Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File:                     NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier:          s2LBJF5PAbBTuglgqvM/ZDfEi2+Mcd/6z0LBWEptjgI=
Subject key identifier:   B1:42:02:AD:6E:ED:09:6E:28:2C:F7:26:5D:A4:08:1B:68:30:42:F9
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer:       /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial:       1D63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number:          1D46
Signing time:             Sat 26 Sep 2026 16:10:10 +0000
Manifest this update:     Sat 26 Sep 2026 16:10:09 +0000
Manifest next update:     Sat 03 Oct 2026 16:10:09 +0000
Files and hashes:         1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: mn6b3xe/XXD6AALjkxd4k9I08AgpC0N6/HLlB1jhZX0=)
                          2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
                          3: xfIw3q3qM2oF8nKAJKiIyOXPmts.asa (hash: Iw8t2cOOoe9YoYuawbsMRtKnfr4RdcfMSHPUEPUr57I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
                          rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7523 (0x1d63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
        Validity
            Not Before: Sep 26 16:10:09 2026 GMT
            Not After : Oct  3 16:10:09 2026 GMT
        Subject: CN=6ab7ee62-0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:26:bf:f6:36:89:aa:fb:99:c4:0a:ea:e2:
                    e7:8e:d9:3f:aa:ca:fb:d8:97:26:68:e5:7d:38:03:
                    7f:56:cd:78:b4:73:fb:88:31:ed:56:f3:79:7d:f5:
                    64:d6:64:ff:c4:97:b6:6d:b1:23:60:48:e6:64:b5:
                    9a:d3:04:3b:5d:c9:a9:7e:53:f4:5d:12:44:7b:a3:
                    87:61:6f:c1:34:4c:e5:57:e3:88:d9:18:52:39:8b:
                    5b:f7:14:d3:23:e8:73:31:24:58:b6:72:e6:25:af:
                    ae:49:b1:af:1d:4f:59:6e:1e:06:82:d9:78:85:01:
                    00:7a:f3:77:be:2c:15:09:36:1e:b2:d6:88:ac:32:
                    b9:46:22:f9:4a:74:e2:14:bd:21:c7:08:b1:ab:a3:
                    bd:d6:b1:e9:20:62:d7:c6:ef:6f:4f:c5:86:37:19:
                    61:19:eb:e4:bd:44:d6:b6:e0:28:77:83:04:51:95:
                    3f:65:02:c3:ad:b9:57:cb:5c:d2:1f:1f:fc:47:15:
                    93:b6:8d:55:01:00:40:e3:52:01:d1:50:6e:75:d8:
                    79:fb:43:70:95:fc:74:82:40:08:6d:52:60:19:44:
                    24:c5:3a:28:c7:59:c7:b3:35:01:6e:9d:bc:3b:25:
                    6d:a7:2b:26:6d:f6:d1:44:d2:c6:ce:4a:29:6b:0f:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:42:02:AD:6E:ED:09:6E:28:2C:F7:26:5D:A4:08:1B:68:30:42:F9
            X509v3 Authority Key Identifier:
                keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d3:17:d2:ca:c3:ff:a9:9c:bb:b3:b1:15:d3:5d:a4:ef:dd:
         ba:94:47:33:df:08:e7:7c:17:df:7e:8d:94:aa:e9:ec:18:04:
         43:a8:cf:6d:28:a2:9f:06:95:9a:98:73:d3:3e:69:22:d1:48:
         30:f2:ef:30:c3:57:74:4e:80:32:13:0a:73:62:c0:9b:40:04:
         08:82:a4:b6:bb:82:5b:f8:17:f5:2f:b1:38:88:18:0f:65:ce:
         35:c8:f8:77:9c:28:42:6b:72:50:e3:3f:98:ac:7a:ed:11:12:
         f9:b3:64:41:cb:22:1d:8d:16:fe:de:96:0b:a4:99:92:5a:35:
         52:02:bf:96:01:79:f9:14:20:3e:f9:ba:b5:6e:38:04:18:26:
         ab:53:ef:8d:cd:52:ed:0b:c6:84:38:e7:96:d0:f6:3a:da:61:
         d2:c0:99:0e:a4:3f:1f:b2:67:3b:ca:b0:20:8e:31:52:54:f0:
         64:2d:c5:77:45:df:e8:5c:b8:15:29:05:31:8e:59:ce:d7:21:
         9b:3b:ab:5d:eb:7b:c6:7a:d7:1a:72:ab:9e:0c:29:5b:cc:54:
         32:1f:09:26:e4:e1:8b:e5:5e:70:86:39:fb:5c:d5:79:3d:fb:
         00:af:ec:ca:2e:9b:a4:b8:4e:73:8e:1e:91:7a:49:d7:d4:21:
         c9:a7:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:45:26 2026 by rpki-client