Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
File:                     NrTbHfWmiZzFM-bZa8SddpxYzMw.mft (raw, json)
Hash identifier:          J2OYvDRMvlXOw9Zex8OcdqZRddL/AaCSb3dSDXekv10=
Subject key identifier:   EA:60:05:06:85:BF:37:74:74:A2:3B:50:21:C7:27:B3:D7:67:9E:5A
Authority key identifier: 36:B4:DB:1D:F5:A6:89:9C:C5:33:E6:D9:6B:C4:9D:76:9C:58:CC:CC
Certificate issuer:       /CN=A9119D72/serialNumber=36B4DB1DF5A6899CC533E6D96BC49D769C58CCCC
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NrTbHfWmiZzFM-bZa8SddpxYzMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
Manifest number:          0E
Signing time:             Thu 05 Nov 2026 09:16:04 +0000
Manifest this update:     Thu 05 Nov 2026 09:16:03 +0000
Manifest next update:     Thu 12 Nov 2026 09:16:03 +0000
Files and hashes:         1: NrTbHfWmiZzFM-bZa8SddpxYzMw.crl (hash: LKk6YkJz+Wrh8hkBhPy1IyxiHQ8YdLTKkJBDHbPlxmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.crl
                          rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NrTbHfWmiZzFM-bZa8SddpxYzMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 09:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119D72, serialNumber=36B4DB1DF5A6899CC533E6D96BC49D769C58CCCC
        Validity
            Not Before: Nov  5 09:16:03 2026 GMT
            Not After : Nov 12 09:16:03 2026 GMT
        Subject: CN=6aec4954-5ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:36:99:f8:24:12:f8:0a:61:e7:f5:d0:47:
                    02:bb:e4:67:b9:26:5c:24:b6:94:63:dc:ff:af:8b:
                    27:8e:97:8f:f0:d8:af:41:1e:77:f8:a6:73:a7:d2:
                    ef:ff:c8:a2:c7:e0:25:d7:7f:73:51:ff:7e:c7:e2:
                    bc:ca:17:81:07:5f:1d:ab:a6:24:d1:e1:45:45:78:
                    d2:d0:41:53:a6:ee:d4:90:72:4b:c3:a0:fb:3e:e1:
                    88:48:21:6b:0b:dd:a7:de:6b:ab:f1:33:e5:2d:32:
                    e0:9f:0c:4d:f9:81:80:dc:a8:fb:69:e4:3f:e1:ed:
                    bf:07:de:f7:8f:d9:a8:79:dc:40:8a:e0:10:7b:4f:
                    da:a2:8a:14:9c:89:e9:a5:8a:b0:41:c2:d6:37:db:
                    35:de:66:29:bf:de:16:49:af:c0:45:69:5e:05:22:
                    ec:4c:f9:0f:ab:8d:9a:ee:28:a2:ac:a8:71:c6:88:
                    12:9a:bd:43:fe:bf:d2:13:4c:3a:3b:d1:dc:09:1a:
                    e0:28:31:25:93:d5:91:f9:6b:b0:e6:11:cb:f0:89:
                    e6:52:b1:57:c4:bf:11:d7:13:81:5b:ea:0c:34:56:
                    29:6a:51:80:b0:c1:03:c5:9d:31:f6:bf:b1:3d:f2:
                    8a:6d:ab:db:86:00:bf:b8:29:c4:5e:da:7d:99:0b:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:05:06:85:BF:37:74:74:A2:3B:50:21:C7:27:B3:D7:67:9E:5A
            X509v3 Authority Key Identifier:
