Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File:                     nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier:          z2KqXoG+vczTEDuCPrnishsYiHYz0St/Jtozlgw560o=
Subject key identifier:   B3:99:B5:41:23:FC:0A:71:F7:2F:24:C7:1D:40:38:21:C6:E2:3A:37
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer:       /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial:       0EDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number:          0EAD
Signing time:             Tue 28 Jul 2026 17:50:26 +0000
Manifest this update:     Tue 28 Jul 2026 17:50:26 +0000
Manifest next update:     Tue 04 Aug 2026 17:50:26 +0000
Files and hashes:         1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: dPrLAPxUvLY12oUtuOlIwg28RGy7ye+azdvYOQCmqIY=)
                          2: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=)
                          3: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: d9F++wY6Y6kgkdiYtZ2QORaHxCioMHguW70TTV+zajY=)
                          4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: zukV/SXcPzYBgJKVgWzwFqdqBSRV39PGc6HpPmopdXY=)
                          5: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3804 (0xedc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
        Validity
            Not Before: Jul 28 17:50:26 2026 GMT
            Not After : Aug  4 17:50:26 2026 GMT
        Subject: CN=6a68ebe2-3fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:c8:32:54:ee:a5:9e:11:7d:86:85:a5:ca:
                    97:33:f5:6f:47:1d:e7:47:17:41:a4:71:47:04:9f:
                    f8:af:0f:6b:04:21:bc:e3:47:95:c4:96:47:9b:d7:
                    78:fa:68:9a:86:28:26:f9:ef:11:45:a0:a6:8c:86:
                    e1:dc:b9:d0:4f:df:db:ef:fb:ef:5f:2d:f0:a5:53:
                    d8:d6:9a:54:ae:c3:f5:d3:29:8c:fc:95:9f:62:37:
                    f3:51:1e:f9:9e:97:2a:5e:de:1d:c5:ce:29:ca:32:
                    e7:8e:92:ec:f0:10:ba:62:2f:d5:50:06:03:38:03:
                    25:d4:a6:47:2a:b2:24:bc:e0:39:a4:05:ae:e9:b0:
                    c7:76:75:e0:e6:e3:d0:a4:ea:9b:26:06:7f:c3:c1:
                    70:f3:52:8d:d3:b5:48:e7:51:8a:fc:c5:ac:a1:cd:
                    50:d3:b2:93:c3:33:98:bc:7a:1b:94:4c:77:21:c8:
                    d2:3a:3a:70:3e:64:4c:2b:1b:28:dd:4b:1c:06:eb:
                    2e:1a:b7:cd:c1:24:d7:9a:94:9e:e9:dd:6d:7a:3d:
                    d9:ae:86:03:dc:74:7b:15:e4:72:06:c3:e5:2b:a0:
                    9d:94:72:36:b3:6c:ff:78:0a:04:4f:da:85:7b:75:
                    d6:ce:22:4d:75:90:53:89:54:20:5a:63:e2:32:87:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:B5:41:23:FC:0A:71:F7:2F:24:C7:1D:40:38:21:C6:E2:3A:37
            X509v3 Authority Key Identifier:
                keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:bf:84:dc:b6:1a:98:16:81:af:37:46:21:ca:49:0e:87:
         9a:eb:2e:ff:56:3b:e0:85:ed:0f:ab:3d:b2:38:4b:00:2a:97:
         a0:e3:f9:c2:9e:1a:ff:5c:1e:1d:9c:e0:76:98:d5:6c:4f:d2:
         4a:37:c3:7e:2e:31:36:07:7e:8e:9c:f6:d7:90:a0:28:a4:1d:
         9b:8e:c0:1a:e5:7b:a0:88:c2:b0:21:10:f3:5b:65:b2:a8:8d:
         1e:32:f7:1c:24:2d:1c:a5:3d:a8:e2:0b:51:b4:43:6e:dc:51:
         1a:10:48:2e:98:f8:af:29:8e:74:68:45:64:17:83:98:b8:b1:
         bb:df:cb:7b:00:89:6f:c3:a5:88:0b:7b:eb:4f:43:58:9b:79:
         70:a2:1b:45:70:82:36:2a:52:d2:53:d7:41:b2:77:ab:fe:b2:
         37:36:25:e3:6c:78:79:ba:db:bc:34:d2:1f:57:6a:67:55:75:
         cd:63:8b:1a:be:10:2e:22:99:03:7f:72:5a:43:4f:7b:44:15:
         ea:d2:67:8f:7c:5b:95:6d:12:2a:a8:91:4c:00:d2:4c:70:be:
         29:87:87:27:61:eb:cf:bf:d9:2e:8a:15:72:77:ee:4d:cc:c2:
         68:ab:86:6c:fe:b9:d3:78:6c:ee:00:25:e0:e6:63:cb:47:4d:
         be:a8:49:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw
Njg2RjU5ODkwHhcNMjYwNzI4MTc1MDI2WhcNMjYwODA0MTc1MDI2WjAYMRYwFAYD
VQQDEw02YTY4ZWJlMi0zZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1HIMlTupZ4RfYaFpcqXM/VvRx3nRxdBpHFHBJ/4rw9rBCG840eVxJZHm9d4
+miahigm+e8RRaCmjIbh3LnQT9/b7/vvXy3wpVPY1ppUrsP10ymM/JWfYjfzUR75
npcqXt4dxc4pyjLnjpLs8BC6Yi/VUAYDOAMl1KZHKrIkvOA5pAWu6bDHdnXg5uPQ
pOqbJgZ/w8Fw81KN07VI51GK/MWsoc1Q07KTwzOYvHoblEx3IcjSOjpwPmRMKxso
3UscBusuGrfNwSTXmpSe6d1tej3ZroYD3HR7FeRyBsPlK6CdlHI2s2z/eAoET9qF
e3XWziJNdZBTiVQgWmPiMofLTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOZtUEj
/Apx9y8kxx1AOCHG4jo3MB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4
MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2
NDlrVFllSHhjc0lHaHZXWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmbm/hNy2GpgWga83RiHKSQ6Hmusu/1Y74IXtD6s9sjhLACqXoOP5wp4a/1we
HZzgdpjVbE/SSjfDfi4xNgd+jpz215CgKKQdm47AGuV7oIjCsCEQ81tlsqiNHjL3
HCQtHKU9qOILUbRDbtxRGhBILpj4rymOdGhFZBeDmLixu9/LewCJb8OliAt7609D
WJt5cKIbRXCCNipS0lPXQbJ3q/6yNzYl42x4ebrbvDTSH1dqZ1V1zWOLGr4QLiKZ
A39yWkNPe0QV6tJnj3xblW0SKqiRTADSTHC+KYeHJ2Hrz7/ZLooVcnfuTczCaKuG
bP6503hs7gAl4OZjy0dNvqhJdA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:29 2026 by rpki-client