Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File:                     NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier:          Zw6DW8CpHwEUW6upDz8ZlrvOLW4wJETGJXsvfDASU6c=
Subject key identifier:   81:C5:B7:1D:2F:F6:7E:D5:64:FA:86:59:30:F8:47:9A:AD:8E:1A:87
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer:       /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial:       0BFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number:          13D6
Signing time:             Fri 02 Oct 2026 19:10:00 +0000
Manifest this update:     Fri 02 Oct 2026 19:09:59 +0000
Manifest next update:     Fri 09 Oct 2026 19:09:59 +0000
Files and hashes:         1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: d9Hrf8rTEByGfYjl1BoAxYtyOpgfNd9ZVZcE/UTjOK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3066 (0xbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
        Validity
            Not Before: Oct  2 19:09:59 2026 GMT
            Not After : Oct  9 19:09:59 2026 GMT
        Subject: CN=6ac00187-b2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:9b:45:77:16:76:52:c2:df:5e:ad:0a:0d:
                    d0:a3:d3:82:ad:e3:5d:53:db:44:6a:d6:79:9a:b2:
                    e4:3e:cc:cd:5e:f6:f7:cd:25:bf:66:ee:13:51:30:
                    1e:19:05:95:f6:a8:a9:2d:5e:6c:45:f7:d7:4f:d4:
                    0c:62:94:4a:81:cf:7f:6e:c3:f0:a4:6f:a9:00:0a:
                    d7:93:5c:29:5e:cd:63:8c:5e:58:dd:a6:e7:1e:21:
                    46:95:b9:9c:dc:87:5b:41:97:38:e6:6f:df:c7:bb:
                    2a:19:17:04:7f:2c:be:52:d5:49:43:8e:b9:0c:2b:
                    e8:34:92:63:c4:ed:56:5c:74:d6:65:3a:87:aa:c8:
                    63:ac:f5:63:36:ff:79:b7:a8:f4:08:4f:61:3e:9b:
                    01:1f:0f:2a:dc:31:8c:2d:f6:a0:75:94:96:2d:ef:
                    fc:43:da:d8:58:ed:fb:da:ef:60:c5:a9:d4:95:73:
                    5b:ba:4c:9f:96:37:58:8a:28:25:93:d9:54:16:22:
                    68:4c:1f:a0:55:19:11:68:57:a0:5a:47:ce:d2:1c:
                    77:83:94:81:00:60:c7:18:84:ee:92:c0:2d:18:0a:
                    ab:f3:ad:10:f8:9e:24:47:13:aa:e0:30:53:88:b0:
                    4b:8e:72:b3:f0:eb:7c:00:65:7e:7f:17:11:04:7f:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C5:B7:1D:2F:F6:7E:D5:64:FA:86:59:30:F8:47:9A:AD:8E:1A:87
            X509v3 Authority Key Identifier:
                keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:63:9c:48:3e:ff:98:19:25:38:79:a3:db:da:f1:28:e2:
         bc:e6:19:4a:07:be:64:10:23:31:22:15:8c:a8:93:5f:a0:72:
         4b:dd:da:4a:b8:92:de:97:a1:81:a0:33:75:ec:92:61:42:31:
         32:0c:e4:05:ba:ea:2e:05:35:7e:89:76:87:b6:0d:93:75:d3:
         60:59:76:c1:53:a2:35:39:3d:d3:20:4e:6c:c5:a0:3e:76:67:
         be:c1:2a:56:9e:69:1a:39:02:73:42:d2:66:57:3f:37:da:72:
         fa:20:d7:f1:71:f0:80:8e:c9:28:6f:c9:7b:64:37:e0:7f:1c:
         7b:ed:91:ee:31:fd:d5:93:2a:1d:03:fd:68:cf:f3:a5:cf:a0:
         f5:d3:25:7b:f1:9d:3a:26:e5:be:7a:ce:ce:19:b3:ce:15:d1:
         5b:b8:4b:8f:4f:31:25:02:45:e4:3c:61:b0:46:97:e9:70:1a:
         67:6c:eb:fd:14:df:29:6d:3d:15:5d:43:35:ef:cd:19:5a:20:
         b4:34:22:84:34:ee:a0:ac:9d:9b:7a:e6:e3:a2:fa:39:7c:5b:
         3f:0a:cf:9c:65:ad:53:aa:d4:ee:fd:6d:df:45:3f:0c:98:3d:
         79:23:2d:07:c1:a5:7f:f8:77:d1:34:23:b7:0e:84:54:96:ef:
         3d:7a:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:01:44 2026 by rpki-client