Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
File:                     NpGJraGZWwIPq4bXdZjGDCl0d1U.mft (raw, json)
Hash identifier:          DgUKhI1r1L/atsfwkvSFoMAboJXUG3DYnlzKsNGcx7A=
Subject key identifier:   6C:A2:F5:DD:BD:66:6C:E6:85:D5:34:96:E1:9A:20:6D:D8:0B:33:A9
Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
Certificate issuer:       /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
Manifest number:          40
Signing time:             Wed 07 Oct 2026 09:11:59 +0000
Manifest this update:     Wed 07 Oct 2026 09:11:59 +0000
Manifest next update:     Wed 14 Oct 2026 09:11:59 +0000
Files and hashes:         1: NpGJraGZWwIPq4bXdZjGDCl0d1U.crl (hash: JaDWGbmiLetk63Z54JwhcUxJRxdmT2v5glptuqjB/CY=)
                          2: B88C85348C0411F196792E7B4011F970.roa (hash: og2FsMI+6JRvqJvW9dRUgtuwJbUJvfXWEyBkZvtW874=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
                          rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755
        Validity
            Not Before: Oct  7 09:11:59 2026 GMT
            Not After : Oct 14 09:11:59 2026 GMT
        Subject: CN=6ac60cdf-c28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:ee:82:aa:b9:01:aa:2d:9a:60:ed:54:bd:
                    90:5c:71:80:64:1d:07:e1:e2:54:c6:a7:8b:87:e0:
                    7c:ce:e2:2e:a9:2f:b1:09:50:19:6d:2e:10:df:fb:
                    ce:ff:0f:6f:58:93:fc:40:24:01:30:e3:e8:33:35:
                    76:69:e3:aa:b9:30:d1:36:57:92:fc:07:a7:dd:74:
                    5b:2a:fe:6c:16:ea:9c:2d:ae:4a:9f:35:0a:a5:93:
                    0d:c3:6c:e4:09:13:7d:a9:40:bf:d1:0c:01:3b:b3:
                    f0:86:a0:47:82:1e:1d:88:d8:38:50:49:52:e0:67:
                    14:9c:b9:9c:1a:25:2c:81:c7:ad:a1:3f:f4:b3:71:
                    73:4b:a9:d8:1a:ab:47:aa:73:4a:74:09:d2:5c:f7:
                    2e:8b:19:82:f3:45:9f:00:1a:51:89:73:8d:cd:6c:
                    ae:51:b2:f7:65:19:92:d1:9d:ca:21:83:03:37:22:
                    74:b8:6e:39:d9:2e:34:ee:e7:38:29:17:cd:f4:f4:
                    d7:fa:8b:f1:3b:6a:21:8a:c5:fa:b3:99:51:85:a5:
                    49:68:0b:6d:f0:5f:ba:c8:e6:93:66:be:d0:94:e6:
                    2b:15:83:91:3d:2e:cc:65:ed:fa:b2:0a:cf:8d:80:
                    46:29:a8:8c:15:03:d1:00:ae:60:a5:43:e7:97:97:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A2:F5:DD:BD:66:6C:E6:85:D5:34:96:E1:9A:20:6D:D8:0B:33:A9
            X509v3 Authority Key Identifier:
                keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:69:3a:20:07:e1:df:47:66:c8:08:7c:0c:7f:dc:bb:dc:
         de:a5:ee:c8:e1:2c:8c:89:82:22:b3:05:5c:9d:ad:8f:5c:85:
         2a:c5:3d:86:24:4b:15:65:34:09:9e:ab:10:4a:94:b9:17:40:
         64:fa:0d:89:f0:c4:e9:e9:68:4a:b1:73:11:aa:0d:23:a0:2c:
         6c:e4:eb:0d:cc:c7:c1:fd:b0:30:ae:5d:93:27:83:45:f3:70:
         56:32:0b:5c:8b:6b:4a:eb:b2:66:1f:18:db:e9:13:95:f9:a1:
         09:8e:6e:89:5b:bd:30:d4:0f:50:a2:5d:97:c5:e4:b2:43:c0:
         0f:0e:4d:d1:74:18:65:40:3a:15:6a:5c:d3:ea:e8:2f:25:9b:
         13:60:64:0e:fa:b5:7f:a6:30:2c:55:93:a9:ae:a9:e4:9d:23:
         28:96:3a:30:24:68:77:34:f8:3c:01:39:b4:33:39:63:74:ff:
         33:3b:cc:90:0b:d6:da:53:42:7a:e1:a8:fa:48:7c:62:82:97:
         6e:77:f1:a8:e6:18:9f:4b:e1:0d:23:84:8e:4b:2c:19:dc:14:
         8f:db:b9:fb:a3:4d:f9:2f:24:0a:48:de:1f:fa:9c:fc:60:7a:
         f8:cd:e3:68:56:fc:32:56:2a:dd:60:3c:69:b1:56:75:e2:4b:
         a8:a7:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:05:01 2026 by rpki-client