Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
File:                     NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json)
Hash identifier:          JyQyp8eXFbN4oU5MJjz4r81FXanIGF2i+xBFoMYXil0=
Subject key identifier:   3E:1A:96:0C:19:AB:04:CE:B3:89:EA:4B:C0:01:E2:CB:5B:CB:4F:2A
Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
Certificate issuer:       /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
Manifest number:          1333
Signing time:             Sat 10 Oct 2026 19:18:00 +0000
Manifest this update:     Sat 10 Oct 2026 19:18:00 +0000
Manifest next update:     Sat 17 Oct 2026 19:18:00 +0000
Files and hashes:         1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: Kp7QrVJ7e5xkgkCy2JBsMFzJSpPovF0MUzxD80aDCqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
                          rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
        Validity
            Not Before: Oct 10 19:18:00 2026 GMT
            Not After : Oct 17 19:18:00 2026 GMT
        Subject: CN=6aca8f68-761c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:97:d8:79:3a:73:98:86:18:e4:4c:55:6f:
                    44:55:8a:8e:71:12:61:2d:e8:38:64:46:f7:d7:8d:
                    c5:33:d0:fb:1e:2f:4a:f8:aa:12:49:6e:07:d1:89:
                    9b:31:7d:2b:28:7d:19:0e:82:75:49:17:71:f2:3b:
                    6d:c6:f5:48:fa:65:df:01:f6:da:10:67:76:df:a7:
                    df:4e:9f:d3:b4:52:06:d6:a6:48:b1:f3:09:22:dd:
                    e0:c3:1f:dd:a3:3f:d8:82:1a:69:01:6c:c8:a2:b4:
                    00:72:4f:77:14:26:0d:f2:d3:ce:11:f7:44:22:e4:
                    d1:f5:34:71:bc:5e:d3:7c:5b:2f:5e:37:a1:f2:50:
                    96:5e:f0:d0:2c:59:b1:04:31:81:f4:da:20:02:f8:
                    0f:02:40:42:18:27:9c:16:e4:0c:a9:1b:e9:c7:52:
                    96:74:2c:4c:90:80:cc:f5:ff:98:1b:14:21:0a:30:
                    ee:70:47:8d:2a:8f:51:40:16:d5:a7:75:0e:a0:70:
                    0d:c8:b6:e4:e9:0b:cc:e8:c8:e0:46:82:0c:24:74:
                    e0:2b:6c:58:da:e6:16:a9:e0:43:ff:2b:9c:09:79:
                    54:eb:ec:fd:3f:32:05:b6:98:30:af:28:3f:7e:c1:
                    b2:03:04:29:a3:cc:d0:c7:52:02:77:37:55:74:42:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1A:96:0C:19:AB:04:CE:B3:89:EA:4B:C0:01:E2:CB:5B:CB:4F:2A
            X509v3 Authority Key Identifier:
                keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:af:4b:88:c9:8a:fb:d6:a2:fc:72:2e:2a:19:f6:46:e9:6c:
         46:c0:92:82:1d:0d:08:5f:15:e7:19:32:09:66:6d:d2:f8:3a:
         c5:b3:fb:04:25:f2:4a:44:1c:38:0e:24:63:ea:69:a6:56:31:
         a7:d1:99:a7:a5:5a:c1:b0:6a:29:f8:43:33:71:df:a2:54:ff:
         1a:ab:8b:63:1f:61:48:c4:e5:81:05:fe:7f:9e:df:8c:c1:b6:
         fa:83:80:0b:62:70:80:37:4a:6f:08:e2:29:50:70:7e:f3:de:
         4f:08:04:ea:9b:0c:7f:84:be:17:0e:50:dc:36:61:03:a2:a6:
         36:ba:fb:42:17:f9:06:80:b7:0a:0d:72:a0:6a:a0:02:1b:28:
         b2:50:bb:cf:ee:bd:cd:54:d9:7a:28:89:3d:42:c1:cb:ad:86:
         97:73:de:05:71:ee:3a:bd:36:e5:e7:f3:21:ab:80:f6:fc:63:
         82:64:dc:46:b2:82:f9:00:b6:e4:c4:bd:43:4f:6e:2b:1a:dc:
         2d:33:d2:42:2b:aa:60:97:5f:85:2c:37:55:66:d7:1a:16:f5:
         c2:3f:6f:89:c9:57:cf:45:53:96:13:4c:8e:ea:b7:e5:b8:f2:
         d1:bb:e0:3b:1a:08:19:35:48:5b:58:50:2d:79:67:06:27:c2:
         ba:9c:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:24:38 2026 by rpki-client