Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
File:                     NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json)
Hash identifier:          d9cp1141Z/Ql9AUswysmHoCvHoBmICF7PmnTLqU4sfY=
Subject key identifier:   98:87:F4:42:7A:77:1C:40:A1:7C:C0:5F:9B:0A:46:13:17:FA:AA:16
Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
Certificate issuer:       /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
Manifest number:          A4
Signing time:             Tue 03 Nov 2026 08:20:02 +0000
Manifest this update:     Tue 03 Nov 2026 08:20:02 +0000
Manifest next update:     Tue 10 Nov 2026 08:20:02 +0000
Files and hashes:         1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: mbKVOAKeNKW7FaO0h5ryFniGJFN44qFudB6Otc9W2UA=)
                          2: tE5E0PkBfHVlVOO6PcH2dLYRhBI.asa (hash: YGuI35c5wnKOlIeWJVRZR0sBJzmCUuehkgBmplavslo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
                          rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 08:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
        Validity
            Not Before: Nov  3 08:20:02 2026 GMT
            Not After : Nov 10 08:20:02 2026 GMT
        Subject: CN=6ae99932-aa53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:17:ab:9f:ef:6c:ee:6b:fb:9d:44:77:83:
                    db:f6:03:ed:60:b2:1f:b5:15:0b:b1:1e:c4:a9:e1:
                    f6:de:0e:2e:6d:49:28:88:74:22:39:35:f7:ea:6d:
                    86:14:13:32:d6:55:f1:14:54:95:ec:20:9b:e3:f1:
                    46:87:6d:7c:ac:cb:99:ae:17:28:c4:9a:ff:37:d2:
                    3d:09:73:ab:be:23:2d:d0:30:18:3b:29:25:97:59:
                    37:9a:12:4a:4b:b7:36:4e:cd:a0:e2:b9:08:92:4d:
                    a1:1c:d4:7a:80:f9:fb:9d:d8:5b:4d:77:f1:6e:63:
                    34:0e:07:46:3f:83:48:82:2c:52:9f:04:fa:43:d2:
                    85:cb:d0:e4:74:e3:53:cb:42:0e:1d:c6:74:e8:65:
                    7f:e3:fa:6e:e2:82:35:27:d0:a7:a0:5b:f1:fc:42:
                    8f:b1:ff:b7:dd:51:02:01:66:83:1b:07:40:ea:33:
                    db:85:0f:2b:33:ea:e8:8b:74:db:07:c6:e9:63:51:
                    ab:ad:f7:0e:57:d7:4f:2a:dc:79:da:3d:56:48:58:
                    58:bc:20:66:97:f5:27:2b:2c:a4:ee:e8:57:92:24:
                    7c:5f:a2:48:b1:99:e6:15:a3:37:f6:e5:ff:59:75:
                    1e:bc:e0:e7:cf:bb:a7:2c:aa:c2:3d:28:50:d9:55:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:F4:42:7A:77:1C:40:A1:7C:C0:5F:9B:0A:46:13:17:FA:AA:16
            X509v3 Authority Key Identifier:
                keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:03:cf:6a:97:77:fa:ab:44:e0:ec:81:30:6e:35:20:31:
         db:cd:af:47:f4:3b:d3:de:93:6a:27:17:94:62:86:b7:36:d4:
         85:e1:8f:ca:fd:7b:d6:fa:22:23:36:11:40:ac:1d:f2:f5:23:
         04:f5:69:df:b6:bf:23:83:8f:e6:e6:f6:41:76:55:64:80:7f:
         4a:44:b8:36:09:3c:83:16:d6:9a:a6:69:01:7e:0e:51:b4:ba:
         bb:10:0d:8b:17:2b:ff:5f:ff:c3:3b:24:2b:4b:9a:dd:ec:d6:
         5a:83:52:c4:ba:72:8f:17:1d:80:72:5b:54:be:30:85:fc:0f:
         0b:ae:c3:12:72:0b:42:d5:77:14:f8:5d:db:55:f1:e7:2b:f2:
         d0:c8:d6:04:32:73:53:65:10:92:52:91:b2:ac:05:4c:03:af:
         3a:32:91:2b:f7:2b:3e:a6:fd:33:34:fd:7f:ed:6a:96:91:31:
         32:97:7d:8a:4d:64:7f:83:0c:fb:bc:c4:5b:4e:4f:b8:1e:f1:
         5a:99:37:e8:75:9a:07:d9:dd:cc:cc:f4:3a:6d:5e:a0:0e:c6:
         5b:80:ae:db:b7:8b:2f:fe:05:cc:87:9f:b4:43:df:dc:40:7b:
         54:4d:cd:ce:09:56:25:08:38:3b:ec:c8:4e:3a:78:36:92:e3:
         ef:35:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:18:04 2026 by rpki-client