Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File:                     nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier:          wY+sOqYuGOqU/Z3iOpkVBlI4YBB7gaTW9mljmPo+orc=
Subject key identifier:   78:36:68:96:C0:EF:00:19:CE:E0:06:90:1C:BE:0A:BE:12:84:C6:55
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer:       /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial:       0BB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number:          1517
Signing time:             Sun 04 Oct 2026 19:05:53 +0000
Manifest this update:     Sun 04 Oct 2026 19:05:53 +0000
Manifest next update:     Sun 11 Oct 2026 19:05:53 +0000
Files and hashes:         1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: xz75x5etI/jhM8R8YVcCljp9FueGRevXNfta2Za5mPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992 (0xbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
        Validity
            Not Before: Oct  4 19:05:53 2026 GMT
            Not After : Oct 11 19:05:53 2026 GMT
        Subject: CN=6ac2a391-9154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:79:70:91:97:cd:eb:8a:69:0f:82:58:8c:
                    2c:79:b2:63:f1:23:3c:43:1d:60:2c:a4:8e:64:31:
                    f1:33:6e:96:3a:12:34:d3:f7:39:4c:61:ae:3b:df:
                    f3:89:a6:87:eb:4d:2a:11:96:c4:8c:11:29:71:ee:
                    25:d4:d9:18:aa:94:d6:c0:59:cc:f7:d2:4f:bf:38:
                    18:45:7a:b2:78:f2:2d:a2:7e:c4:25:b4:98:06:26:
                    84:43:f8:73:f4:ca:dc:31:2d:af:64:1b:75:3a:2b:
                    b5:b8:95:ad:cf:bf:71:d8:f5:eb:99:58:47:8c:d8:
                    d3:01:0b:47:fd:a5:8e:19:77:3f:60:62:5c:13:b8:
                    13:d9:cd:27:f8:6a:18:a0:b7:6b:d7:f6:3c:00:94:
                    c5:13:07:42:af:74:9c:1b:d9:a2:3a:85:8a:0b:da:
                    b0:79:72:22:7b:8e:da:8b:5c:8e:61:c2:9f:b6:94:
                    76:3c:1a:60:c0:bb:4b:4e:9d:57:44:de:1b:7b:20:
                    38:5f:c3:20:2d:70:92:fd:b0:b6:d5:e1:58:79:d6:
                    6c:64:54:eb:9a:78:6b:47:0e:71:35:a9:49:20:10:
                    5e:b1:62:bd:2f:33:7c:f0:34:49:23:ed:1b:d2:2c:
                    f7:b5:ab:45:f1:9b:e5:3b:d4:f5:8b:ea:e9:04:26:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:36:68:96:C0:EF:00:19:CE:E0:06:90:1C:BE:0A:BE:12:84:C6:55
            X509v3 Authority Key Identifier:
                keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:46:b5:90:57:58:d1:36:d1:8f:fb:d0:7a:7d:e5:91:f4:b0:
         65:54:46:fd:0c:fc:50:91:b6:27:19:77:52:dd:2e:ee:6d:c1:
         22:23:0e:20:fc:11:b3:5b:fc:01:ae:e5:f5:4e:05:ae:93:48:
         37:4f:a6:fa:c2:fa:2f:f4:1a:2c:49:87:c7:4b:4e:e7:30:57:
         f2:58:aa:22:b7:98:47:50:fb:71:9a:cf:82:dd:bc:6e:2d:21:
         a2:eb:d6:72:58:cd:fa:eb:76:c9:15:e4:df:d9:5f:80:a6:63:
         54:f5:0b:9c:a2:03:1b:48:02:30:7c:48:db:e0:39:5c:86:d8:
         40:66:2e:b6:8d:06:d3:f9:a5:fb:28:79:35:5d:82:36:0b:ff:
         ed:6c:cc:e8:61:90:21:08:95:e8:d0:3c:41:54:ff:dd:cd:26:
         a5:08:12:f9:5b:5a:c7:ca:45:53:bb:cb:6d:08:4a:0f:62:77:
         f1:41:f0:6e:0b:6d:3e:b2:72:8c:da:c3:d8:7a:a3:6e:a7:d9:
         b3:ab:c4:fb:86:84:66:eb:c5:4b:d1:9c:e2:d7:9a:84:e3:43:
         f8:31:d7:54:0a:4f:5e:5e:27:cf:93:e4:be:8d:47:5b:7a:75:
         9f:78:2b:1e:a0:5b:d7:f0:12:1b:6f:b9:ea:eb:20:57:9a:a9:
         6f:78:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:40:48 2026 by rpki-client