                keyid:36:B4:DB:1D:F5:A6:89:9C:C5:33:E6:D9:6B:C4:9D:76:9C:58:CC:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NrTbHfWmiZzFM-bZa8SddpxYzMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:5a:42:74:ec:a1:e4:9c:35:4d:42:f7:57:c2:d3:81:0b:
         fc:f3:b0:d3:08:1e:3b:ff:eb:43:2f:c5:55:5f:94:7c:91:f9:
         6e:dd:d2:d1:7c:7c:8a:34:24:97:49:aa:02:bc:f4:41:48:2b:
         80:e5:89:f2:c6:74:53:e1:89:f6:77:2a:2c:23:1e:34:0a:9f:
         39:5c:fb:50:cc:8d:e4:0c:34:53:fc:1f:7c:32:ba:a9:b4:ed:
         8a:77:3a:1e:b7:59:2e:e1:60:88:83:8c:df:90:62:c2:02:53:
         2f:8b:1e:8c:ac:37:e9:a2:d1:f4:be:52:dd:dc:cd:91:50:d0:
         3d:f0:9a:44:02:33:1b:fe:e5:b1:ec:c7:1e:48:e5:0b:10:cb:
         3f:aa:4b:00:56:d4:09:bb:2c:c2:ae:03:57:0c:8d:6a:21:9b:
         6e:c3:57:9a:da:f6:92:a0:32:2f:05:ba:29:e3:3e:d3:ae:e7:
         77:7d:eb:51:09:02:2e:be:d8:fc:32:0a:75:82:ee:23:5c:7a:
         26:c0:38:09:fd:ea:4d:92:1f:83:a8:94:a7:67:12:1c:aa:ee:
         f5:a0:37:5c:bc:7f:cf:97:a6:4d:ec:60:60:45:7b:8c:1e:6f:
         10:bc:c1:15:5a:b5:f6:1f:fb:67:b5:69:22:8c:aa:8e:65:aa:
         a5:ba:e9:32
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OUQ3MjExMC8GA1UEBRMoMzZCNERCMURGNUE2ODk5Q0M1MzNFNkQ5NkJDNDlENzY5
QzU4Q0NDQzAeFw0yNjExMDUwOTE2MDNaFw0yNjExMTIwOTE2MDNaMBgxFjAUBgNV
BAMTDTZhZWM0OTU0LTVjYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCR3TaZ+CQS+Aph5/XQRwK75Ge5JlwktpRj3P+viyeOl4/w2K9BHnf4pnOn0u//
yKLH4CXXf3NR/37H4rzKF4EHXx2rpiTR4UVFeNLQQVOm7tSQckvDoPs+4YhIIWsL
3afea6vxM+UtMuCfDE35gYDcqPtp5D/h7b8H3veP2ah53ECK4BB7T9qiihScieml
irBBwtY32zXeZim/3hZJr8BFaV4FIuxM+Q+rjZruKKKsqHHGiBKavUP+v9ITTDo7
0dwJGuAoMSWT1ZH5a7DmEcvwieZSsVfEvxHXE4Fb6gw0VilqUYCwwQPFnTH2v7E9
8optq9uGAL+4KcRe2n2ZC/OZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6mAFBoW/
N3R0ojtQIccns9dnnlowHwYDVR0jBBgwFoAUNrTbHfWmiZzFM+bZa8SddpxYzMww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5RDcyLzJBODI1REFDQzc4
NDExRjE4REZFQjdGMzNCMTFGOTcwL05yVGJIZldtaVp6Rk0tYlphOFNkZHB4WXpN
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTnJUYkhmV21pWnpGTS1iWmE4U2RkcHhZek13LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5
RDcyLzJBODI1REFDQzc4NDExRjE4REZFQjdGMzNCMTFGOTcwL05yVGJIZldtaVp6
Rk0tYlphOFNkZHB4WXpNdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQApzVpCdOyh5Jw1TUL3V8LTgQv887DTCB47/+tDL8VVX5R8kflu3dLRfHyKNCSX
SaoCvPRBSCuA5YnyxnRT4Yn2dyosIx40Cp85XPtQzI3kDDRT/B98MrqptO2Kdzoe
t1ku4WCIg4zfkGLCAlMvix6MrDfpotH0vlLd3M2RUNA98JpEAjMb/uWx7MceSOUL
EMs/qksAVtQJuyzCrgNXDI1qIZtuw1ea2vaSoDIvBbop4z7Trud3fetRCQIuvtj8
Mgp1gu4jXHomwDgJ/epNkh+DqJSnZxIcqu71oDdcvH/Pl6ZN7GBgRXuMHm8QvMEV
WrX2H/tntWkijKqOZaqluuky
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:49:40 2026 by rpki-client