Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          agiVU6r9vMJ/G7pcpzT0zHnIGyFNdRLSwgPM3glOEeY=
Subject key identifier:   72:72:30:6B:34:B2:B0:8A:5C:7C:7D:5A:41:73:58:91:61:31:81:7F
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       0AD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          0ACC
Signing time:             Sun 04 Oct 2026 19:29:25 +0000
Manifest this update:     Sun 04 Oct 2026 19:29:25 +0000
Manifest next update:     Sun 11 Oct 2026 19:29:25 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: opMAZLi2E79AfkHxgSzL8xH/RI8C6nqRt12+OBWHzmw=)
                          2: C6D1EECC81BE11F1A685B7C064A30FBC.roa (hash: 1Jflhq0/YWfer3B+b90vVvTGQUbz1ktB3eeCu83aIbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: Oct  4 19:29:25 2026 GMT
            Not After : Oct 11 19:29:25 2026 GMT
        Subject: CN=6ac2a915-7f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:db:79:92:4d:9d:ce:06:ff:02:2e:93:33:
                    97:61:dd:cb:4b:46:40:80:e4:39:7f:ce:27:46:b6:
                    55:7b:cf:c0:ea:32:08:9a:79:e5:22:03:3e:51:dc:
                    d9:1c:2e:d0:7e:9c:3f:4c:34:9b:0b:9a:da:86:16:
                    c2:ed:34:9a:9b:fe:51:ab:32:36:c8:9a:3b:cc:1e:
                    8d:18:f2:a1:c0:19:ca:09:3a:10:4f:3a:61:d3:6a:
                    83:99:e8:2a:1a:f4:3b:3f:34:45:da:a1:5a:f0:0e:
                    40:1b:d9:12:09:ce:1c:7f:c2:a9:c3:d2:dc:1b:30:
                    3d:07:be:ca:7d:91:66:06:76:e8:4e:30:30:f3:ae:
                    31:10:40:77:7e:71:cb:e6:74:82:21:25:88:25:73:
                    30:8c:b3:77:f2:32:b5:78:f0:f6:6f:22:49:dd:66:
                    17:c6:b8:7a:8a:c3:3e:71:b3:3f:b1:4c:19:df:a8:
                    01:cd:19:b5:ba:d1:ed:65:da:7c:8c:85:f6:d7:31:
                    7b:ae:9b:d7:8c:b5:b5:da:1b:d0:32:1c:0d:e1:f9:
                    03:ec:cf:2f:44:2d:a9:38:ad:40:86:f1:da:c8:9d:
                    fa:12:43:45:83:40:4f:13:dc:82:a5:e9:f1:2c:19:
                    49:06:7d:d7:94:3e:55:8f:83:37:ed:74:f4:c0:91:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:72:30:6B:34:B2:B0:8A:5C:7C:7D:5A:41:73:58:91:61:31:81:7F
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:78:e6:bf:7a:9c:9b:56:1d:d0:68:d1:dd:8c:8a:db:ea:
         2f:d8:53:a2:81:8e:7b:7f:fa:fe:8f:9b:17:17:2d:95:46:d0:
         8c:ef:b0:9a:7e:9a:7d:b2:52:b8:80:f8:ea:1a:4c:65:92:4f:
         fc:9c:b7:b2:0e:44:bd:56:42:1d:3c:55:70:39:47:8b:4c:7c:
         77:bd:8b:1c:35:30:9b:9c:1b:1c:6b:fe:71:6b:3e:3a:48:86:
         57:af:e3:1b:69:10:4c:5f:85:e8:30:6b:0a:ca:64:37:f3:ac:
         df:d6:bf:de:20:56:76:c6:44:82:bd:41:73:d2:54:46:1e:3a:
         d3:66:65:43:bd:13:63:ab:f8:e4:44:49:0d:80:76:65:3a:d2:
         b6:57:49:15:31:0f:de:b8:84:20:98:fc:cb:cf:38:fd:81:86:
         42:44:04:68:98:a2:86:cd:1a:b3:37:c9:0f:6f:37:49:37:5a:
         fd:a0:6d:1e:35:47:5c:23:f1:01:6f:d8:96:55:a2:fd:84:24:
         af:1e:5c:1b:02:63:66:6f:e0:39:a5:99:8f:7c:f3:a9:26:cd:
         9f:79:33:b6:d9:d7:c1:2d:33:0c:c6:3e:4b:44:80:f3:64:54:
         87:91:ea:cd:9e:80:5d:3b:76:88:ef:83:0e:20:4b:f4:2a:23:
         d1:cb:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:29 2026 by rpki-client