Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File:                     nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier:          7iU6OFqOuXhp9Y/Vvb1XAkk+luRjqwTTwbQ+UchEyY0=
Subject key identifier:   BE:5E:BA:6E:7C:DE:74:25:B2:9B:2A:5A:AE:27:7D:DA:93:1E:00:EE
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer:       /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number:          1057
Signing time:             Fri 12 Jun 2026 17:26:52 +0000
Manifest this update:     Fri 12 Jun 2026 17:26:51 +0000
Manifest next update:     Fri 19 Jun 2026 17:26:51 +0000
Files and hashes:         1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: StAGXTmNZsz9+mukZKBwnw9R3aRnrAktAj/wc8RJU2U=)
                          2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
                          rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
        Validity
            Not Before: Jun 12 17:26:51 2026 GMT
            Not After : Jun 19 17:26:51 2026 GMT
        Subject: CN=6a2c415c-4adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:71:9a:c6:6c:58:25:50:18:02:c3:46:5b:
                    46:30:7b:a9:76:64:4f:f6:8b:1f:86:8d:b3:5d:f2:
                    fb:52:75:55:de:07:5e:69:7e:33:27:d3:b0:63:d7:
                    1d:4f:6d:97:81:17:11:b4:78:f2:dc:7a:d9:21:19:
                    86:bf:35:cb:ce:7f:fb:3b:6f:80:85:f1:eb:be:ed:
                    87:15:13:ba:51:f6:58:42:f6:47:63:36:ee:50:8c:
                    19:31:a9:8e:22:6a:23:8e:f1:af:1d:c1:0e:56:a8:
                    74:2b:65:b9:92:c8:85:e6:90:a5:97:20:85:2e:2a:
                    76:76:8b:2b:8c:42:8b:c2:36:2f:3d:c5:b2:43:b3:
                    20:c9:5e:71:bb:8d:b3:a2:9b:d2:31:a6:f7:96:79:
                    24:c9:d9:5e:32:ae:b2:c2:52:31:2f:ab:be:6f:d8:
                    78:ae:cf:aa:5d:50:7a:77:d5:16:b3:df:e9:e8:5d:
                    fd:d5:d9:02:f0:86:bf:f2:b0:3c:b8:b2:b7:dc:c7:
                    51:8d:5f:3f:00:88:f3:66:3d:c8:33:91:c2:76:cf:
                    83:c8:24:f4:81:96:1e:cc:63:c4:1e:6a:1a:b2:6a:
                    d6:3b:40:83:73:c8:c6:f0:c3:e0:a8:ea:a9:d1:e3:
                    eb:8f:8c:45:76:30:80:67:a0:d5:13:68:9a:94:cc:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5E:BA:6E:7C:DE:74:25:B2:9B:2A:5A:AE:27:7D:DA:93:1E:00:EE
            X509v3 Authority Key Identifier:
                keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:06:5d:aa:c0:e1:bf:c2:f1:ee:5f:55:17:8d:11:53:e3:86:
         64:13:df:1b:c1:aa:ca:5a:53:48:29:b2:73:58:cb:fa:cf:ba:
         fd:30:99:cc:72:22:dd:07:38:ad:30:55:89:2c:76:df:8e:77:
         c7:65:72:f7:45:dc:76:a1:6a:ff:9b:94:a4:9a:76:61:b1:54:
         c3:aa:fb:5a:b6:ea:e6:50:99:2f:2e:b6:39:c5:be:67:5b:9f:
         58:aa:44:e4:ce:1e:90:51:0c:34:67:57:53:0d:1f:ff:60:24:
         21:b1:bb:4d:2a:8a:ca:76:e0:39:87:b4:af:9b:b2:a9:df:3f:
         e4:61:65:46:e3:b1:dc:24:6b:03:d7:09:1d:9e:8e:f0:bd:18:
         b8:eb:8e:ef:34:32:ab:c1:95:20:f4:2d:b3:cb:5f:77:7e:ac:
         de:16:26:18:19:9d:2b:21:c0:60:b9:99:9c:c6:05:08:24:e5:
         f7:0e:31:ed:85:c3:4a:dc:c0:b5:44:67:b2:6a:0e:73:d3:c6:
         62:83:61:1c:18:c2:f9:0c:ad:2f:6d:17:7c:88:45:c3:46:1d:
         6f:a0:46:b3:7f:9a:ae:9a:69:48:e1:2d:9e:89:3b:34:ac:79:
         9a:0d:82:7e:3b:68:aa:cf:98:0e:b6:fc:f9:0b:ce:a9:21:54:
         05:fb:24:e9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5
RDQ4MjRDQTAeFw0yNjA2MTIxNzI2NTFaFw0yNjA2MTkxNzI2NTFaMBgxFjAUBgNV
BAMTDTZhMmM0MTVjLTRhZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWO3GaxmxYJVAYAsNGW0Ywe6l2ZE/2ix+GjbNd8vtSdVXeB15pfjMn07Bj1x1P
bZeBFxG0ePLcetkhGYa/NcvOf/s7b4CF8eu+7YcVE7pR9lhC9kdjNu5QjBkxqY4i
aiOO8a8dwQ5WqHQrZbmSyIXmkKWXIIUuKnZ2iyuMQovCNi89xbJDsyDJXnG7jbOi
m9IxpveWeSTJ2V4yrrLCUjEvq75v2Hiuz6pdUHp31Raz3+noXf3V2QLwhr/ysDy4
srfcx1GNXz8AiPNmPcgzkcJ2z4PIJPSBlh7MY8QeahqyatY7QINzyMbww+Co6qnR
4+uPjEV2MIBnoNUTaJqUzDCvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvl66bnze
dCWymyparid92pMeAO4wHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2
NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
NjNEL0Y5Qzk3NjZDNzI2NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBX
UHdZaWJoaVZCenAxSUpNby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAIBl2qwOG/wvHuX1UXjRFT44ZkE98bwarKWlNIKbJzWMv6z7r9MJnMciLdBzit
MFWJLHbfjnfHZXL3Rdx2oWr/m5SkmnZhsVTDqvtaturmUJkvLrY5xb5nW59YqkTk
zh6QUQw0Z1dTDR//YCQhsbtNKorKduA5h7Svm7Kp3z/kYWVG47HcJGsD1wkdno7w
vRi4647vNDKrwZUg9C2zy193fqzeFiYYGZ0rIcBguZmcxgUIJOX3DjHthcNK3MC1
RGeyag5z08Zig2EcGML5DK0vbRd8iEXDRh1voEazf5qummlI4S2eiTs0rHmaDYJ+
O2iqz5gOtvz5C86pIVQF+yTp
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:23 2026 by rpki-client