Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          kugcascsqdDtHguJ9KTn6ojI4uMHM5zFKHO6nS+DEMo=
Subject key identifier:   DA:93:B8:DE:51:D9:B5:FD:62:52:85:F8:43:AA:EE:6B:E0:96:C8:D7
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       04CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          09EC
Signing time:             Wed 19 Aug 2026 00:11:48 +0000
Manifest this update:     Wed 19 Aug 2026 00:11:48 +0000
Manifest next update:     Wed 26 Aug 2026 00:11:48 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: I3bvnJ5HH3d7VypxFGGAKwQssDFio4sFvUJnv7uJrks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Aug 19 00:11:48 2026 GMT
            Not After : Aug 26 00:11:48 2026 GMT
        Subject: CN=6a84f4c4-02a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:3f:2d:b6:ab:64:56:49:d5:74:6c:b3:2a:
                    f4:07:e3:31:29:93:04:fa:4b:e1:e9:a0:37:5a:bb:
                    34:07:34:fa:50:c4:8b:ca:d9:98:c8:23:b6:aa:06:
                    87:60:38:c7:66:f8:f5:7d:68:55:49:65:f1:44:41:
                    f5:a5:25:77:c5:b3:15:04:8c:d3:ae:bf:81:49:10:
                    78:b0:9d:c4:9c:5d:85:c9:35:1d:76:3a:f2:8f:4a:
                    ba:73:2f:e5:9f:b7:54:95:4a:e6:77:3e:d5:4a:c6:
                    99:45:20:f4:f3:dd:c1:fd:ff:5a:51:04:02:73:5e:
                    f2:e8:cf:b4:d3:35:6e:48:e1:67:f0:a2:7a:c6:7b:
                    3b:86:64:3b:94:f5:e2:ce:34:2f:00:01:32:40:d3:
                    0b:51:1d:1a:82:c1:83:02:c1:e9:b5:3e:43:9e:00:
                    e8:2e:52:cf:ac:62:74:19:7b:aa:b1:d2:b3:17:ff:
                    2a:24:bd:9e:61:0a:f9:f6:37:76:9d:72:ad:7f:92:
                    67:41:ef:7f:96:5b:11:bd:4d:2a:c1:85:11:c5:64:
                    0e:5a:29:cb:85:7d:a3:b5:11:e2:26:6e:21:30:0b:
                    33:02:5f:1b:0b:91:97:ba:fc:27:74:f9:81:db:3c:
                    d0:01:b4:1f:89:60:75:6c:2a:dd:41:d7:1b:1e:b5:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:B8:DE:51:D9:B5:FD:62:52:85:F8:43:AA:EE:6B:E0:96:C8:D7
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:87:af:86:fa:24:7b:83:39:c5:da:c8:4a:3a:22:80:d1:70:
         17:b3:cf:d6:d5:9f:01:b4:7e:ae:03:09:af:3a:d3:4e:fd:8f:
         1a:47:bd:06:03:f8:03:90:64:fe:0e:41:a4:db:d9:63:e3:23:
         c2:58:e4:57:79:ab:71:43:50:21:ae:56:57:e9:2b:71:21:db:
         d3:c8:a7:69:91:e9:d9:55:5d:aa:1f:02:82:ac:49:28:e1:bb:
         67:15:7c:c1:28:4f:e0:8f:d7:a9:3d:c5:7a:b4:13:a6:4e:dc:
         92:17:f7:65:b3:a5:ff:ce:d2:13:96:21:c4:56:10:df:ce:ea:
         d8:91:cf:a9:37:e0:66:6b:bc:58:93:26:59:94:49:03:4a:3a:
         59:74:82:f5:85:e2:d2:52:8a:46:fc:1f:66:54:95:d3:4f:ab:
         47:75:fe:af:af:cd:41:9b:4f:9c:00:30:6b:b4:3f:3b:ca:d3:
         60:7e:9a:4a:16:ae:c5:69:86:a8:db:b4:0a:f5:01:cb:2b:d2:
         47:11:12:da:b3:93:d8:32:51:f5:ab:fd:0b:9b:ff:fa:da:d9:
         49:fd:22:83:54:48:9d:a1:1e:4f:b3:be:90:af:6f:a4:27:b8:
         44:0f:e3:38:5f:bc:b2:b3:37:de:ab:f9:fa:98:dd:3f:6c:86:
         ee:88:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:56 2026 by rpki-client