Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File:                     NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier:          4dw5NElB+3uZERx082TAU0tmy7XE1MvHaS8Ggjte/eU=
Subject key identifier:   0B:D1:4F:F3:08:FF:A3:16:BB:33:27:8F:BB:B1:6E:14:ED:F9:46:79
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer:       /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number:          FF
Signing time:             Mon 05 Oct 2026 06:41:20 +0000
Manifest this update:     Mon 05 Oct 2026 06:41:20 +0000
Manifest next update:     Mon 12 Oct 2026 06:41:20 +0000
Files and hashes:         1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: BMaXRa+K+H3lnEodZ9HhlA8X6OsZBQwYybd2xQgVx2U=)
                          2: nx7eVc-UExQZGlYBARTk5qPuTDk.asa (hash: Bq94qwwPBfBx/AnREmDcpg5o5aSHJ6zt+H4qiLs5gGg=)
                          3: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: n7sRPa6I69j+h39GN76+PY3SuYecQbYjjiiW9wMz2wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
        Validity
            Not Before: Oct  5 06:41:20 2026 GMT
            Not After : Oct 12 06:41:20 2026 GMT
        Subject: CN=6ac34690-8917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:a1:d1:45:90:f2:c8:da:ed:5a:ef:37:7b:
                    fb:2f:4f:c3:e4:1d:03:84:e9:d7:fb:db:1d:07:13:
                    f7:44:c1:26:f6:32:86:02:9c:1f:f4:e5:b4:02:80:
                    8f:cd:e2:69:a9:f4:e0:d8:ba:72:fd:cc:d1:ae:e2:
                    b3:03:34:e1:cd:31:2e:41:f4:23:92:c3:14:c0:11:
                    a6:38:c0:ba:4f:98:aa:f6:76:ee:9d:4a:ae:8c:af:
                    41:f9:59:57:46:f8:7f:06:f6:9e:de:96:91:0d:d9:
                    b6:73:5e:d9:57:19:b8:4a:3b:4e:f4:6a:1b:ba:9b:
                    6f:3f:86:ca:3d:61:f2:39:e5:b4:6c:9a:e0:fe:6f:
                    fe:16:27:18:f6:09:4b:e1:bb:a0:c5:33:17:3f:a4:
                    b5:29:43:4f:f3:67:35:78:be:96:04:92:1a:c2:fc:
                    af:22:12:21:65:6d:e2:80:f7:91:0a:d7:bb:db:89:
                    2d:9b:ee:f7:07:f4:70:ed:20:c9:34:d1:90:ef:08:
                    e6:62:84:6c:34:b4:0c:06:12:95:2c:f4:7c:41:e0:
                    6f:a3:2b:b7:2d:7c:41:1a:ad:91:5d:fa:fb:d2:a6:
                    2f:ae:87:e6:23:74:46:6d:4a:88:7e:da:b1:8d:17:
                    a5:fd:a8:67:33:10:43:7a:44:ac:a1:c9:a5:95:3a:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D1:4F:F3:08:FF:A3:16:BB:33:27:8F:BB:B1:6E:14:ED:F9:46:79
            X509v3 Authority Key Identifier:
                keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1e:be:71:ea:39:ab:9c:db:90:9c:7b:d2:56:4e:2c:be:53:
         fc:65:43:a7:6c:ed:74:fc:2d:b3:3b:bf:65:d4:bc:85:fc:91:
         d5:74:3f:5f:46:b2:bb:8e:af:51:a8:4b:7d:2f:14:45:9f:43:
         64:30:3c:ec:38:bb:8f:f4:c8:fe:f8:a7:cb:6b:ad:36:26:aa:
         d7:85:06:94:e0:4e:99:cd:a0:36:07:f6:2e:e3:f4:12:0c:59:
         ca:51:dd:15:60:2c:af:e8:bd:0d:3b:d1:38:00:78:17:a4:5c:
         db:b4:db:28:b6:8b:64:67:5d:32:39:fd:76:db:be:ac:96:62:
         87:c3:96:4d:61:05:70:8e:56:a1:88:b9:82:9f:bf:c1:1b:b5:
         3d:cd:ed:d0:9b:15:ce:fd:8f:eb:22:81:72:8a:b5:be:94:36:
         82:13:5c:a9:62:15:ae:a6:c9:b3:82:1d:2a:90:94:65:ed:f8:
         91:31:88:be:48:57:7f:d6:83:40:2d:b9:90:f6:b0:6a:00:87:
         d2:c3:da:ff:41:22:6c:d9:73:7a:1b:43:71:9b:2c:ae:b3:a5:
         f6:5e:70:4d:ff:dc:5f:ae:70:c5:69:e9:ca:b8:21:d3:06:79:
         a5:1f:5d:a5:0f:c2:8f:b6:8c:b3:fe:68:70:f2:dc:07:06:df:
         7c:80:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:33 2026 by rpki-client