Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
File:                     nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json)
Hash identifier:          DeotNUkpPNC24+8VtF0k01mkEuvXo0Zgdo9UuU++SnQ=
Subject key identifier:   76:FD:F9:96:7D:77:AB:D8:8A:42:8F:3D:80:24:B9:DF:25:AD:11:D1
Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8
Certificate issuer:       /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
Certificate serial:       0C82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
Manifest number:          0C64
Signing time:             Sun 04 Oct 2026 18:44:08 +0000
Manifest this update:     Sun 04 Oct 2026 18:44:07 +0000
Manifest next update:     Sun 11 Oct 2026 18:44:07 +0000
Files and hashes:         1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: TSX47d3GLpoDMmm82QAYP8NJS534C3NgjeAhvYqAMKg=)
                          2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: J7bgw3OjD+bEqGEXKo8Fs8Z0MR84T96zJE637Xnk50M=)
                          3: E5675F48336E11EA94623E18C4F9AE02.roa (hash: rQw9zG+Y16msUrYZiSuHrHjmx364wl+z/+PI4vW3/Yo=)
                          4: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: J0oU2FppnlReFBA754sQNYwJm5OEtnlNnJ9xN5pwhNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
        Validity
            Not Before: Oct  4 18:44:07 2026 GMT
            Not After : Oct 11 18:44:07 2026 GMT
        Subject: CN=6ac29e78-7cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:97:a0:de:61:c9:d1:c6:00:96:7b:60:39:
                    b0:8f:50:44:7f:13:fd:00:7a:99:b5:81:7c:23:b2:
                    24:28:df:3f:07:63:cb:98:6e:72:68:0e:b7:8c:bb:
                    0c:2a:68:81:d4:57:aa:38:22:d4:2a:9d:3b:ba:88:
                    29:8e:d3:94:11:d0:65:4f:c4:fd:66:f4:c1:58:0c:
                    14:e8:76:4c:0c:46:c5:7a:c7:d1:eb:34:07:28:b4:
                    e2:21:ca:7c:ab:22:98:2d:f9:2a:50:94:07:76:50:
                    f4:73:b0:b4:59:5f:d2:ec:ac:d0:d0:09:e1:9a:78:
                    bf:c5:39:77:80:68:d0:c3:4d:7e:4c:88:7d:fb:92:
                    9e:51:ac:5e:01:2b:bf:40:20:3f:21:28:51:23:67:
                    93:83:45:64:12:9c:82:55:d2:45:19:a3:27:e2:a6:
                    c9:f5:b7:92:54:94:56:d9:42:12:08:a0:a7:46:00:
                    dd:80:23:d2:27:55:58:55:2c:3f:b6:74:55:ac:26:
                    ae:a8:5e:e1:d2:a0:1c:92:8b:15:08:6c:92:59:da:
                    4f:f6:41:62:0d:63:2b:e7:b6:d4:c1:e3:46:46:97:
                    d0:aa:61:e4:af:6c:ac:0d:81:91:16:dd:89:e7:f4:
                    e5:e5:bf:92:1d:4e:f7:97:5b:fd:e8:33:34:d3:c8:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:F9:96:7D:77:AB:D8:8A:42:8F:3D:80:24:B9:DF:25:AD:11:D1
            X509v3 Authority Key Identifier:
                keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:be:77:42:92:65:54:59:c6:08:74:3c:b3:40:b0:0a:93:
         52:16:45:2b:58:7e:38:8a:2c:fe:7f:15:6f:0c:78:65:e4:12:
         aa:6c:d5:22:26:81:ba:5f:db:89:3c:bb:48:d5:1d:47:21:d7:
         07:97:e5:cc:a2:c9:3b:f1:c2:3f:1d:07:20:a4:b1:87:29:c5:
         3c:c2:1a:01:de:d5:7a:5a:f0:1d:ab:54:ed:2f:d0:8c:50:8c:
         a0:f1:0c:c4:81:dd:28:2e:cd:b7:b4:91:cc:9d:db:68:e3:8b:
         bb:ad:94:48:ec:af:1f:23:13:31:02:05:cd:2d:69:55:c5:09:
         bf:01:de:db:d3:48:f1:2c:2d:0f:37:88:d2:92:52:10:4d:17:
         2b:d4:aa:9c:be:06:bf:b7:bd:bf:87:13:9a:e9:98:be:e3:6d:
         06:95:7c:b2:f8:14:9f:54:a0:10:3c:69:88:d2:1f:3e:45:42:
         5b:46:44:1d:dd:23:da:4f:5b:de:13:a8:9e:ff:22:3a:a6:12:
         b8:f7:52:3f:2f:c1:db:81:b2:cc:78:4b:99:bd:a2:60:95:c7:
         80:4c:b2:49:36:bc:f4:cd:18:4f:e7:31:d0:07:80:9e:21:5f:
         80:e6:b3:c5:08:ea:4b:03:74:ff:b3:de:a5:ad:e3:47:dc:96:
         58:59:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:11:08 2026 by rpki-client