Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
File:                     01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json)
Hash identifier:          SbXgdPzx9oLJK5E+7gs577fwg0b2yiDVMKQOvouh/sc=
Subject key identifier:   32:07:05:68:D3:D0:47:B7:5D:AE:D3:2A:07:7B:CD:CD:6C:A5:30:24
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Certificate issuer:       /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
Manifest number:          0195
Signing time:             Thu 27 Aug 2026 03:53:58 +0000
Manifest this update:     Thu 27 Aug 2026 03:53:57 +0000
Manifest next update:     Thu 03 Sep 2026 03:53:57 +0000
Files and hashes:         1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: zXL8JrBEI8MbpJqmw7mB+83szzbdbZIOK04ohdq7i4Y=)
                          2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: 7D2o9V8B+THFZdf2H4zmO2ZxT2tryY6dqnAujMyrW8Y=)
                          3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: qVzuwc8GJJLc1M+VCPFsl93UzK3diqKkMLNcNf9VMmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 03:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
        Validity
            Not Before: Aug 27 03:53:57 2026 GMT
            Not After : Sep  3 03:53:57 2026 GMT
        Subject: CN=6a8fb4d5-0d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:b6:49:43:e8:de:88:59:a5:1c:16:74:a9:
                    2e:bb:ff:fa:95:56:cf:5b:71:60:75:fd:65:25:9d:
                    8e:86:e1:72:72:0e:41:de:a6:f1:36:86:0a:86:1c:
                    9f:81:b3:ac:24:bc:a0:13:1f:ea:8f:46:6d:de:44:
                    34:58:8a:ab:b2:07:50:68:ab:e0:c0:1d:8e:81:71:
                    2d:eb:d4:c4:38:ca:1d:f1:6a:f6:6c:3b:78:4e:f9:
                    a6:ef:c4:5b:05:4f:1d:d7:2b:c7:dc:8e:22:59:49:
                    71:fe:77:d8:56:9f:a2:51:2f:56:a8:07:96:85:f4:
                    b1:d8:ae:37:1e:ed:86:72:d2:34:8f:c5:44:48:2a:
                    db:10:54:70:44:d4:ab:90:9e:1a:3e:a5:eb:8e:fa:
                    54:46:b9:c2:4a:bf:90:39:f2:34:7b:e8:e0:c2:c4:
                    69:3e:37:b9:67:11:23:5c:f2:4e:11:73:3e:72:2f:
                    56:e5:33:a4:89:1d:bc:7e:0b:53:85:5f:fe:6d:1b:
                    2a:20:a6:ec:8f:75:12:a4:fd:c0:7a:23:cb:86:20:
                    27:4f:ef:6c:3f:98:3d:ab:a8:20:60:be:5a:c2:0e:
                    c5:a2:97:b2:85:74:70:87:ff:09:4b:30:30:49:ac:
                    41:7e:62:61:66:59:b2:5d:d6:57:2d:ef:14:08:1d:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:07:05:68:D3:D0:47:B7:5D:AE:D3:2A:07:7B:CD:CD:6C:A5:30:24
            X509v3 Authority Key Identifier:
                keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:05:a9:07:ed:3d:71:16:5c:52:a2:3f:a1:61:e7:69:73:
         ef:61:10:22:a9:34:42:29:1b:80:80:41:07:d3:66:2f:4d:1f:
         3f:d2:65:1c:59:28:c0:72:42:05:a4:f2:ff:94:7f:f8:dd:cb:
         cf:85:20:fc:bc:5e:19:25:aa:ae:15:1b:19:28:ed:40:7d:af:
         0b:e9:ac:12:4c:66:8f:5d:cc:3f:21:36:38:6e:18:cd:d0:96:
         f6:fe:ba:db:4e:c4:6e:1e:5e:49:5a:dc:96:7b:0f:10:79:e0:
         14:f8:87:5c:9f:6e:fa:d6:7a:9f:0e:1e:2d:b2:e5:60:10:3b:
         f6:7c:70:80:dc:48:7a:00:45:e0:c6:b6:07:e3:3c:ca:9f:e0:
         3b:fe:65:24:d2:eb:d5:17:d6:d2:56:0c:8c:12:83:96:5d:ab:
         d4:7c:d1:a4:e4:76:64:fa:d9:78:88:17:d7:b9:86:49:73:bc:
         d9:1d:2f:64:b6:1b:58:6b:71:33:81:c9:7c:97:19:c5:93:69:
         33:05:d9:19:32:1d:57:18:8e:79:3a:45:b3:a1:24:b0:43:13:
         52:68:eb:95:4a:0c:13:02:1f:34:3a:34:b7:5a:1c:cb:61:d4:
         72:1d:0e:19:d2:45:33:c3:7e:06:4d:81:75:c8:ca:69:10:98:
         10:78:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:27 2026 by rpki-client