Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          J0/3kf1+zMbWfbw7lAntwIODok1kVeiiGaBQLgD2x5E=
Subject key identifier:   FF:3B:A7:9B:5F:E8:26:69:37:A7:09:4E:66:71:BB:D3:83:46:AD:59
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       152D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          1522
Signing time:             Thu 22 Oct 2026 16:50:32 +0000
Manifest this update:     Thu 22 Oct 2026 16:50:32 +0000
Manifest next update:     Thu 29 Oct 2026 16:50:32 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: xyhZWDpCupNNHzphLRUY0YDnOyJrsg6gL1NBPAhGDa4=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: W6FOTcn74gf4+0BoMZOpH6DC5rviJxuaWu2OotOF9rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
                          rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 16:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5421 (0x152d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Oct 22 16:50:32 2026 GMT
            Not After : Oct 29 16:50:32 2026 GMT
        Subject: CN=6ada3ed8-0435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:86:b0:c8:62:12:6f:bd:c1:29:11:93:c7:
                    77:89:4a:3a:78:36:92:27:80:33:39:0a:84:fc:4e:
                    53:31:68:a5:c1:e0:7c:de:d3:98:f7:3b:34:a7:ff:
                    49:40:14:85:c1:25:13:09:6e:81:48:b8:1a:5b:39:
                    fc:0d:d2:10:90:b3:6a:b8:5b:9a:71:bd:1b:30:34:
                    34:ae:97:0b:9c:af:cb:fa:51:9e:f7:95:88:0a:6e:
                    65:2c:a0:a8:90:03:a1:4f:f6:6c:92:72:45:a8:90:
                    e8:e6:04:44:49:bf:db:81:01:5c:1b:dc:34:1b:f0:
                    e1:8a:99:ec:c9:f6:b2:07:58:3f:01:b5:4f:73:f5:
                    91:32:fd:59:72:20:56:f3:46:5e:a7:80:99:26:4b:
                    b5:f9:fe:1b:e0:2e:ea:d4:fb:d4:a3:c4:21:a5:8f:
                    68:e3:dd:6f:60:70:ea:a0:13:94:e2:1a:6e:f6:ae:
                    8b:c1:44:63:53:ad:5c:a8:af:5f:89:dd:24:a9:4d:
                    38:42:c1:4b:1b:58:95:db:e6:f3:11:c2:90:4f:8f:
                    a8:b5:f4:b3:ae:90:c1:74:f9:fc:ef:49:99:60:c1:
                    4a:5d:44:9b:f5:2d:a0:b3:92:5a:e5:81:37:68:d0:
                    2c:fb:1c:a0:4b:84:51:12:21:f0:b9:c5:6a:f0:58:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:A7:9B:5F:E8:26:69:37:A7:09:4E:66:71:BB:D3:83:46:AD:59
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:a9:2a:b9:d6:e9:41:2a:f4:25:3a:83:c5:66:02:88:38:
         f3:ed:89:c3:9c:06:c5:5a:e8:43:f1:ec:06:2a:4c:ea:64:01:
         ea:25:bc:49:77:3b:c7:d5:33:b1:54:dd:3a:dc:9c:18:3d:0f:
         6d:7c:82:93:18:64:e1:ff:83:aa:b3:5c:d3:2d:25:0a:ac:41:
         f3:b4:f8:4b:65:5f:ee:71:7c:74:48:16:df:c5:3b:7f:c2:80:
         6d:25:30:45:4e:b0:cb:ad:f2:ed:5c:a8:51:17:53:3a:a5:aa:
         f7:eb:b7:06:07:e4:63:15:77:bf:79:53:0c:02:79:52:29:46:
         02:1c:7e:55:7a:9b:a8:a5:e2:5d:59:c7:f0:47:cd:c9:06:19:
         13:c5:ac:d1:65:45:c8:da:01:4c:14:08:7e:f8:6a:bd:59:31:
         d3:96:1a:5e:77:d0:13:cd:81:0b:be:7d:b3:ab:b5:3f:1b:a9:
         27:71:1e:b1:79:c4:27:f9:8c:53:fb:ee:c4:0b:57:4a:ab:ff:
         fd:3b:64:90:79:26:e7:cd:a3:fb:c2:04:15:7a:83:c0:b5:f3:
         a0:d5:70:d9:2d:51:f1:2f:a0:16:b9:f7:15:54:b4:96:c2:24:
         dc:db:33:44:0c:4e:49:77:fb:ca:f5:e8:c4:d2:53:50:02:78:
         65:e3:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 04:36:12 2026 by rpki-client