:83:81:48:
                    bd:20:c6:52:28:89:7f:ea:df:18:06:75:0a:cd:16:
                    fa:d8:d3:18:5a:a5:37:c7:54:d3:26:42:02:9a:16:
                    9e:69:91:30:a6:72:31:43:2c:6c:a9:db:5a:58:81:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0D:CE:F6:C9:56:61:48:F9:AC:E2:EB:19:5D:4B:DD:01:E1:25:30
            X509v3 Authority Key Identifier:
                keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:e7:e3:12:d8:36:5f:ff:27:5a:d2:16:59:95:8c:cc:55:
         08:1d:7e:72:dc:92:98:02:75:90:e9:e7:1c:9d:3a:62:68:b0:
         1e:1e:0c:1d:ee:2b:91:1d:49:20:5b:37:02:43:e3:74:85:15:
         81:7c:22:9c:cc:a6:ba:b4:ba:ee:d1:b9:7f:6c:e9:65:2d:10:
         86:2c:68:35:04:1c:05:cc:96:fe:27:ab:9a:06:c2:30:16:92:
         e5:87:77:89:39:b0:f9:02:7b:28:e0:9b:81:01:21:2b:df:7e:
         6e:0a:d6:6e:1e:27:2a:ae:09:04:51:27:49:04:cd:d1:bc:42:
         21:45:95:db:14:37:37:93:3d:04:9f:49:34:f2:db:b5:08:9d:
         d4:92:9e:ec:3e:c4:cc:57:98:38:3b:4c:11:31:b9:fa:65:c9:
         06:76:82:2e:ae:91:98:fc:cd:b2:4e:38:5e:20:6d:d9:ca:33:
         44:df:e5:76:f0:b6:fb:a2:c6:53:dc:7c:55:0e:65:9f:00:68:
         f2:68:6f:2b:cf:85:7a:66:96:d6:dc:6c:6c:8f:58:a1:48:cc:
         d9:16:0a:0b:0a:57:ba:ff:c0:65:b8:cf:5d:bf:b1:f1:15:03:
         0d:9a:e9:83:7e:b7:33:9d:e4:38:40:df:c2:60:ce:c6:69:28:
         fd:56:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:36:16 2026 by rpki-client