Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File:                     nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier:          I+hnzpJNNcJspebrGF+Iq7iGe5rXVPdaOgNUEJrIr50=
Subject key identifier:   72:ED:73:0F:5B:8F:AE:06:38:D5:34:9D:D1:19:37:4B:B2:48:87:F8
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer:       /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial:       08F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number:          08E9
Signing time:             Thu 10 Sep 2026 20:17:58 +0000
Manifest this update:     Thu 10 Sep 2026 20:17:57 +0000
Manifest next update:     Thu 17 Sep 2026 20:17:57 +0000
Files and hashes:         1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: e0AG70Mb73Skm3lD9JbFlk5dosIDF8bQaJSHRpviuQg=)
                          2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=)
                          3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: q5Y0uGRmUCg4iSbCFOqAPFa+DSzHUTjKsRs6A7GCSWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
        Validity
            Not Before: Sep 10 20:17:57 2026 GMT
            Not After : Sep 17 20:17:57 2026 GMT
        Subject: CN=6aa31075-eee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e2:cf:19:9c:c0:7c:1a:5e:b3:00:7d:36:9d:
                    05:91:69:dd:1e:f9:8a:2c:e6:91:90:c4:18:f2:1f:
                    79:0e:87:dc:3e:ac:7f:a6:03:2d:fb:85:79:25:b9:
                    78:ef:0a:07:39:9e:ed:46:33:69:e4:19:49:d3:c8:
                    64:dd:cc:b7:89:76:5e:6b:bc:34:df:bc:e8:31:72:
                    66:75:eb:13:ae:59:70:be:00:c7:cb:20:e2:f8:49:
                    e2:a1:c1:a9:14:6f:96:89:d4:58:53:b5:3d:31:14:
                    aa:7a:fb:84:40:71:8a:64:07:43:99:4b:2d:49:db:
                    c7:d2:50:cb:fe:9f:68:09:df:13:fc:2b:0a:e5:48:
                    17:4b:d9:8d:56:ec:47:80:36:56:0a:f8:bb:12:40:
                    e1:f9:b3:45:45:22:d3:f7:a2:d4:32:cf:24:39:5b:
                    95:49:ae:8a:ea:27:4d:bb:28:3b:3f:a1:a6:d5:f3:
                    31:d4:13:d4:70:2b:65:4d:e3:66:8c:33:14:de:1b:
                    f4:51:35:3a:3e:44:d2:12:c7:98:a6:35:3b:47:31:
                    d6:ad:55:ed:d4:ae:36:af:0e:d6:8c:6c:f5:eb:90:
                    af:62:d7:f0:c8:9a:54:6e:71:95:61:92:fc:58:c2:
                    f4:bc:ef:58:86:e8:e2:25:c7:91:43:76:0d:fb:95:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:ED:73:0F:5B:8F:AE:06:38:D5:34:9D:D1:19:37:4B:B2:48:87:F8
            X509v3 Authority Key Identifier:
                keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:37:95:cf:af:75:e2:81:0f:e7:ef:da:00:21:44:56:d4:67:
         65:b6:25:60:36:a2:d2:11:63:b5:91:5b:b9:a1:54:46:20:24:
         cb:c1:3a:78:f2:c1:43:e5:62:ba:04:4e:9f:07:c6:b1:f6:12:
         04:9e:77:f5:5f:67:bb:df:d8:6d:5e:18:69:b7:7f:d9:4e:c7:
         80:9a:7c:16:86:60:e0:c9:c0:f4:62:0a:f0:e0:d8:a1:d9:59:
         4e:f4:7e:f7:6b:0d:c0:df:02:e8:a3:93:fa:e9:22:09:54:e7:
         e8:65:14:2e:fe:57:b9:18:6f:df:78:a4:01:d4:13:6f:ec:b1:
         b5:c5:8e:2b:32:09:34:f8:6e:41:a9:de:10:26:be:61:5b:86:
         70:93:f6:05:1f:37:a8:fa:f4:4e:fb:7c:5b:5e:6b:70:ab:37:
         3c:78:d2:9f:51:45:c3:0d:4b:cc:ec:5d:94:b2:53:a5:9b:6d:
         db:4e:cf:da:47:d7:f2:8b:31:25:2d:f2:6d:58:89:e2:53:8a:
         e2:dc:cb:46:29:9b:39:fe:80:2e:e5:3c:ea:2a:55:a3:9b:09:
         81:d8:31:fe:5e:3d:95:bc:ee:ff:f0:01:8e:0d:3a:4c:89:15:
         1f:56:59:87:93:3e:41:c5:28:97:50:4a:50:e9:c5:71:7c:7f:
         57:fd:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 16:37:31 2026 by rpki-client