Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File:                     nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier:          SXXDt4X85t8Xyjlwq3Cgp/wqG+GcV6uJ6g9V+cSX60c=
Subject key identifier:   55:70:A0:43:66:E5:33:74:92:83:2B:D9:FC:F3:9C:AA:E9:30:E0:1A
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer:       /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number:          0FED
Signing time:             Mon 02 Mar 2026 01:54:49 +0000
Manifest this update:     Mon 02 Mar 2026 01:54:47 +0000
Manifest next update:     Mon 09 Mar 2026 01:54:47 +0000
Files and hashes:         1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: 3m73r7n3oE6oO2d1N1DMPpf/wSWH+aLtY9KOz5+MGjo=)
                          2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
                          rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
        Validity
            Not Before: Mar  2 01:54:47 2026 GMT
            Not After : Mar  9 01:54:47 2026 GMT
        Subject: CN=69a4ede8-7b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:f4:b2:e8:bd:e7:38:60:79:19:bb:91:b9:
                    9b:ee:2a:cf:7c:d0:5f:7f:a5:4b:58:af:d9:86:f6:
                    73:f8:b8:27:1f:b8:84:33:ae:b2:f1:0f:b3:4d:ec:
                    37:ef:78:9e:c7:a4:99:a0:cb:a9:9e:47:27:28:c4:
                    9e:64:11:5b:a8:b3:9a:2b:c0:5e:0e:69:e5:18:50:
                    dd:7f:98:2c:15:8e:a4:42:8b:30:4e:c2:93:40:c0:
                    b9:83:92:97:86:a8:15:3f:da:f3:db:cf:ad:41:1c:
                    62:64:9d:aa:72:e0:9d:b7:63:b4:4a:2a:71:74:27:
                    28:be:5f:7c:5e:9f:c2:6b:d0:c8:4e:32:6d:c3:ce:
                    46:ea:70:c6:e6:c8:37:32:38:c2:25:f2:22:52:c9:
                    29:a9:d2:2e:7b:73:54:00:ac:76:4c:da:5e:34:2b:
                    87:91:27:f4:66:72:b3:cb:55:5b:6b:10:d1:26:2c:
                    69:e3:82:3c:ed:3c:a7:99:00:e0:4c:96:cc:86:30:
                    cb:05:77:04:c2:4e:4f:84:ea:af:c4:65:6a:9e:55:
                    02:2d:83:0f:39:b8:3d:30:94:93:d0:1e:42:8e:25:
                    a4:0b:ab:f9:be:3b:39:35:3d:20:6d:5a:81:82:c5:
                    8a:40:12:f0:b0:55:2a:21:56:d4:f9:8a:c5:f4:b6:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:70:A0:43:66:E5:33:74:92:83:2B:D9:FC:F3:9C:AA:E9:30:E0:1A
            X509v3 Authority Key Identifier:
                keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:00:fe:89:a6:1f:32:cc:27:9a:73:37:73:f8:a4:04:66:7f:
         8a:65:e7:65:b2:f4:39:35:0e:24:f0:83:bf:43:52:0d:e9:2b:
         b6:8a:2e:3d:aa:d3:d6:65:64:72:70:ef:29:35:9f:de:b9:80:
         ad:dc:68:a9:85:d4:b1:4d:6c:b6:71:0d:c7:df:54:00:c2:df:
         42:2e:bd:d5:50:84:13:a1:2b:d1:2c:26:5a:bd:8a:25:21:f2:
         cb:aa:54:a4:1a:68:5d:76:39:6b:cd:32:07:2c:41:3f:77:b6:
         fc:85:0f:69:f1:45:c9:bd:85:a1:7a:ad:0c:64:15:ba:c1:60:
         86:b2:75:43:ff:c7:c3:0b:c2:44:30:11:cb:1d:78:ae:f2:78:
         bd:84:c7:dd:50:df:10:3b:94:12:57:dd:11:42:22:a1:33:f3:
         4d:8c:b3:54:9f:7c:9c:16:6f:3e:16:72:a4:94:06:44:64:99:
         eb:e4:55:29:7a:39:b4:71:c6:42:ba:00:07:1e:b3:fb:ca:26:
         80:04:2e:74:9c:5b:25:42:23:1d:bb:10:27:7d:84:6f:64:a0:
         13:b6:fb:6c:5d:56:73:6f:a0:4d:a6:b4:4e:d6:5c:ef:25:46:
         8d:22:2b:25:9e:0a:f0:de:94:28:fd:15:88:d6:50:76:bb:8f:
         11:c1:44:1f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5
RDQ4MjRDQTAeFw0yNjAzMDIwMTU0NDdaFw0yNjAzMDkwMTU0NDdaMBgxFjAUBgNV
BAMTDTY5YTRlZGU4LTdiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtvPSy6L3nOGB5GbuRuZvuKs980F9/pUtYr9mG9nP4uCcfuIQzrrLxD7NN7Dfv
eJ7HpJmgy6meRycoxJ5kEVuos5orwF4OaeUYUN1/mCwVjqRCizBOwpNAwLmDkpeG
qBU/2vPbz61BHGJknapy4J23Y7RKKnF0Jyi+X3xen8Jr0MhOMm3DzkbqcMbmyDcy
OMIl8iJSySmp0i57c1QArHZM2l40K4eRJ/RmcrPLVVtrENEmLGnjgjztPKeZAOBM
lsyGMMsFdwTCTk+E6q/EZWqeVQItgw85uD0wlJPQHkKOJaQLq/m+Ozk1PSBtWoGC
xYpAEvCwVSohVtT5isX0tvhPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVXCgQ2bl
M3SSgyvZ/POcqukw4BowHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2
NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
NjNEL0Y5Qzk3NjZDNzI2NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBX
UHdZaWJoaVZCenAxSUpNby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBxAP6Jph8yzCeaczdz+KQEZn+KZedlsvQ5NQ4k8IO/Q1IN6Su2ii49qtPWZWRy
cO8pNZ/euYCt3GiphdSxTWy2cQ3H31QAwt9CLr3VUIQToSvRLCZavYolIfLLqlSk
GmhddjlrzTIHLEE/d7b8hQ9p8UXJvYWheq0MZBW6wWCGsnVD/8fDC8JEMBHLHXiu
8ni9hMfdUN8QO5QSV90RQiKhM/NNjLNUn3ycFm8+FnKklAZEZJnr5FUpejm0ccZC
ugAHHrP7yiaABC50nFslQiMduxAnfYRvZKATtvtsXVZzb6BNprRO1lzvJUaNIisl
ngrw3pQo/RWI1lB2u48RwUQf
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:35 2026 by rpki-client