Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File:                     NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier:          pHqYFd7S/pjAoFSje1mtg6NF2wENUFFZUTJBBnsBs40=
Subject key identifier:   B0:E7:0C:B7:E5:8F:C8:A1:4C:A8:AD:6B:2C:72:D0:09:58:5C:C9:0E
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer:       /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number:          017D
Signing time:             Fri 25 Sep 2026 04:43:21 +0000
Manifest this update:     Fri 25 Sep 2026 04:43:20 +0000
Manifest next update:     Fri 02 Oct 2026 04:43:20 +0000
Files and hashes:         1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: Mt8pO9xXbJKwtzzr9rZEPf8kmg4vNkEDC3u1+pl37U8=)
                          2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: WWBACUh4p1PPK9KcHPTTQfFx5ubcC8J0wopYYr+Csh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
                          rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
        Validity
            Not Before: Sep 25 04:43:20 2026 GMT
            Not After : Oct  2 04:43:20 2026 GMT
        Subject: CN=6ab5fbe9-f8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:78:0b:70:12:d5:ce:c8:2f:ef:88:e5:c0:
                    0d:ad:82:a4:95:47:32:2e:4f:ca:de:00:7b:f3:3c:
                    d9:e0:7b:03:d8:82:6d:84:26:12:5e:58:7b:96:14:
                    4e:ca:4d:1c:ee:a1:2f:97:9c:6a:e4:ab:b7:f0:42:
                    4e:5b:5f:8e:6f:ce:dd:3d:e3:ee:8b:52:e3:4c:7c:
                    e0:9a:ef:0a:34:58:86:a2:83:70:1b:a0:e4:38:43:
                    e2:5b:0e:ef:c1:0e:74:c3:dc:e6:a5:84:ea:43:eb:
                    7d:18:e2:76:dc:9b:fc:95:c9:65:82:c6:2e:9c:f9:
                    c5:b0:29:f1:54:ae:8a:d4:b0:b0:5a:e6:01:59:22:
                    e0:f8:89:e3:b7:1f:37:bf:82:b8:f0:e0:d8:49:7a:
                    87:da:6e:33:fa:92:c2:7a:8b:8b:2f:a2:3d:b1:27:
                    4b:22:49:d6:6c:47:d9:5c:11:cd:a0:68:16:2f:2a:
                    9d:27:4f:17:38:53:ec:db:d1:f2:a5:89:aa:f0:ad:
                    a6:3b:e1:36:58:74:db:e8:9e:82:28:e5:7f:1d:ef:
                    e8:00:c7:e2:f1:8b:6f:be:0f:ff:ad:6a:1f:a3:0e:
                    b0:4d:a7:bc:5c:7d:47:09:1e:5f:f6:6b:f2:a4:e2:
                    b9:63:42:6e:f2:94:e0:73:57:24:a8:25:62:d5:e6:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E7:0C:B7:E5:8F:C8:A1:4C:A8:AD:6B:2C:72:D0:09:58:5C:C9:0E
            X509v3 Authority Key Identifier:
                keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:95:68:2f:53:e8:9a:b6:35:64:74:60:ca:de:78:7b:f3:06:
         e7:52:94:4e:23:78:12:d7:cd:cd:93:1c:b7:21:56:e1:55:28:
         1e:d7:f4:f7:5b:07:a3:bc:b4:0a:08:50:77:c8:6f:1a:97:eb:
         24:bd:b6:fc:f9:1f:8f:58:30:d8:55:e5:c6:84:34:9f:6b:94:
         46:7e:f6:3e:15:06:f7:0b:25:92:01:05:9c:d8:9c:ff:56:2a:
         a5:13:be:e7:96:59:ad:25:63:c9:e2:a7:00:4c:43:be:43:94:
         55:b7:6c:d1:b5:b0:b5:dd:24:de:0d:a9:27:04:ca:24:9d:7c:
         67:eb:c7:e9:14:54:da:f4:23:68:13:09:55:63:7f:bd:85:44:
         57:51:85:30:42:60:38:c8:f4:71:cc:a7:4a:5e:fa:31:b0:43:
         ea:03:25:da:57:23:ca:cc:cf:69:89:46:cf:48:ac:dc:46:d2:
         37:2f:ad:a5:d7:d0:9a:b6:8a:f6:65:28:bd:ae:45:b4:75:db:
         55:1f:6a:e2:05:f8:db:f7:ad:0c:6b:25:46:f5:0b:3e:58:27:
         a6:b9:b6:10:8c:b3:a1:09:c6:4d:73:ae:f5:cb:9e:4e:13:48:
         ee:7d:8e:a4:11:e9:63:cc:28:d2:52:36:26:2a:55:81:21:71:
         34:8e:90:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC
QUQ0OTQwNUYwHhcNMjYwOTI1MDQ0MzIwWhcNMjYxMDAyMDQ0MzIwWjAYMRYwFAYD
VQQDEw02YWI1ZmJlOS1mOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/t4C3AS1c7IL++I5cANrYKklUcyLk/K3gB78zzZ4HsD2IJthCYSXlh7lhRO
yk0c7qEvl5xq5Ku38EJOW1+Ob87dPePui1LjTHzgmu8KNFiGooNwG6DkOEPiWw7v
wQ50w9zmpYTqQ+t9GOJ23Jv8lcllgsYunPnFsCnxVK6K1LCwWuYBWSLg+Injtx83
v4K48ODYSXqH2m4z+pLCeouLL6I9sSdLIknWbEfZXBHNoGgWLyqdJ08XOFPs29Hy
pYmq8K2mO+E2WHTb6J6CKOV/He/oAMfi8Ytvvg//rWofow6wTae8XH1HCR5f9mvy
pOK5Y0Ju8pTgc1ckqCVi1eYowQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDnDLfl
j8ihTKitayxy0AlYXMkOMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0
QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr
UlJjT0JZNEs3YzY2MUpRRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMZVoL1PomrY1ZHRgyt54e/MG51KUTiN4EtfNzZMctyFW4VUoHtf091sHo7y0
CghQd8hvGpfrJL22/Pkfj1gw2FXlxoQ0n2uURn72PhUG9wslkgEFnNic/1YqpRO+
55ZZrSVjyeKnAExDvkOUVbds0bWwtd0k3g2pJwTKJJ18Z+vH6RRU2vQjaBMJVWN/
vYVEV1GFMEJgOMj0ccynSl76MbBD6gMl2lcjyszPaYlGz0is3EbSNy+tpdfQmraK
9mUova5FtHXbVR9q4gX42/etDGslRvULPlgnprm2EIyzoQnGTXOu9cueThNI7n2O
pBHpY8wo0lI2JipVgSFxNI6QzA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:49:45 2026 by rpki-client