Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File:                     Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier:          mj6uL8hHpU9wH8Nrbb5n/ifbxFPYwtHoP515Uyupod4=
Subject key identifier:   EE:2E:A0:A5:C7:0A:AC:CD:85:F8:8E:2B:7C:F4:70:2C:A3:4A:C6:71
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer:       /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial:       09FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number:          0AA1
Signing time:             Tue 06 Oct 2026 19:56:15 +0000
Manifest this update:     Tue 06 Oct 2026 19:56:14 +0000
Manifest next update:     Tue 13 Oct 2026 19:56:14 +0000
Files and hashes:         1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: LcUuF/k4SobmabwRhQxZBRLjs5joynLG4DJgWsFi7AU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555 (0x9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
        Validity
            Not Before: Oct  6 19:56:14 2026 GMT
            Not After : Oct 13 19:56:14 2026 GMT
        Subject: CN=6ac5525e-6ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:ec:37:7b:07:af:a8:c2:ad:03:aa:1f:54:
                    90:03:21:69:b1:d5:e0:56:7f:b6:13:3d:e0:ba:21:
                    68:40:3f:d8:d0:b0:04:e4:ef:fa:b8:b1:c7:fa:98:
                    05:62:23:c2:bc:be:7c:1e:10:be:54:7d:4d:6d:34:
                    b2:7d:01:83:59:5c:79:87:ab:63:92:1b:fa:2d:13:
                    63:32:09:45:ec:11:ad:9c:3a:0a:2c:cc:0a:4b:a5:
                    07:5a:ef:33:8a:81:87:30:2d:8d:dd:75:2f:3f:9c:
                    6a:1d:81:a2:7c:c5:7e:67:1f:a8:95:20:25:24:e4:
                    19:28:78:0a:ec:ad:a9:bd:66:5b:4e:ea:af:c6:17:
                    20:6d:b2:cb:b2:64:85:b9:ab:8a:4a:69:22:0a:3f:
                    96:d0:ca:8d:36:0b:8e:a1:d6:03:c6:48:3f:b6:2b:
                    5f:f9:da:72:ab:27:24:40:e1:f4:ac:17:ad:1f:b0:
                    54:89:ba:72:18:bf:2e:93:b3:be:10:64:33:f9:df:
                    07:26:76:8a:1f:4c:b7:ad:1d:87:e6:c6:0c:cf:17:
                    bc:b5:8b:ec:7a:62:0d:4e:07:ef:5d:00:c9:bf:bc:
                    e8:b5:b1:2f:a8:e6:2a:5a:12:c8:b9:5a:42:ff:30:
                    fd:47:af:59:6b:a9:f7:2e:80:d7:75:cb:81:44:ed:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2E:A0:A5:C7:0A:AC:CD:85:F8:8E:2B:7C:F4:70:2C:A3:4A:C6:71
            X509v3 Authority Key Identifier:
                keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:67:10:01:cf:c4:34:97:2f:c9:cd:c5:9d:27:61:7b:1a:26:
         33:1d:3f:5f:13:7d:df:e8:d1:94:7c:87:6e:35:b3:8f:41:f6:
         c7:ee:6e:ad:56:4b:d8:43:25:3b:13:06:e5:c0:b0:2b:99:00:
         55:1b:fd:77:10:01:bb:39:3d:08:b3:98:12:55:9c:33:07:ac:
         90:40:98:a1:d7:88:bb:13:06:a7:38:7b:d9:75:d7:31:32:38:
         23:01:cc:58:20:fb:be:42:f5:5f:ed:47:4a:a6:9c:f5:10:71:
         b9:c8:dd:a9:49:50:da:82:3e:78:72:2a:84:19:49:37:86:10:
         d5:70:40:38:f2:a3:90:43:51:70:7e:5d:e8:b7:6d:cd:4b:cb:
         ec:13:04:fb:40:ef:3e:21:09:36:87:32:f9:a3:26:e1:43:52:
         f6:cd:bb:72:41:05:c6:dc:2e:ac:90:d2:df:64:4b:2b:b4:ab:
         65:4a:04:3c:29:2a:1d:9c:2c:6e:1a:92:a9:93:f3:0a:34:2d:
         d0:7b:6e:68:fb:55:08:4f:12:4c:cc:d0:3e:7c:04:e4:ef:ab:
         30:7f:8f:f6:80:99:c8:a9:66:32:05:61:cd:1a:2f:e8:f8:45:
         af:64:46:14:96:78:f5:26:f6:51:36:04:1d:ac:eb:4c:e4:bc:
         ea:8f:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:59:18 2026 by rpki-client