Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
File:                     NpBAbdMULvZPdhZKfyJsCMwwG1M.mft (raw, json)
Hash identifier:          O8ON0ee0feVdnnNtycbudMdeg3cFykTVfkd/MDZLdDQ=
Subject key identifier:   39:FD:B2:73:7C:15:0F:AC:FF:FA:07:0A:35:28:F9:D1:5B:22:74:67
Authority key identifier: 36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
Certificate issuer:       /CN=A91A0807/serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
Manifest number:          88
Signing time:             Wed 19 Aug 2026 08:17:11 +0000
Manifest this update:     Wed 19 Aug 2026 08:17:10 +0000
Manifest next update:     Wed 26 Aug 2026 08:17:10 +0000
Files and hashes:         1: NpBAbdMULvZPdhZKfyJsCMwwG1M.crl (hash: Ag8XOAV8COjcYgOLShivtFxvt8D13jZkoUR17fNE/LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
        Validity
            Not Before: Aug 19 08:17:10 2026 GMT
            Not After : Aug 26 08:17:10 2026 GMT
        Subject: CN=6a856687-afc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:b9:f1:48:c3:6a:e1:bd:26:96:95:82:57:
                    1f:cf:73:d4:ee:35:ef:a2:fa:b1:df:89:84:d9:13:
                    ec:49:a4:de:f9:03:b0:d4:7b:d6:70:5c:d2:f6:3e:
                    7c:a3:5c:a5:e6:23:71:6b:5b:9f:8f:04:cb:af:5a:
                    68:85:37:71:d3:d6:8d:95:ec:b1:07:bf:d5:a6:fd:
                    a8:31:6c:13:c7:74:23:df:30:b4:d5:f2:99:23:30:
                    ff:2d:b5:af:d8:1b:d7:4c:53:53:ae:66:1f:55:a1:
                    d6:41:d9:4a:eb:29:21:9b:52:ab:9f:dc:11:b7:13:
                    d8:6b:f0:59:61:77:bb:0f:fe:c3:b6:cc:f5:18:9c:
                    30:3e:ed:76:f9:e5:76:fe:a4:bc:f1:9c:3d:6e:25:
                    ea:92:3c:20:a6:be:81:d1:c6:07:60:ed:e2:ad:a5:
                    a6:37:ee:33:5b:3f:a9:96:18:0e:b5:3b:f3:ed:4e:
                    30:d0:e0:1e:c1:05:79:85:a3:9c:a6:ae:54:ba:8e:
                    9f:31:08:b4:e5:39:f6:67:01:09:c0:f4:ae:3f:98:
                    ec:ca:f7:9d:75:11:f2:a8:b7:dd:16:85:ba:ca:93:
                    c0:33:0f:7b:f0:59:72:ee:6a:e3:c3:60:81:21:e4:
                    26:1a:fc:63:ea:35:ff:87:fc:01:fa:b6:72:fa:6e:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FD:B2:73:7C:15:0F:AC:FF:FA:07:0A:35:28:F9:D1:5B:22:74:67
            X509v3 Authority Key Identifier:
                keyid:36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9c:62:fd:c8:45:58:ff:f8:85:5e:46:0f:88:45:ae:b3:53:
         63:ac:ef:3e:d5:ea:97:85:b0:76:7d:38:5b:35:43:95:b3:59:
         ca:8a:31:b4:1d:76:dd:68:63:1b:0e:2f:c7:b9:e8:ff:d0:79:
         67:12:6e:57:ed:9f:e1:32:e9:2d:3e:2e:fc:be:c2:d7:96:d5:
         7c:b4:ee:a4:e4:d4:e8:75:09:51:b6:60:79:ed:27:8a:af:bd:
         78:d3:66:b8:73:4e:be:4c:3a:87:e6:6b:6e:b7:dd:04:49:00:
         78:9b:8f:3e:e5:a6:9f:31:4c:0b:93:4f:33:45:3f:dc:53:31:
         64:06:f6:3a:24:58:25:15:28:bc:d5:ce:d8:79:51:a1:da:82:
         c2:d1:a7:57:03:6c:c2:b7:e9:5f:bf:1a:5f:90:18:1c:c0:2e:
         e3:1a:5e:cb:66:18:7f:09:35:c0:b4:4b:fe:8b:eb:5f:a4:42:
         e4:06:0a:6d:3b:19:70:28:fb:f2:4e:10:5d:34:6a:da:4b:1c:
         87:b7:e5:8c:2b:6a:24:a3:98:d8:97:90:ec:7c:4e:df:11:51:
         18:f4:a6:fb:b1:a6:84:24:35:ef:d5:78:9e:9c:47:33:d0:79:
         ad:62:65:23:6a:c8:47:44:7e:56:e8:55:96:da:28:fc:a1:a0:
         7c:c8:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:46:35 2026 by rpki-client