Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          s4kr3njBfkzzIx4YKJyMDPrwprkUXSqSk7IopjLL2VA=
Subject key identifier:   74:C3:5A:26:1D:55:DA:2B:7B:DC:0B:55:3E:4B:6C:1D:0B:BC:4E:8E
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          010B
Signing time:             Wed 09 Sep 2026 06:31:18 +0000
Manifest this update:     Wed 09 Sep 2026 06:31:17 +0000
Manifest next update:     Wed 16 Sep 2026 06:31:17 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: wz0ejH9jYu1akeGmGihX31TCLRCCooCUUutMXeIGpJs=)
                          2: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
                          3: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Sep  9 06:31:17 2026 GMT
            Not After : Sep 16 06:31:17 2026 GMT
        Subject: CN=6aa0fd36-1fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:9c:a0:b3:f2:88:d3:c9:b2:22:d0:c5:d5:
                    77:ee:0d:2f:1b:de:3e:bb:36:a6:cb:1b:60:2c:05:
                    95:a2:2e:05:57:8c:94:8b:b6:01:76:d6:fd:fd:df:
                    ea:00:55:00:e4:33:65:9f:89:00:05:e6:21:c5:cd:
                    6f:af:e4:d8:7d:81:58:52:8e:0e:a9:32:63:27:f6:
                    8f:4e:59:22:18:ac:bc:2b:51:32:1b:71:9b:4f:03:
                    26:32:ab:02:a9:1d:27:38:6b:97:43:c5:64:b0:bf:
                    45:f9:9e:65:6d:56:e3:84:93:dd:8d:b5:43:7f:95:
                    65:53:ce:a2:cb:b5:3a:38:27:88:9e:14:b2:d6:43:
                    af:4b:df:0e:74:78:19:fe:e3:8f:2d:fa:12:a8:21:
                    83:a1:50:1a:55:26:2d:f5:7e:19:b6:34:5f:ef:68:
                    62:30:07:55:ac:9e:a2:af:1d:26:77:05:43:74:02:
                    0c:87:7e:3d:9a:29:ac:00:fb:73:fd:8d:10:64:fa:
                    58:d6:48:50:46:f0:4f:ff:8b:95:07:36:48:21:49:
                    22:04:f4:d5:b2:66:ba:fd:a2:ac:a4:a8:41:c8:d7:
                    ff:e4:d9:ad:74:a8:a8:43:ca:52:f5:8d:91:a3:73:
                    b3:2a:27:46:b0:15:8e:49:e6:44:d3:28:b2:b7:93:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C3:5A:26:1D:55:DA:2B:7B:DC:0B:55:3E:4B:6C:1D:0B:BC:4E:8E
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:fb:ee:0a:6e:5f:e1:1c:65:53:9a:5b:45:f5:f7:3b:ed:
         a8:e5:aa:2e:09:ff:2a:02:52:56:e5:9e:40:6c:2f:de:ec:66:
         05:56:ff:bb:07:3e:66:65:52:b0:61:b7:42:f6:eb:ac:f5:df:
         4a:ce:40:1d:72:2b:63:97:34:7f:29:9c:3e:b4:1c:3b:19:15:
         c8:96:85:1f:1a:bc:d2:f4:a1:f8:93:31:82:a3:17:3b:f0:d5:
         f3:c3:d3:c1:aa:ea:3e:4e:f0:15:8b:ff:80:7c:a4:73:a3:ea:
         3c:6b:e5:a9:29:27:70:df:ea:cc:49:1f:0f:b6:51:9d:d2:7c:
         73:0b:8a:78:88:1a:5d:f0:60:18:e2:51:a1:27:28:fe:af:ef:
         8e:f8:01:cd:a4:96:98:76:2e:a8:d8:77:c0:88:83:a3:2d:03:
         eb:90:52:06:99:ab:9b:dd:ff:af:5b:6a:f3:c3:48:64:9a:80:
         15:54:a3:f9:ed:55:4f:8a:38:26:10:64:86:36:c0:69:f6:f3:
         4d:b6:ad:23:ae:9c:0c:8d:10:46:09:14:9a:ab:9d:cf:2a:c3:
         9a:ae:5c:75:b1:9e:6b:0c:b6:fc:91:40:d5:6e:35:c6:13:c9:
         47:ef:44:7a:7e:b9:cf:20:96:ea:31:05:50:9f:e8:53:0f:6c:
         ed:32:92:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJFREUxMTAvBgNVBAUTKDlEQjI1OEMxNzBCMjMyMjk0RDg2M0Y2MEQyREMwMTIz
Q0RBQUU3ODkwHhcNMjYwOTA5MDYzMTE3WhcNMjYwOTE2MDYzMTE3WjAYMRYwFAYD
VQQDEw02YWEwZmQzNi0xZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVWcoLPyiNPJsiLQxdV37g0vG94+uzamyxtgLAWVoi4FV4yUi7YBdtb9/d/q
AFUA5DNln4kABeYhxc1vr+TYfYFYUo4OqTJjJ/aPTlkiGKy8K1EyG3GbTwMmMqsC
qR0nOGuXQ8VksL9F+Z5lbVbjhJPdjbVDf5VlU86iy7U6OCeInhSy1kOvS98OdHgZ
/uOPLfoSqCGDoVAaVSYt9X4ZtjRf72hiMAdVrJ6irx0mdwVDdAIMh349mimsAPtz
/Y0QZPpY1khQRvBP/4uVBzZIIUkiBPTVsma6/aKspKhByNf/5NmtdKioQ8pS9Y2R
o3OzKidGsBWOSeZE0yiyt5ORswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTDWiYd
Vdore9wLVT5LbB0LvE6OMB8GA1UdIwQYMBaAFJ2yWMFwsjIpTYY/YNLcASPNqueJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkVERS81NUNCMkUwNDFB
QjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1pbE5oajlnMHR3Qkk4MnE1
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkVERS81NUNCMkUwNDFBQjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1p
bE5oajlnMHR3Qkk4MnE1NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhKP77gpuX+EcZVOaW0X19zvtqOWqLgn/KgJSVuWeQGwv3uxmBVb/uwc+ZmVS
sGG3QvbrrPXfSs5AHXIrY5c0fymcPrQcOxkVyJaFHxq80vSh+JMxgqMXO/DV88PT
warqPk7wFYv/gHykc6PqPGvlqSkncN/qzEkfD7ZRndJ8cwuKeIgaXfBgGOJRoSco
/q/vjvgBzaSWmHYuqNh3wIiDoy0D65BSBpmrm93/r1tq88NIZJqAFVSj+e1VT4o4
JhBkhjbAafbzTbatI66cDI0QRgkUmqudzyrDmq5cdbGeawy2/JFA1W41xhPJR+9E
en65zyCW6jEFUJ/oUw9s7TKScw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:02:08 2026 by rpki-client