Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File:                     nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier:          HEtPwgrewUeYEGqJWZ9Af7LXw7CQIcyF47NwFrbIFDc=
Subject key identifier:   D7:B3:BA:CB:F8:1A:91:CA:59:43:5A:B8:74:E3:96:FB:29:55:6E:4B
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer:       /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial:       0660
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number:          0648
Signing time:             Fri 02 Oct 2026 22:59:53 +0000
Manifest this update:     Fri 02 Oct 2026 22:59:52 +0000
Manifest next update:     Fri 09 Oct 2026 22:59:52 +0000
Files and hashes:         1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: efO9nFSi3hZy042R8iP38HHxK/2WoLbZIsDbtAhRbm4=)
                          2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: kd4W++lLTGLrW1TRbIqGEK/K3cCDQGLohESs97YdNDw=)
                          3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: ps3uP3bdfTWHCJtuqapXsSdfwHZEG6iHNID4DsV8ynw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
        Validity
            Not Before: Oct  2 22:59:52 2026 GMT
            Not After : Oct  9 22:59:52 2026 GMT
        Subject: CN=6ac03769-482a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:dc:16:02:35:4d:f0:04:59:47:a0:bf:ad:
                    3e:e7:3a:19:c3:36:f7:dc:67:8b:4b:04:2c:40:55:
                    a2:ce:a6:5d:72:cc:6a:ca:54:6d:42:c4:f7:b6:6f:
                    f1:25:64:bf:1a:5c:f3:59:29:f7:80:de:40:5e:9b:
                    fc:57:08:9e:c9:9a:03:42:2b:fc:e3:4b:23:e1:59:
                    ea:42:03:77:7f:81:35:43:ad:8e:49:20:be:46:2e:
                    cb:5f:d6:59:d6:e9:2e:e0:3a:80:d5:70:2c:a6:7d:
                    29:fb:9d:1d:44:78:e7:41:8b:86:40:90:e3:b2:ad:
                    41:9d:e0:aa:8c:3e:53:24:1b:95:20:a2:74:e4:49:
                    4b:e7:64:6e:12:38:70:14:6a:45:d2:ca:be:f2:d9:
                    31:5a:ae:7f:60:5b:e0:3b:29:d9:42:7c:10:0c:2c:
                    47:7a:31:28:a5:97:6d:8e:74:f9:21:c4:15:07:42:
                    ce:44:dd:bd:7e:2c:e0:3c:ba:82:c1:c9:9f:51:2c:
                    33:3e:e4:0c:b1:e6:c4:29:07:82:05:ac:33:ae:d3:
                    3e:6b:91:2c:98:b5:5b:e2:1c:34:a5:95:02:97:1f:
                    dd:4b:3f:f1:e5:ef:de:f9:af:33:9c:35:6f:5a:b5:
                    ea:be:37:b3:84:06:28:47:ee:2a:2a:7f:77:13:92:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B3:BA:CB:F8:1A:91:CA:59:43:5A:B8:74:E3:96:FB:29:55:6E:4B
            X509v3 Authority Key Identifier:
                keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3b:16:d6:ca:ac:34:bb:23:19:78:74:46:ed:d6:ef:03:0e:
         c8:d4:0c:61:2a:59:0c:ed:99:e4:05:6e:01:41:58:ce:fd:e8:
         41:c8:82:98:42:f6:f1:6e:14:46:31:9b:0a:7d:ba:8e:2e:2f:
         d6:84:7d:c3:65:c4:61:97:02:da:cc:81:b5:d8:53:2a:b6:23:
         be:97:82:e4:5a:f9:54:f5:80:71:40:db:08:ea:0a:9c:2c:0c:
         30:a3:56:20:ad:5b:a6:ff:61:02:d7:f0:8d:da:0c:81:29:7a:
         a4:72:9e:a5:3c:4a:56:3b:7b:09:e4:c8:51:5b:6f:0e:35:0e:
         b4:44:c6:e3:ad:82:bc:4c:17:a5:4b:bd:14:1d:2a:c1:dd:4e:
         7b:59:60:32:3b:31:ff:05:e1:6b:2e:c1:81:04:26:94:04:93:
         80:0b:d6:e8:4d:3f:69:ea:8d:96:83:26:9f:d2:39:ab:d0:3d:
         6a:02:69:79:64:b4:ce:84:b1:32:a1:14:69:bd:bb:b2:1f:02:
         82:a9:b0:0f:3a:e6:22:68:ee:07:4e:e6:f9:b5:14:36:be:72:
         a4:5f:9a:8b:0e:a8:44:97:6c:a6:72:ce:49:c8:7a:0f:fd:05:
         e1:d0:5a:40:0a:bd:aa:2e:88:74:a1:e4:99:26:6d:94:37:03:
         46:39:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:16:22 2026 by rpki-client