Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File:                     nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier:          grbrh/zc1/x3nIS+xZbdLyIXRQQ2jq8JDFrz7tEX2tI=
Subject key identifier:   8E:0E:DC:52:4C:8F:53:80:5A:3F:0A:4D:E5:2B:71:26:C1:06:87:6C
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer:       /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial:       0E86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number:          0E5F
Signing time:             Sat 28 Feb 2026 17:54:50 +0000
Manifest this update:     Sat 28 Feb 2026 17:54:49 +0000
Manifest next update:     Sat 07 Mar 2026 17:54:49 +0000
Files and hashes:         1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: wZ+1/s0ooIstvognMeQtj5Arwvosn5StnhVRgbSG42E=)
                          2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: wn9BYbDEeMgzZ+nvIIVHE03FH3j72pfXBWyBUiQ/bUc=)
                          3: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 3DrTSsxaKfHNG5QI6Tt7BoAnrvxk6SFVvs/husXrnBI=)
                          4: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ=)
                          5: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: xh37AiJohCRfHSRUDjcvxE7B1+32xaC/K8WdUvsEnhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3718 (0xe86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
        Validity
            Not Before: Feb 28 17:54:49 2026 GMT
            Not After : Mar  7 17:54:49 2026 GMT
        Subject: CN=69a32bea-e4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:38:1d:e7:78:f4:13:9b:6e:44:0e:a6:d8:
                    62:4f:4b:3c:82:e2:14:cf:8c:28:d6:76:b2:d5:5e:
                    52:6c:8e:7c:1d:43:c3:6b:5c:30:9e:62:b7:b7:c8:
                    61:d3:dc:45:fc:7a:bf:2e:f9:04:38:31:ce:9e:b0:
                    de:90:65:d4:75:16:87:7f:0f:1f:8c:69:21:2e:1c:
                    2a:af:cd:ad:59:d8:56:a3:68:26:f7:8a:07:fd:44:
                    c0:34:18:35:61:c2:6b:81:d0:81:f6:76:7e:77:09:
                    f3:7c:df:7c:71:36:70:7e:dc:07:50:3b:31:94:70:
                    33:e0:37:84:2f:3d:43:3e:98:fb:e7:b8:7a:d9:bc:
                    51:d9:5d:c8:52:25:1b:62:e7:36:f3:a4:b8:f1:1a:
                    9c:bc:5f:f7:22:d6:45:12:e7:2f:5a:71:75:5b:9d:
                    3a:bc:22:30:81:57:40:da:35:1e:b7:c5:54:fb:30:
                    80:90:6a:b4:30:33:94:15:3e:38:2c:2c:61:b8:a3:
                    a6:41:dc:d7:16:ed:c7:15:c3:60:ab:c3:f5:7f:19:
                    2a:5c:e5:1d:0e:76:89:ce:f1:35:55:61:0d:93:37:
                    25:38:be:3e:e5:ce:7c:23:a7:eb:ea:9c:ab:19:5a:
                    e4:6e:93:eb:08:6e:b6:d1:f4:2a:4b:60:8c:be:fd:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:DC:52:4C:8F:53:80:5A:3F:0A:4D:E5:2B:71:26:C1:06:87:6C
            X509v3 Authority Key Identifier:
                keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:72:03:95:e6:18:e4:ba:a4:75:1f:95:aa:c0:26:e7:6c:9e:
         44:11:46:3d:f2:0c:37:56:4f:30:45:35:d0:82:2e:db:bc:2c:
         5e:77:d6:bc:52:1c:47:44:3c:eb:bc:72:75:ba:d0:2a:e7:93:
         6d:58:f6:76:47:4d:27:6a:62:70:b2:ca:22:21:8f:3e:1d:99:
         58:24:e6:fc:c6:21:3f:3e:1a:47:8f:de:c3:ad:8e:db:0d:28:
         ee:4c:5d:09:0a:b3:43:e9:43:74:69:f6:5d:36:5b:b3:f8:4d:
         ce:8f:71:19:0f:7a:9c:82:38:61:1b:0a:5a:a4:05:92:b8:f5:
         dd:67:2c:2b:1f:4f:e9:5b:02:46:23:49:a8:d4:3a:57:87:b4:
         eb:14:11:03:71:9c:2d:85:65:63:bf:4f:af:33:b1:d4:82:62:
         95:a2:d1:fc:7e:2e:4b:92:80:00:fa:d2:ce:c8:47:6d:e9:39:
         7b:9d:40:b7:6e:b4:e2:ee:c4:61:2a:d5:21:6d:29:af:09:55:
         86:0d:8d:eb:58:c0:00:f7:97:09:25:fb:77:c9:51:f3:3b:6e:
         aa:99:68:5e:0e:b8:6c:b3:0c:7f:cc:e1:2b:91:a6:3f:e4:99:
         79:16:58:cc:17:36:fe:b6:9d:a2:ac:49:7a:ec:f8:05:8b:06:
         74:59:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:39 2026 by rpki-client