Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File:                     nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier:          zxuF+n/dbliHzSe/t90bBkg7IcIU5G6R4WBmg7JFpGs=
Subject key identifier:   3B:A7:E9:A3:1C:FC:3F:A0:9B:7B:63:7A:F7:66:64:5E:B0:1A:4F:41
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number:          01EB
Signing time:             Mon 05 Oct 2026 04:05:00 +0000
Manifest this update:     Mon 05 Oct 2026 04:04:59 +0000
Manifest next update:     Mon 12 Oct 2026 04:04:59 +0000
Files and hashes:         1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: 3jMZhgj4qxWNUVrPJixUicHVKHuC4qHe1xckhvS9rKg=)
                          2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: b4+csE685B8vXmBeYhE1afbxpZz6mNZMcg0Inl+/Jyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: Oct  5 04:04:59 2026 GMT
            Not After : Oct 12 04:04:59 2026 GMT
        Subject: CN=6ac321eb-ff10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:df:6b:7a:95:d2:37:95:ef:4e:3d:0a:cf:
                    90:08:bb:4d:0f:21:1c:27:10:28:2b:26:82:6c:71:
                    2a:7c:0f:4d:d1:6a:7b:82:ea:90:43:99:52:e5:08:
                    a4:ba:65:8b:dd:b1:a9:8a:f9:50:47:04:9d:2a:39:
                    b5:9c:f9:02:06:fc:b9:c1:0d:aa:40:cf:ae:bd:36:
                    9e:c6:b4:4b:2a:60:03:97:33:c7:a2:0a:ed:cd:c7:
                    5d:b8:4b:cf:16:d3:a1:32:66:53:40:ac:b6:35:c2:
                    16:da:ed:08:51:db:5a:92:79:fd:d9:66:53:4c:b6:
                    e4:75:3b:c3:7c:0d:bb:b4:2d:e8:2e:b8:f8:90:fa:
                    f9:e5:5c:b5:a5:da:29:f1:8e:99:46:af:2b:ce:93:
                    19:93:89:a8:c5:16:55:49:7a:62:d7:7c:24:8f:96:
                    a6:67:57:35:c8:b1:eb:a6:6b:9d:60:33:64:95:8d:
                    1c:36:c7:df:c2:a9:b7:5a:2f:5b:f3:81:1c:13:5a:
                    ee:f9:e4:fc:41:00:16:e9:0b:50:ea:0b:a4:65:fc:
                    06:0e:16:7a:9c:ea:a0:55:38:6e:d7:e2:fc:5a:00:
                    5a:3e:e2:db:a5:f4:d5:09:40:07:47:9d:0e:ae:06:
                    a5:6c:55:07:ef:72:44:d2:e7:7b:dc:ff:8d:86:a8:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:E9:A3:1C:FC:3F:A0:9B:7B:63:7A:F7:66:64:5E:B0:1A:4F:41
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:f1:40:1c:55:2a:ed:92:f8:1d:4e:23:25:39:f6:ef:76:
         66:fe:fa:e8:24:53:55:99:df:31:2c:76:d9:61:aa:a2:06:52:
         8f:b3:2f:e6:77:43:b6:d5:d6:b8:d4:e0:95:74:f5:9c:aa:2f:
         2e:c4:1f:8e:01:19:22:80:22:f4:3f:e5:cb:3e:ed:19:b9:2c:
         ef:31:14:2f:34:fb:a2:5c:7b:da:e9:44:52:ec:86:a0:f9:4c:
         02:06:ec:eb:95:58:ea:2e:22:0b:39:c3:76:9f:19:b5:39:24:
         2f:94:28:ee:b8:8e:ea:59:82:42:e2:3e:4b:df:55:dd:be:b2:
         f5:5e:34:48:ad:58:e7:27:c0:37:a0:2e:36:44:4c:61:eb:3d:
         fa:97:03:07:17:2f:8c:26:e2:f9:5c:95:f0:2b:d4:87:93:e8:
         9c:70:1e:c4:17:5b:7d:2f:64:3a:c3:b1:90:47:e6:8d:2e:79:
         8b:e8:c4:6d:e0:1f:77:21:55:ce:3e:38:56:23:68:0a:a0:6a:
         aa:02:a7:58:18:eb:fe:79:2b:d1:9b:75:07:da:9b:3c:66:72:
         55:4f:a2:ff:0e:6f:66:78:a1:b6:b0:d4:f1:ef:17:b4:0c:26:
         61:43:88:f2:cc:44:c9:df:cd:18:94:e3:17:f5:40:72:cf:a0:
         96:bf:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:08:17 2026 by rpki-client