Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File:                     nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier:          rMLRQs4UQvD0QQFSKJ/BE3kdHN5VPpVbB28SlVB7tQ4=
Subject key identifier:   F1:EB:08:47:6B:B0:17:C3:E1:88:17:09:66:9D:5C:C7:6D:0D:6D:1A
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer:       /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number:          57
Signing time:             Sat 03 Oct 2026 08:56:44 +0000
Manifest this update:     Sat 03 Oct 2026 08:56:43 +0000
Manifest next update:     Sat 10 Oct 2026 08:56:43 +0000
Files and hashes:         1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: U3FWSme+O2z3nYUCsMXr57W+Kln1UaBbbCkWCvL0CdY=)
                          2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: V9OAtWmcfm4Nuv1e1Q4YP0cUaxGAb0f/aKkaOZRJSDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
                          rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
        Validity
            Not Before: Oct  3 08:56:43 2026 GMT
            Not After : Oct 10 08:56:43 2026 GMT
        Subject: CN=6ac0c34c-9bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:67:11:87:0c:64:12:4d:a3:76:41:c0:92:
                    9b:37:7d:9a:1d:89:ad:7a:26:33:7f:c5:f2:69:6b:
                    4b:aa:cc:1c:e5:c3:9a:13:60:d1:30:63:72:01:65:
                    1b:f7:72:07:4f:4e:9c:0c:50:f5:55:56:47:b9:2a:
                    e0:91:a7:2f:2b:68:5a:8a:e1:ed:f6:c3:62:ab:22:
                    e4:44:ca:44:29:b2:a2:6c:c0:4a:7b:ac:ae:2e:5f:
                    90:2a:eb:36:1b:42:af:1b:a3:71:3d:25:0b:dd:c4:
                    34:5a:c2:6a:13:48:f7:0a:10:d4:82:9c:c1:70:7f:
                    31:d1:a3:75:bb:75:04:d8:bd:71:56:f8:80:fa:ec:
                    fe:af:8a:f1:dc:b3:2c:74:b4:c9:37:6d:4a:54:ee:
                    99:7c:4a:21:0c:e0:55:a2:ef:0c:76:ea:bd:6a:e0:
                    e7:19:3b:72:af:05:e4:ba:2e:bb:82:95:58:6e:6b:
                    39:01:a9:40:d6:a5:3d:0b:1f:ff:09:cc:98:56:38:
                    ff:94:7c:98:da:ac:9e:01:18:70:d4:b5:aa:72:b7:
                    25:6a:22:1c:3a:f1:61:fd:73:8d:cf:9e:3c:b3:bc:
                    79:a7:d0:45:31:c2:4c:5c:5f:fe:05:aa:d2:37:90:
                    5b:5c:55:84:ba:e8:e2:42:a1:92:87:1e:66:1f:8d:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:08:47:6B:B0:17:C3:E1:88:17:09:66:9D:5C:C7:6D:0D:6D:1A
            X509v3 Authority Key Identifier:
                keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:36:3e:d9:f1:c5:fa:23:13:a8:d0:14:96:de:19:f4:8f:cb:
         33:24:0c:da:26:55:f2:1e:0d:77:dc:83:da:02:58:d9:85:6d:
         cd:2f:eb:95:f7:92:cf:eb:f2:9e:8a:01:55:7d:f7:e4:43:86:
         ff:3c:e2:28:37:f6:24:06:b6:e1:75:20:93:3c:fd:fe:21:f1:
         b3:9a:a3:37:40:bc:8e:91:85:34:99:b0:58:46:a1:8d:f3:28:
         7b:67:fa:0b:f4:41:d0:ce:31:c1:9a:29:13:50:8a:78:5a:98:
         7e:80:f5:2f:c5:87:50:0f:d0:55:a9:aa:6c:38:b9:7a:fe:57:
         95:79:33:a0:a1:54:db:94:4b:48:e6:e2:76:36:d8:03:85:69:
         11:6f:c9:7d:eb:1c:58:40:ef:39:38:b4:37:e1:c2:d4:6f:a3:
         74:1f:ca:53:58:d0:38:7b:62:ed:f6:28:84:90:8e:8e:d4:3b:
         e3:26:26:f7:15:9f:fa:94:4c:e5:e8:d2:e7:30:5a:93:dc:54:
         c1:bd:cf:7a:8b:72:35:50:6c:64:0c:4c:18:85:1d:2c:cf:f0:
         a3:16:95:5c:f0:25:ab:28:df:7f:d4:ed:0c:b9:86:71:5a:9d:
         65:9f:2f:04:61:92:fc:70:1b:25:a4:a5:43:7c:cb:26:c8:95:
         5c:b0:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:28 2026 by rpki-client