Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
File:                     NpBAbdMULvZPdhZKfyJsCMwwG1M.mft (raw, json)
Hash identifier:          gxJ297mk5jUWXH/2j6uINl5VINgYF3ezZXLCjth5DqI=
Subject key identifier:   8B:53:C5:BE:58:3E:BF:10:BD:14:C9:E3:30:A4:C2:9F:95:F4:27:B3
Authority key identifier: 36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
Certificate issuer:       /CN=A91A0807/serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
Manifest number:          A1
Signing time:             Sat 03 Oct 2026 07:59:54 +0000
Manifest this update:     Sat 03 Oct 2026 07:59:54 +0000
Manifest next update:     Sat 10 Oct 2026 07:59:54 +0000
Files and hashes:         1: NpBAbdMULvZPdhZKfyJsCMwwG1M.crl (hash: k4Swdhbs4zzxpgfdpgZKMSJMx52aM7TxcVei83X2Apw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
        Validity
            Not Before: Oct  3 07:59:54 2026 GMT
            Not After : Oct 10 07:59:54 2026 GMT
        Subject: CN=6ac0b5fa-81fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:80:40:a8:ee:f6:56:0b:5b:a5:a3:8b:a1:
                    e0:97:6f:1c:81:92:04:4d:a1:58:1f:00:38:3d:ba:
                    4d:0a:ae:7e:4e:31:0c:8c:c5:05:d2:e4:ad:4d:6f:
                    a5:2f:ff:5b:4b:54:c4:55:ea:74:b1:d4:ea:fa:92:
                    7c:2d:0b:2b:91:ee:5e:b7:a9:71:d9:3b:0c:5e:fe:
                    ca:41:a2:5b:7c:6e:c0:b4:c1:cd:af:ee:8e:e9:a9:
                    00:70:68:37:2f:ee:a8:d7:27:47:b6:01:bc:bf:77:
                    3d:93:c9:1e:bc:ea:07:da:c0:ab:3d:42:a3:de:56:
                    12:e8:af:bd:de:80:6d:b0:e7:69:19:67:1f:ca:0a:
                    8b:df:7e:c2:fc:0f:07:61:c5:57:93:8a:4a:bc:3e:
                    7c:67:86:66:8a:ad:6f:5e:f1:21:4d:63:ac:4f:f1:
                    44:da:81:18:ee:27:1a:a1:10:06:94:94:cc:8a:96:
                    e1:37:ba:8b:92:ad:51:85:6f:f8:4f:74:49:50:4e:
                    b6:b6:e7:6a:5c:8c:15:22:3c:02:e8:ec:7f:bf:c4:
                    ce:bd:8e:80:ab:c6:77:0f:65:4f:d2:96:42:7f:44:
                    b8:af:0b:9b:c0:be:ce:1f:06:57:d0:92:be:c1:58:
                    8e:33:52:38:c0:11:bf:8b:0b:2b:2b:62:80:1f:30:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:53:C5:BE:58:3E:BF:10:BD:14:C9:E3:30:A4:C2:9F:95:F4:27:B3
            X509v3 Authority Key Identifier:
                keyid:36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:c2:c0:01:4d:68:f2:35:1c:3d:e6:54:80:36:08:3b:2b:
         69:39:5e:1c:1a:26:15:8b:06:4b:9b:66:35:d9:44:45:3b:b3:
         9c:f3:82:47:1c:53:8b:db:8b:c5:51:cd:8b:02:2c:0d:3f:83:
         84:9f:81:27:89:b1:4e:17:ae:51:b7:37:32:1b:7a:3d:2b:e6:
         5f:cb:5d:3b:1e:01:13:d5:e4:a1:1e:fb:b9:62:0b:5f:3c:c7:
         0a:20:42:87:b1:cb:6d:31:13:f9:ea:a2:05:55:89:1e:5a:09:
         5f:1d:2a:a8:50:5d:61:72:d9:93:54:10:3e:ac:8d:35:df:32:
         66:13:eb:a2:fd:c3:66:cd:ef:2b:c9:f3:5a:8a:47:04:73:4c:
         41:e5:49:da:27:fd:1b:54:8e:d8:27:24:2c:c7:f8:b2:15:35:
         0a:16:ac:39:32:03:54:4b:c2:96:31:f7:ba:df:fa:ab:01:e2:
         ac:65:e9:25:0c:1d:f1:6c:9b:4e:f2:0a:1a:d3:8d:7b:74:6f:
         5b:d3:c0:ae:46:03:92:74:79:9e:80:54:af:d9:16:33:5b:04:
         84:9c:0e:f2:f8:bb:b0:b8:73:6e:60:63:b6:b2:a0:41:7f:ca:
         55:f4:d5:4e:3b:03:1b:92:c1:e1:ed:02:aa:3b:5e:b2:c0:85:
         ec:31:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:59:39 2026 by rpki-client