Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
File:                     MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json)
Hash identifier:          n7djqoSYTKVjzBaXp+xQO9bKnHcU4++5WPeudQL15GM=
Subject key identifier:   A3:6C:A6:D5:50:74:D8:AA:31:87:9A:AD:F2:C6:53:22:21:98:D7:D0
Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03
Certificate issuer:       /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
Manifest number:          0113
Signing time:             Wed 19 Aug 2026 06:41:23 +0000
Manifest this update:     Wed 19 Aug 2026 06:41:22 +0000
Manifest next update:     Wed 26 Aug 2026 06:41:22 +0000
Files and hashes:         1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: G8rGeMVIpN+zVdWOItSWukHDuqzZyoz2myiswvsLKhk=)
                          2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: Bq0VwTuy/HjIMvA2ordLHxb7v3Ro/3lxv0Qjnp2KyH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
        Validity
            Not Before: Aug 19 06:41:22 2026 GMT
            Not After : Aug 26 06:41:22 2026 GMT
        Subject: CN=6a855013-94b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:19:49:d3:c9:14:9a:a0:3b:c0:64:a2:54:
                    a2:6a:b8:d6:79:3e:0b:d3:6c:e7:0d:10:03:37:53:
                    cf:19:e4:7e:62:c6:dd:5d:cc:fa:ac:2a:c2:6d:f9:
                    cc:06:6c:bc:99:59:15:4e:e7:67:1f:ca:a3:d7:7b:
                    4d:9c:6c:61:33:d8:92:62:80:21:09:c0:d0:2f:27:
                    97:3d:d9:b1:25:be:3b:30:25:e3:5a:55:ad:08:c6:
                    d1:b6:e7:46:4d:91:d3:93:81:be:e9:24:ec:07:99:
                    43:2e:0d:47:7f:c0:ba:8d:32:5d:8e:44:d3:5f:63:
                    44:fc:34:f3:69:f1:95:2b:ef:23:62:06:08:b6:92:
                    06:30:8c:82:6b:81:6b:c5:ba:bc:c7:58:7c:3f:60:
                    16:df:3b:f6:06:2e:14:ed:6c:62:5d:b7:1d:e1:f5:
                    ca:5d:e1:da:67:f7:45:d0:40:c9:a2:4b:54:f2:76:
                    f3:9a:ee:e6:79:b9:c8:41:6c:c0:c1:e2:97:b8:c8:
                    fc:be:61:83:84:c6:c5:1a:a8:e4:1e:40:04:78:d2:
                    a9:a8:f8:91:5d:d7:29:47:cd:fb:ce:f5:54:c8:bc:
                    dd:b0:39:72:09:2e:55:79:d9:ae:6f:c5:b1:1e:c1:
                    ac:81:63:7c:49:75:5e:d6:7c:6f:87:76:da:c0:1e:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:A6:D5:50:74:D8:AA:31:87:9A:AD:F2:C6:53:22:21:98:D7:D0
            X509v3 Authority Key Identifier:
                keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:24:a5:0e:48:bd:43:04:42:94:c8:d2:ab:81:72:52:83:62:
         bb:e3:77:53:76:07:86:cb:84:91:0d:8f:d6:47:22:71:fb:21:
         9a:eb:8f:e4:6f:72:c6:5d:b2:95:94:ed:7a:9b:86:c6:1f:48:
         8d:53:cd:1e:3f:e0:5d:3f:c4:a0:93:2b:da:66:aa:36:8a:81:
         45:75:d5:21:b1:a8:3b:68:7c:d9:b8:8d:d6:c0:96:8e:82:19:
         50:48:bb:57:17:81:36:e1:2b:7e:46:b7:16:ff:2f:9d:9c:5a:
         4e:9d:33:c6:53:b0:85:4d:93:c6:85:05:3a:23:1a:8e:55:12:
         df:9b:e7:7e:56:c0:ec:9d:d9:f4:c4:4c:80:32:17:08:28:e3:
         f3:7a:9c:c5:0a:fe:9e:ae:62:df:98:8f:d5:22:e7:af:c0:96:
         58:70:ac:2d:51:4d:12:ee:45:77:71:f1:9f:1a:f1:9a:b1:f1:
         c6:58:90:13:6d:09:99:67:23:cc:3d:ae:3e:65:5b:f9:03:f6:
         f8:0a:2e:51:a7:11:7f:8a:6d:4b:34:e3:8d:b0:fa:4a:0e:8e:
         15:94:12:ec:31:b1:e1:ba:0a:dd:2a:bc:4f:f3:15:00:23:51:
         4c:91:d0:08:3e:17:94:a7:e8:e9:d3:85:ac:d8:67:42:7f:11:
         bc:6b:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:02 2026 by rpki-client