Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File:                     N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier:          kdgYEZ1YI6rs6+bYLNwBY5WIwKIupjqMUNXiO7cDhDA=
Subject key identifier:   CF:4D:BC:CD:3E:73:98:EF:57:C4:FC:E5:61:24:8D:60:E2:FB:29:56
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number:          048C
Signing time:             Sat 03 Oct 2026 00:20:22 +0000
Manifest this update:     Sat 03 Oct 2026 00:20:21 +0000
Manifest next update:     Sat 10 Oct 2026 00:20:21 +0000
Files and hashes:         1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: ViMdrxEEHwkBWU83dOoGW9Fo6vIF73ZOOzifltSP8mQ=)
                          2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: 9lzXvcPlg/l/tlAmlqyfga76fKpdYYXjmSDlWTcG17o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Oct  3 00:20:21 2026 GMT
            Not After : Oct 10 00:20:21 2026 GMT
        Subject: CN=6ac04a46-4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:63:09:7c:29:8a:99:73:bb:c2:13:5e:3a:
                    1b:3b:7b:cb:61:9c:9e:72:9b:16:91:32:61:5c:0b:
                    3d:70:31:58:1c:8b:e6:77:f8:fd:5c:b3:50:bc:50:
                    68:84:53:26:cc:2f:ac:65:52:70:41:1f:e0:4d:41:
                    64:9b:88:55:28:12:e6:32:5d:fb:67:58:44:6c:16:
                    5f:19:e6:e8:d0:99:af:1c:d8:60:46:86:98:86:ce:
                    04:6f:dd:59:26:5e:ad:0d:34:29:00:78:43:b0:27:
                    b7:af:1b:ad:0f:82:af:61:ab:6b:77:02:1d:c2:67:
                    06:4f:91:70:59:0e:50:bd:24:55:e1:d7:f6:7b:f3:
                    25:8b:da:c6:4f:9e:33:bb:e8:eb:fb:b0:78:a0:29:
                    ac:b4:e6:2d:73:67:0b:00:f8:3b:60:7b:6d:68:e0:
                    b6:4d:6f:74:fd:42:e1:72:10:66:18:07:52:1a:3a:
                    c4:23:22:44:03:03:0f:77:a3:be:1d:3e:31:16:8a:
                    83:67:51:ce:fa:62:11:13:e1:11:18:c1:ca:73:86:
                    dd:d3:3a:86:a6:f5:4d:b0:a8:4a:6e:33:9a:0e:d5:
                    5d:56:bb:26:00:fa:ba:f3:52:a9:de:36:67:d4:00:
                    21:98:e1:3d:e0:3c:db:90:9e:e1:c9:75:46:38:7f:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4D:BC:CD:3E:73:98:EF:57:C4:FC:E5:61:24:8D:60:E2:FB:29:56
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:90:58:01:06:17:bf:62:5f:a9:45:6c:54:0b:f9:68:c7:
         d5:af:8c:46:20:81:b0:2c:92:a5:f7:37:8b:5b:cf:84:3e:a3:
         72:0d:e4:8f:90:a3:31:e0:55:f8:df:b4:5c:44:1b:4a:7d:e8:
         65:40:ed:67:f8:a7:fb:dd:a4:50:ea:f2:51:1b:50:44:08:f2:
         1e:4c:dd:a8:58:7c:64:70:1f:b8:d1:3e:d5:d4:96:06:ab:4d:
         65:22:d0:42:5c:05:62:c0:ed:3f:70:4b:b5:59:b0:dc:6f:a9:
         0a:73:7e:82:bd:98:09:c2:6d:87:59:16:77:46:74:cd:64:3e:
         16:b5:1f:eb:ee:2a:c5:a5:81:d4:f6:d4:78:e3:78:3f:b4:6d:
         fc:97:f5:b8:4e:b2:27:c6:88:69:27:a5:e5:8f:fa:a3:7d:06:
         a1:5f:1b:dd:2e:09:29:16:03:7f:b3:30:18:b1:13:95:39:b6:
         bc:97:6e:d9:55:b0:ac:8a:62:f8:3b:64:7b:6e:ab:13:ed:70:
         c1:80:78:ad:90:85:02:08:c8:20:20:89:d3:c1:b8:95:89:c9:
         73:13:50:78:11:37:09:bb:78:7f:01:8c:16:ad:66:f4:8f:1b:
         ec:c9:a7:fa:af:0c:51:9c:4b:e0:e2:74:ba:e9:14:a4:3f:71:
         f1:2e:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:15 2026 by rpki-client