Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
File:                     nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json)
Hash identifier:          2IxQCpWty5WW0cAcdS64U1Evurww7cBCr1p/bjnJgjg=
Subject key identifier:   24:3A:22:F7:59:65:0B:F2:89:5B:3A:B7:E6:32:BD:C2:84:E5:D9:41
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Certificate issuer:       /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
Manifest number:          6A
Signing time:             Fri 09 Oct 2026 08:47:24 +0000
Manifest this update:     Fri 09 Oct 2026 08:47:23 +0000
Manifest next update:     Fri 16 Oct 2026 08:47:23 +0000
Files and hashes:         1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: YYH8bicDZuWd6Vwl3/TE39vYqGlzuNlhHdRQHj6Awcs=)
                          2: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: Dxatxl0qTUfSTcpFhvzbVVvCfebatpASoJvF3ceeN4E=)
                          3: B62F5378265811F1B0D864DEA4833773.roa (hash: 7B8gmV6iHverE08GlcTlaq7wwspFdqgeT6UL4102FlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
        Validity
            Not Before: Oct  9 08:47:23 2026 GMT
            Not After : Oct 16 08:47:23 2026 GMT
        Subject: CN=6ac8aa1c-3249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:25:e2:32:d3:1b:b3:91:69:11:38:af:2f:
                    2a:83:d9:49:19:c9:33:85:40:e3:13:a3:3c:e3:c7:
                    5a:29:09:2f:ea:dc:e3:ac:82:f4:42:77:00:eb:64:
                    d2:26:ed:71:33:dc:50:08:b7:4c:be:72:b6:70:23:
                    69:b7:d6:9e:c5:6a:f6:f7:b8:02:56:9e:7b:4e:15:
                    95:43:e9:9d:a7:bc:aa:3c:27:6e:fc:b3:a4:7f:2a:
                    24:c6:13:e7:32:71:bf:59:1c:c3:4e:a8:86:13:bd:
                    96:31:b0:ab:50:39:21:63:78:3d:41:38:5c:f9:82:
                    ab:c9:fe:52:3e:b9:ab:96:0b:c4:bc:ef:4e:d8:43:
                    42:5b:8c:b3:62:e0:79:20:fe:aa:a9:8d:38:94:bb:
                    68:39:02:cb:ff:3a:3b:d1:db:d6:f1:e6:fb:09:a0:
                    c4:c6:f4:30:8a:e0:31:df:97:d8:d7:29:2a:f8:b5:
                    5d:21:7f:81:c3:5d:7c:06:92:74:93:40:07:ff:15:
                    5b:42:d6:76:1e:b3:fa:33:01:30:ee:4d:35:84:34:
                    73:80:c8:6c:11:e8:98:b3:45:fe:51:55:cc:89:78:
                    fa:de:e1:a9:a1:3c:2f:7d:31:47:59:f2:5c:38:67:
                    3b:4e:d2:93:4f:06:b7:d4:45:04:0a:9f:ac:fd:01:
                    4a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:22:F7:59:65:0B:F2:89:5B:3A:B7:E6:32:BD:C2:84:E5:D9:41
            X509v3 Authority Key Identifier:
                keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:03:7a:7a:6a:44:c9:7a:32:0b:df:b9:07:a8:73:01:f0:10:
         bc:f3:2e:b2:2b:bf:a4:73:7d:8d:d0:04:c3:91:34:12:4f:df:
         50:4a:99:15:fb:71:ec:c5:65:e2:de:d9:4a:bd:b5:39:14:0a:
         75:3b:c1:5b:07:88:d5:df:b0:ea:5d:4e:88:c1:03:9e:1d:f6:
         30:46:3c:10:f3:d2:c3:8a:fd:d2:68:f1:bf:1b:8f:42:b0:f5:
         63:26:42:06:21:53:b0:01:9d:52:90:e5:97:22:bd:f8:0b:15:
         79:83:1b:20:02:e6:9f:ef:f7:58:ea:5f:b7:c0:e2:6e:52:c1:
         89:5b:c2:79:7a:ff:69:9a:29:32:94:9d:b2:e1:43:71:99:5b:
         c0:52:b0:6d:ff:0d:3e:1d:65:5e:85:a4:c7:0d:5a:aa:89:8a:
         71:c6:49:f1:7c:4c:60:81:a3:d8:3a:3e:69:78:80:8a:62:19:
         c8:d8:c2:54:99:eb:49:b4:e7:c6:09:f5:4b:4b:0e:b6:e6:45:
         df:b7:30:a9:49:7b:eb:60:05:bf:b7:93:2b:96:9c:1e:89:39:
         81:2a:d1:74:cc:b5:7f:12:37:3e:10:0f:a9:c5:11:6c:d4:ef:
         fc:0e:42:2a:2b:f1:0b:a6:97:46:3e:55:88:7d:47:c2:36:b9:
         16:67:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:12:19 2026 by rpki-client