Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File:                     NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier:          D/bvA+I+LtLSmx1SA4NQ2o6PEv6VCKXlWwBT7psVh/U=
Subject key identifier:   AB:79:C2:D5:A0:D0:68:DC:25:F6:6B:EE:C9:A5:D4:1B:BC:95:FA:52
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer:       /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number:          0112
Signing time:             Sun 01 Mar 2026 06:57:42 +0000
Manifest this update:     Sun 01 Mar 2026 06:57:42 +0000
Manifest next update:     Sun 08 Mar 2026 06:57:42 +0000
Files and hashes:         1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: UA23Gt4ZiI8fWB5NdZ9oMIBnw5IrKgrEAbM9sF+sQDo=)
                          2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: QEHeDKXl3W219yRsuSOY/SsIE0BE8LgnZaquYZmmgt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
                          rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
        Validity
            Not Before: Mar  1 06:57:42 2026 GMT
            Not After : Mar  8 06:57:42 2026 GMT
        Subject: CN=69a3e366-5721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:fc:18:6e:b6:8b:aa:c2:40:1c:c1:c4:cc:
                    86:1d:7e:8a:4b:7e:67:4e:b6:80:5a:07:04:db:dd:
                    55:21:8f:0f:c2:2c:b5:bf:86:09:f6:b0:98:d9:17:
                    9a:2e:43:c8:d0:b4:3c:96:96:71:36:a8:81:30:db:
                    1f:0e:87:3a:98:8c:35:a3:01:b1:64:86:e2:57:b5:
                    17:55:70:ba:36:9b:75:1e:08:a4:ea:26:4d:46:7f:
                    09:07:25:bc:03:29:62:20:dc:62:2c:8d:73:13:71:
                    2f:2f:52:3d:a1:92:da:ac:7b:59:8d:76:70:19:ba:
                    6e:cb:21:ff:72:e7:12:d4:c9:e2:30:44:fd:80:4c:
                    cf:9f:39:11:9f:35:22:87:0b:41:14:2f:64:78:94:
                    dd:97:c8:f8:6a:da:d4:d6:13:d9:3b:98:99:c1:c5:
                    3d:df:6c:3b:c4:dc:00:66:b8:f7:44:cc:35:ea:70:
                    2c:6b:ae:b6:66:28:28:24:85:f1:26:10:74:bd:b4:
                    c2:8d:c8:79:cc:3e:43:e5:2b:af:89:66:c0:f4:c9:
                    76:26:6e:c9:cd:72:85:63:5b:af:ea:dd:9e:a4:96:
                    e6:f3:2c:54:0d:ae:d5:92:89:f4:bd:01:9d:cf:2a:
                    64:ff:14:e2:0a:da:c2:25:6f:aa:db:f4:b4:47:36:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:79:C2:D5:A0:D0:68:DC:25:F6:6B:EE:C9:A5:D4:1B:BC:95:FA:52
            X509v3 Authority Key Identifier:
                keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:95:4d:52:87:d9:a7:31:28:28:e8:0e:2b:9f:e7:75:61:32:
         62:89:d4:de:fb:03:0c:d0:b8:f8:0a:9c:d9:a0:8d:36:26:ab:
         93:73:2d:9b:ad:30:c0:74:cf:2c:7a:41:b4:f6:47:d1:9b:09:
         d4:00:9a:de:6c:ad:98:f2:b9:46:e0:8d:cb:cc:9d:f8:8c:fc:
         23:aa:1a:e2:7b:a0:0f:22:8f:6c:39:5e:9a:ac:80:5e:ba:f7:
         9d:b3:cc:45:39:b3:81:e4:03:4f:45:b3:e9:2c:5b:25:57:c0:
         27:bf:a5:fa:3d:00:3b:de:03:b8:85:f4:13:11:63:66:7f:f4:
         f7:49:d5:18:40:0d:9f:fc:0c:28:29:b9:c5:0f:79:77:eb:b7:
         3e:95:95:d2:49:54:6f:de:17:a6:68:6a:1f:12:27:52:25:1d:
         ae:f2:a4:8e:a9:e2:33:02:74:f8:fa:9e:d0:67:3c:e4:55:35:
         59:2a:8a:bc:6c:24:05:c4:02:d3:55:82:e0:30:ab:d1:ee:1d:
         cb:c5:15:fc:7d:5d:b6:87:31:ff:fe:7a:09:c1:2e:ab:f1:4f:
         6b:bf:bc:90:55:08:3a:2d:fb:05:60:23:82:57:68:05:0c:7a:
         9a:a5:b7:3d:4a:bf:1a:d2:c4:cc:9a:38:4c:a7:95:bf:fb:4f:
         5f:c5:ca:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC
QUQ0OTQwNUYwHhcNMjYwMzAxMDY1NzQyWhcNMjYwMzA4MDY1NzQyWjAYMRYwFAYD
VQQDEw02OWEzZTM2Ni01NzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Yn8GG62i6rCQBzBxMyGHX6KS35nTraAWgcE291VIY8Pwiy1v4YJ9rCY2Rea
LkPI0LQ8lpZxNqiBMNsfDoc6mIw1owGxZIbiV7UXVXC6Npt1Hgik6iZNRn8JByW8
AyliINxiLI1zE3EvL1I9oZLarHtZjXZwGbpuyyH/cucS1MniMET9gEzPnzkRnzUi
hwtBFC9keJTdl8j4atrU1hPZO5iZwcU932w7xNwAZrj3RMw16nAsa662ZigoJIXx
JhB0vbTCjch5zD5D5SuviWbA9Ml2Jm7JzXKFY1uv6t2epJbm8yxUDa7Vkon0vQGd
zypk/xTiCtrCJW+q2/S0Rzas5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKt5wtWg
0GjcJfZr7sml1Bu8lfpSMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0
QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr
UlJjT0JZNEs3YzY2MUpRRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYJVNUofZpzEoKOgOK5/ndWEyYonU3vsDDNC4+Aqc2aCNNiark3Mtm60wwHTP
LHpBtPZH0ZsJ1ACa3mytmPK5RuCNy8yd+Iz8I6oa4nugDyKPbDlemqyAXrr3nbPM
RTmzgeQDT0Wz6SxbJVfAJ7+l+j0AO94DuIX0ExFjZn/090nVGEANn/wMKCm5xQ95
d+u3PpWV0klUb94XpmhqHxInUiUdrvKkjqniMwJ0+Pqe0Gc85FU1WSqKvGwkBcQC
01WC4DCr0e4dy8UV/H1dtocx//56CcEuq/FPa7+8kFUIOi37BWAjgldoBQx6mqW3
PUq/GtLEzJo4TKeVv/tPX8XKvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:25 2026 by rpki-client