Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
File:                     Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json)
Hash identifier:          9A7LOPJoruAUnY6BrEHZvvxzhnocKDwhi5QoiqSc5mw=
Subject key identifier:   1B:CF:CB:66:D5:62:09:92:EC:5D:D8:DA:71:E0:87:AB:4F:27:5F:FC
Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
Certificate issuer:       /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
Manifest number:          0219
Signing time:             Sat 03 Oct 2026 03:34:15 +0000
Manifest this update:     Sat 03 Oct 2026 03:34:14 +0000
Manifest next update:     Sat 10 Oct 2026 03:34:14 +0000
Files and hashes:         1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: H3zB+4zR/7JDI3W9Trx7ibQqTEJpv7EWIiMqts9uVNg=)
                          2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: yviocZTIT/QN9ZH5Z7jImoFYZZ1ZtuGiFiBRlnTY9io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
        Validity
            Not Before: Oct  3 03:34:14 2026 GMT
            Not After : Oct 10 03:34:14 2026 GMT
        Subject: CN=6ac077b7-40d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:e0:ce:5d:21:35:5e:9c:12:e4:59:a7:5a:
                    c5:3c:87:4e:90:9e:d0:03:1a:9c:2d:62:b1:01:78:
                    e3:05:e8:09:1c:c8:a4:e2:d4:a2:16:47:97:49:7c:
                    b1:8b:d1:e2:e9:bf:60:98:86:58:65:99:f0:7b:9f:
                    6d:94:f1:ef:30:c0:fe:97:7f:5b:e4:91:b9:fd:e9:
                    39:c5:65:46:23:af:cc:86:23:a9:de:00:fc:31:05:
                    00:d4:01:ef:66:89:a4:69:4f:58:ce:3a:a4:e1:b1:
                    c7:44:42:49:8e:78:77:d2:8e:81:fb:90:1e:ae:58:
                    a1:e3:ed:6c:dd:2b:cd:8a:f0:8e:96:51:8f:fe:f5:
                    a8:8a:c4:b0:44:5d:19:ee:62:f0:93:bc:66:44:a6:
                    bc:25:d8:04:ce:7e:5a:87:7c:c8:d9:18:22:31:e1:
                    0b:0e:1a:d2:ef:e2:fc:34:44:6a:20:8d:61:14:79:
                    2a:6d:73:35:d5:01:26:3f:e6:cf:6b:82:b1:d3:7e:
                    aa:22:73:f7:bb:74:e0:00:00:6d:f4:c6:27:96:6c:
                    9b:08:0d:27:85:0b:13:33:dd:60:6a:5c:cc:5a:1f:
                    27:fe:0a:ba:96:b2:a1:17:ce:ec:6f:84:68:c3:8a:
                    a2:13:c3:37:a1:54:4e:9c:f5:23:15:56:69:f9:d7:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CF:CB:66:D5:62:09:92:EC:5D:D8:DA:71:E0:87:AB:4F:27:5F:FC
            X509v3 Authority Key Identifier:
                keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:da:cf:d9:dc:bd:bc:da:e5:73:71:e3:f2:db:0f:9c:92:02:
         67:3f:d5:16:d3:26:06:5f:c7:01:fc:86:03:40:99:c5:2f:7e:
         ce:02:1f:8f:fd:11:34:02:e7:27:e3:cb:f8:ac:5e:dc:d5:63:
         9e:53:79:4a:b7:a1:f7:3a:3f:9d:3c:5c:c9:0b:7d:81:19:0e:
         77:fd:8f:35:3e:f1:48:ce:56:ad:f5:19:4c:aa:d3:08:69:32:
         0a:15:aa:0b:bd:fb:42:50:a2:6a:53:c2:a2:32:17:d6:17:c9:
         02:4f:74:e1:83:da:3f:3f:00:20:22:8a:f3:a6:0c:35:a0:0d:
         b9:84:1c:64:39:83:7a:01:01:13:17:54:3c:e4:57:22:d8:19:
         b7:d4:c1:f6:1f:ed:ee:00:2e:51:54:de:2c:b0:4c:c5:0c:b6:
         4c:85:cf:3c:36:f2:33:db:d0:12:e2:ea:5d:23:d8:c2:7d:16:
         c3:b5:50:b9:aa:81:ea:9f:f1:b7:6e:b5:84:dd:7c:b0:08:08:
         f5:43:bd:d1:69:f8:54:5e:e3:39:f3:bc:85:e0:9c:7f:44:d9:
         4a:d0:ac:c6:22:21:26:0a:cf:29:e1:d4:d1:34:21:31:a6:e1:
         ff:7b:d5:00:c5:c7:d0:95:ed:3e:1b:cb:9f:88:9e:2f:3a:ca:
         a8:63:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:31 2026 by rpki-client