Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File:                     ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier:          wu+lk0vpAoYOOZpmggCKB3kWLxQdc0J+8PvPZ5P34Vc=
Subject key identifier:   BD:4B:E6:05:DC:DE:C7:37:7F:06:7A:DE:49:7E:01:B5:90:CE:A1:3A
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer:       /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial:       029B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number:          028F
Signing time:             Mon 19 Oct 2026 02:15:08 +0000
Manifest this update:     Mon 19 Oct 2026 02:15:07 +0000
Manifest next update:     Mon 26 Oct 2026 02:15:07 +0000
Files and hashes:         1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: ijNFfCgdH74QFruUvVF1HxcOaaDXxb2aGTnCDI5L84Y=)
                          2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
                          3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
                          rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 02:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
        Validity
            Not Before: Oct 19 02:15:07 2026 GMT
            Not After : Oct 26 02:15:07 2026 GMT
        Subject: CN=6ad57d2c-e246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:89:0c:b1:fc:a6:b3:8b:11:33:8e:bd:8b:
                    83:d7:4f:ec:71:8f:a7:c6:5a:13:04:75:35:01:23:
                    34:51:52:cf:4e:a5:0a:57:c4:ba:a4:9e:4e:f4:4d:
                    9d:79:3f:4d:32:2f:83:ae:bf:ef:de:3d:6c:7d:d8:
                    f5:a5:5e:29:28:97:aa:78:e1:aa:6d:87:97:7c:7e:
                    80:70:f9:bf:00:6a:07:2b:03:2b:a0:db:8e:cd:26:
                    a1:a4:cd:15:79:01:e6:1b:8f:7e:9a:31:50:e4:31:
                    99:94:9f:ae:8f:f3:ef:91:ce:4f:3e:7f:28:fc:ee:
                    1c:e4:48:d8:72:63:92:d9:a8:6b:51:8c:83:a3:4e:
                    8f:ea:1d:0f:6a:c2:ee:07:98:e2:ef:db:dd:d0:fc:
                    57:a9:d4:9e:7d:fc:dc:e9:81:bd:90:05:ce:39:85:
                    8a:8a:f2:74:7b:4b:67:88:50:c5:07:26:f4:3e:32:
                    fa:73:d1:1b:6f:cd:44:38:1a:04:71:29:93:e8:1d:
                    d5:07:6f:0a:dd:0a:d0:19:02:71:d7:e9:8b:bf:08:
                    b2:3c:97:40:b1:d4:49:9e:0e:56:5b:8b:9b:cb:f5:
                    fb:89:0d:72:2c:49:82:25:25:c6:5b:b4:0d:0c:5a:
                    90:f8:b4:c7:de:40:24:a4:55:9a:de:72:63:27:52:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:E6:05:DC:DE:C7:37:7F:06:7A:DE:49:7E:01:B5:90:CE:A1:3A
            X509v3 Authority Key Identifier:
                keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:01:fe:48:65:75:1b:f5:63:15:9a:e0:5e:c1:d9:d0:92:82:
         96:80:fd:78:c9:b2:13:4f:e2:28:93:54:8b:c8:dc:30:a5:20:
         4e:4b:c8:6f:5c:03:15:1e:90:b2:e1:40:93:e7:05:e6:1d:ff:
         1b:b2:6d:20:90:cd:37:12:87:07:13:64:45:44:d2:33:7b:65:
         d5:fc:43:e1:48:d5:02:0c:db:8c:a0:e2:82:da:a5:e1:87:1a:
         08:34:35:3f:7e:a6:1c:a7:1b:36:7c:0b:55:04:41:0b:49:7a:
         a5:98:c4:dc:7c:9a:d8:53:85:aa:44:ea:4a:95:d0:2d:c4:58:
         35:8b:88:97:dd:a3:94:42:c1:9a:ca:57:61:2b:f7:ce:e4:4b:
         b8:b8:14:c5:95:af:06:23:c7:62:c7:dc:78:b4:a9:fc:f4:6b:
         3c:aa:f1:92:6c:14:36:6b:db:cd:e1:be:c5:da:35:3b:c5:df:
         6f:d6:3d:35:40:fb:32:a1:24:9a:46:77:35:1a:3a:58:3d:b8:
         8f:aa:d3:9a:95:43:3e:8a:ee:9b:94:39:51:2e:18:ac:8f:e0:
         0b:81:cc:b8:5c:ca:ac:00:d8:67:a2:9f:68:ae:a4:c2:04:d2:
         0b:72:71:27:01:10:0a:da:20:4c:7f:02:df:57:17:31:4d:a3:
         14:b3:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:05:00 2026 by rpki-client