Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File:                     nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier:          28w47EC3uXdTuTH8gg/ei+FyBqMvrJXU+71RhRmm6rI=
Subject key identifier:   0E:A9:95:A4:B0:08:BE:03:E1:13:56:CB:7A:8B:A5:B7:3D:DF:F5:96
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer:       /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number:          022D
Signing time:             Sat 03 Oct 2026 03:22:56 +0000
Manifest this update:     Sat 03 Oct 2026 03:22:56 +0000
Manifest next update:     Sat 10 Oct 2026 03:22:56 +0000
Files and hashes:         1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: Om6V5at8+Ue3CgPTc8ngCOZAEOifPB2apMENlg1FT8k=)
                          2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
                          3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
        Validity
            Not Before: Oct  3 03:22:56 2026 GMT
            Not After : Oct 10 03:22:56 2026 GMT
        Subject: CN=6ac07510-202d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:59:e2:3f:d1:83:c4:9c:87:81:23:fa:45:
                    d3:67:56:33:5d:91:ee:b1:a4:fa:73:33:7a:be:b3:
                    1a:96:d1:fa:22:28:c3:ae:7a:c2:19:65:3c:81:40:
                    d2:37:69:bf:f7:d1:0b:ee:22:05:8d:ee:5f:81:a8:
                    22:b9:6d:26:90:2d:cc:b8:30:33:a0:37:b8:cb:e2:
                    d3:c7:e7:2f:7b:90:40:54:61:c6:3a:a3:dd:ea:29:
                    55:8b:f1:80:24:7b:a3:76:57:02:d0:4c:98:55:9a:
                    cd:3c:a6:aa:42:13:f9:ee:24:52:ac:12:3d:6f:fc:
                    76:58:a7:1f:dc:a2:a0:8a:88:22:f2:22:ca:9d:3c:
                    e0:52:84:d3:df:7c:03:38:05:29:b4:c2:7e:e8:e6:
                    b0:65:59:77:aa:80:b2:f8:b0:26:d1:ac:ca:a0:b8:
                    ff:47:67:75:8c:60:b9:1d:7b:39:64:3f:99:e7:25:
                    75:bf:fd:15:c0:a5:dd:63:6b:8e:e6:40:a9:3c:a9:
                    f2:8c:86:aa:86:89:ae:9c:d5:c4:dd:04:7e:d9:fb:
                    57:e3:81:71:f6:59:4d:56:04:09:0a:7a:a7:99:f0:
                    14:86:cc:67:52:5e:68:a6:3d:1a:6a:01:37:b6:be:
                    10:62:0f:4c:b3:93:e9:1d:f2:ed:f3:82:8f:0b:ad:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:95:A4:B0:08:BE:03:E1:13:56:CB:7A:8B:A5:B7:3D:DF:F5:96
            X509v3 Authority Key Identifier:
                keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:e9:11:c1:bb:1c:25:86:9d:f1:2c:1b:08:d8:a3:42:bf:
         ed:1e:bb:db:1f:bc:5b:74:bf:b6:46:5c:86:2a:a5:b5:8a:2e:
         07:ce:07:f3:4f:bf:6f:33:d1:f7:15:c2:47:77:0a:bf:77:de:
         24:f5:98:39:10:31:8f:83:e4:7c:54:97:8a:cd:51:d8:3d:aa:
         a4:f8:55:b7:c1:6a:46:7b:f2:96:9a:04:61:01:7d:da:29:8f:
         58:6d:8a:99:ec:5c:0b:1c:2e:7c:46:71:7f:ed:3f:e6:bc:bb:
         20:d1:4a:34:7c:5e:4d:d4:09:84:9d:8b:26:3a:6e:bc:a8:da:
         b5:a1:10:88:e3:5b:e2:3f:65:e5:46:cb:51:33:8a:95:03:a9:
         6d:43:02:ab:31:44:3a:41:22:bb:d7:98:1d:c8:55:65:fd:54:
         65:70:d3:08:97:92:01:da:d6:23:9a:55:fc:9b:48:79:37:f9:
         1c:56:64:80:17:ae:bb:e1:58:a4:11:f2:50:03:5b:d7:0c:d3:
         2f:15:51:0b:8d:a2:79:d1:8d:e0:36:fa:6c:1b:ae:5b:4b:19:
         cf:f9:b9:7f:8a:04:12:c6:85:33:a7:56:70:6f:2b:d9:01:55:
         bd:3d:ac:73:0f:2c:6f:2e:c3:1b:f3:70:2b:7f:af:07:55:46:
         d1:88:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:32:46 2026 by rpki-client