Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
File:                     nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json)
Hash identifier:          gCcwBbpGcyH4pZW3M95Pf1itGWqh7CEVbndJDwfUT/A=
Subject key identifier:   D4:1C:E0:6B:00:DC:E8:26:EE:DF:17:80:85:13:CB:79:00:96:D7:91
Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
Certificate issuer:       /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
Manifest number:          0127
Signing time:             Sat 03 Oct 2026 06:24:17 +0000
Manifest this update:     Sat 03 Oct 2026 06:24:17 +0000
Manifest next update:     Sat 10 Oct 2026 06:24:17 +0000
Files and hashes:         1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: nliWstc5QEFw8wAmPMrk3Dftntik/aqv9S8KT2YkcxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
                          rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
        Validity
            Not Before: Oct  3 06:24:17 2026 GMT
            Not After : Oct 10 06:24:17 2026 GMT
        Subject: CN=6ac09f91-dd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:f7:1e:df:69:1a:81:7e:41:d2:21:fa:e9:
                    3e:36:13:41:15:7a:0c:3e:90:46:04:22:88:c3:6c:
                    71:fd:58:7b:50:be:b0:8b:75:7a:a1:94:84:13:2e:
                    b7:cc:64:98:a2:17:c3:99:30:9c:dd:bf:08:b6:7d:
                    9a:63:10:dc:53:a6:81:74:54:a0:57:27:71:e0:52:
                    92:56:04:55:8c:d5:a2:20:bd:e4:32:3e:d5:27:0a:
                    4a:f8:a4:7e:3b:7e:9a:50:78:63:39:54:e5:1d:21:
                    08:02:ae:cd:d7:44:82:39:65:fa:4c:a1:40:fb:0e:
                    84:6c:c2:0a:6c:09:4c:15:a0:7d:3a:24:da:ee:4e:
                    0a:a5:17:ee:49:49:c2:7f:61:92:3c:88:3e:cf:40:
                    70:d3:2f:c8:b2:25:3d:5e:84:4b:1e:4f:b6:b6:8d:
                    56:d5:29:c8:45:05:0b:7d:8a:54:2b:b1:ee:07:72:
                    d0:ce:64:3b:9a:f9:c6:f4:0b:e8:d7:97:a4:78:43:
                    e1:0e:2c:e8:bc:99:47:3c:12:e0:c1:e6:3a:8d:fe:
                    37:e5:73:71:59:d9:b7:44:9e:bf:07:83:e2:37:f4:
                    a3:5c:a1:72:85:78:69:74:3d:cb:41:a7:33:f2:12:
                    cf:6d:50:00:f5:97:f2:bd:6b:a8:a9:5d:4d:c7:70:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:E0:6B:00:DC:E8:26:EE:DF:17:80:85:13:CB:79:00:96:D7:91
            X509v3 Authority Key Identifier:
                keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f8:d5:52:96:19:60:7f:49:91:93:ed:dc:d4:56:f2:9a:cf:
         cf:6a:3f:05:a9:0e:46:b7:09:7a:79:bb:22:1a:39:88:19:ba:
         9b:05:5d:a3:37:2e:c6:53:a7:9a:c2:69:a0:03:d3:01:17:c9:
         32:ab:bb:1e:69:06:d4:86:f2:b4:70:19:2c:6e:87:d8:aa:6e:
         30:dc:e7:bd:3d:4f:46:7a:c8:b6:a3:7b:ac:24:3e:37:f9:47:
         a5:95:7d:4d:d7:92:2f:04:51:ab:fd:20:f2:7d:57:0e:4d:24:
         92:60:03:c9:08:01:5e:fb:50:12:24:5b:7b:4c:b1:dc:ce:00:
         e7:ad:50:5b:63:9d:f1:b2:a1:a2:58:73:fb:7d:0a:b3:0d:51:
         45:72:1b:87:46:2d:33:0c:83:92:79:bc:4b:f8:3f:ed:db:b0:
         26:bd:bf:58:52:32:28:51:4c:93:f3:3c:31:84:e3:c7:6e:a9:
         55:cd:24:8f:71:30:e4:a6:c1:43:91:53:60:fe:d4:17:74:11:
         09:de:29:ae:d1:44:ba:44:b7:9b:c1:57:92:60:28:56:1b:b9:
         34:80:77:86:08:55:da:fa:88:c7:37:db:d8:66:ed:4a:b6:74:
         76:51:5f:a5:da:0a:dc:84:21:c7:12:07:c1:67:4a:1d:32:37:
         bd:fd:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:41 2026 by rpki-client