Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File:                     nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier:          7tXJMaJ/K/2+sAcGoBGi3YHynYtQ1h6uqNYXaro+2PY=
Subject key identifier:   93:4D:9B:81:AC:E9:79:86:EA:91:5C:62:B1:C3:02:63:6E:1B:44:F8
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer:       /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number:          014E
Signing time:             Fri 09 Oct 2026 06:02:43 +0000
Manifest this update:     Fri 09 Oct 2026 06:02:42 +0000
Manifest next update:     Fri 16 Oct 2026 06:02:42 +0000
Files and hashes:         1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: MFv5qjVRvyrENH0dcVXQr+HpQyqedUMMx6WGOFwK2NM=)
                          2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: QATPpzGS/ZP7kNOUm90TMsTc1uCxiE2w36dBLpw4fDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
                          rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
        Validity
            Not Before: Oct  9 06:02:42 2026 GMT
            Not After : Oct 16 06:02:42 2026 GMT
        Subject: CN=6ac88383-c7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:73:51:63:9d:2b:5f:34:b6:23:4d:38:96:
                    51:fe:8a:72:35:5e:19:af:8a:9e:20:a7:0a:a9:ee:
                    8c:3f:e1:93:da:9f:ce:d1:8e:e8:2c:93:e8:6b:e0:
                    ca:2d:99:ec:b7:da:7c:99:ea:38:88:81:91:63:c7:
                    7a:44:5e:4b:28:5a:b2:52:38:71:d4:d9:a3:0b:ae:
                    59:5f:6b:52:4c:ae:03:2b:93:2b:09:be:3d:a4:7f:
                    a8:9c:cb:3e:53:b9:5e:ce:0f:db:5e:ba:19:92:58:
                    67:77:84:f0:29:7b:7b:3f:9f:e6:97:44:e5:55:da:
                    02:4d:be:0f:28:cd:a9:75:3c:6c:64:03:a7:f2:4f:
                    50:66:37:7e:f4:8e:17:0d:d7:9e:34:b2:16:dc:ac:
                    cd:ed:ce:26:a4:6f:97:02:8e:fb:cc:b4:ae:43:95:
                    b6:61:6b:02:6c:d2:17:1f:ed:4c:e9:69:fd:6b:ae:
                    e6:d0:df:4b:2b:1a:50:59:6b:78:cc:44:dc:27:76:
                    8d:09:31:5d:a1:09:d9:2c:5e:05:ac:8f:ef:a3:4e:
                    11:5c:5f:92:19:95:6c:4a:39:4e:3d:d7:b1:5c:69:
                    be:5f:b6:6f:8e:73:56:c9:2c:41:13:d6:18:73:00:
                    fc:cf:30:7b:e9:5b:b3:43:40:fa:5a:cf:75:ee:ee:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:9B:81:AC:E9:79:86:EA:91:5C:62:B1:C3:02:63:6E:1B:44:F8
            X509v3 Authority Key Identifier:
                keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:35:23:75:d4:f6:87:89:46:f0:78:53:61:56:86:a9:0c:
         52:05:9b:ab:a1:3b:69:8a:33:cf:b5:22:09:59:7a:ef:f2:09:
         c3:81:21:79:97:bd:c8:71:90:da:08:e0:75:97:44:50:84:63:
         40:33:aa:e9:26:77:2e:bf:cd:7b:09:80:f1:46:e0:f5:04:1e:
         f6:c1:1c:8c:bf:8f:0a:9b:f7:03:4c:b1:5f:bb:e9:b5:00:ac:
         ce:b8:28:4a:4c:c1:54:b4:41:52:85:87:b4:ec:3d:5c:7c:ae:
         75:2c:66:83:04:5b:e0:e9:27:d6:e9:dd:cd:55:f1:a3:0a:64:
         28:c4:26:48:3e:71:a1:d0:85:0a:6b:38:b2:84:f6:2e:36:f0:
         88:9e:62:0e:3f:91:78:60:d5:d0:bb:be:1e:4d:60:0a:4e:a2:
         61:d6:df:16:61:88:ed:ec:6b:f0:d6:62:f1:59:ef:ce:3b:58:
         bf:ed:72:f0:c3:eb:d6:c0:a6:a5:8a:0a:2d:9e:33:92:9e:6a:
         d3:51:58:76:0a:46:ae:70:40:3d:6f:9a:28:07:d6:90:3e:2e:
         fc:f6:79:8e:c5:9f:ab:fb:15:d4:f8:88:22:b7:69:4e:50:70:
         5c:18:43:2f:ce:f3:69:72:a2:4e:a6:df:b2:05:b1:e8:84:7b:
         4e:da:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:37:55 2026 by rpki-client