Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          sgBBvoDx14ATY6fkIhvadqVCBLoMAxSGpNf7+fVxlus=
Subject key identifier:   C6:51:EE:77:A7:AB:E5:81:30:A6:AB:28:9A:BB:79:92:71:6D:37:F1
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          06C8
Signing time:             Mon 02 Mar 2026 01:54:06 +0000
Manifest this update:     Mon 02 Mar 2026 01:54:04 +0000
Manifest next update:     Mon 09 Mar 2026 01:54:04 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: fubQ8B8aemH1CrW9vR1QGSRBbDL09ppxB3yO2mQahnc=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: LcYL4bDsuUT3zoZgud/O2L3NegCJeaxCuiBri9185ZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Mar  2 01:54:04 2026 GMT
            Not After : Mar  9 01:54:04 2026 GMT
        Subject: CN=69a4edbd-fb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:46:b4:4b:b1:d0:9c:60:b1:32:16:3c:df:
                    59:04:59:49:e7:b7:d0:47:f9:78:6f:e4:ad:c0:f1:
                    09:46:5a:3c:ab:9a:ff:15:de:27:05:3b:f0:23:af:
                    32:52:77:15:ad:2d:b4:eb:5e:3d:3b:92:4e:7e:45:
                    d1:ec:80:58:a2:e3:cd:11:1f:92:a9:42:0e:57:6e:
                    43:c6:f3:33:95:c0:0d:13:c2:00:99:51:c6:6c:c5:
                    0a:2c:2f:51:ed:4f:d0:e5:61:2e:b6:5b:13:24:cd:
                    28:76:d5:dc:b4:7b:e8:e4:77:59:f7:66:5e:47:d6:
                    d2:9a:67:2f:c8:40:1b:40:ad:40:ed:cb:49:d7:a6:
                    1f:f1:b6:77:d1:99:e3:1f:ad:f0:b9:73:b9:52:6f:
                    bf:86:d0:8a:82:0b:89:24:ac:da:84:ff:30:d1:62:
                    ff:8b:95:3f:d4:0b:06:e7:57:eb:0a:0d:ad:45:bc:
                    ba:c0:ca:80:96:40:a1:e9:db:9c:d8:8f:41:28:1e:
                    06:01:35:6f:dd:97:db:fc:ab:8a:67:a3:4d:af:d0:
                    60:ae:27:38:cb:4c:bd:ef:30:bd:2d:21:33:89:97:
                    cb:c5:27:5f:90:6b:0b:3c:3c:35:58:c3:5c:19:18:
                    a8:3a:c7:d4:ad:5a:53:51:c9:19:d7:e0:9d:91:e1:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:EE:77:A7:AB:E5:81:30:A6:AB:28:9A:BB:79:92:71:6D:37:F1
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:b7:90:5e:0d:b2:e3:42:84:11:cf:74:b7:0a:f0:93:40:
         03:57:98:69:4d:51:f4:97:2a:35:5e:aa:b2:9c:7e:bd:43:9a:
         2c:03:cf:20:29:e1:4e:1c:62:10:23:5c:43:d1:21:59:37:9a:
         c2:eb:cd:77:d7:66:c1:aa:3b:b2:5c:a6:76:c7:02:af:67:14:
         33:46:f1:86:58:48:8e:d3:10:da:fa:75:8c:b7:08:0f:b4:00:
         52:5a:16:d7:3e:a5:9d:45:8b:2e:24:6f:19:3d:a8:81:ca:97:
         8a:e6:b5:27:86:3f:55:82:60:79:5a:0b:3b:65:d8:86:7c:c7:
         f8:81:10:aa:fa:17:0b:63:3b:41:ff:86:cd:e5:10:0f:32:66:
         4a:0d:e8:45:81:7c:a5:ef:0c:e0:8f:e8:72:4a:49:ec:f0:bc:
         2f:e1:1d:e3:e5:05:bd:09:f6:5d:22:7f:7c:10:f7:ea:6a:fd:
         7d:b4:d7:63:c9:65:b7:15:14:2f:73:f3:6a:a1:0e:a8:b1:11:
         3b:3f:79:e9:17:1e:6b:7a:40:02:4a:b0:09:0a:b3:07:4c:a9:
         36:31:33:33:9b:cc:43:08:7e:07:a0:06:5f:df:a6:4c:be:e5:
         b8:a7:0f:bc:77:b7:03:93:ee:75:e8:35:cc:e6:ad:3d:81:e0:
         ec:3d:1d:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG
OUQ2MDFFMEUwHhcNMjYwMzAyMDE1NDA0WhcNMjYwMzA5MDE1NDA0WjAYMRYwFAYD
VQQDEw02OWE0ZWRiZC1mYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0whGtEux0JxgsTIWPN9ZBFlJ57fQR/l4b+StwPEJRlo8q5r/Fd4nBTvwI68y
UncVrS206149O5JOfkXR7IBYouPNER+SqUIOV25DxvMzlcANE8IAmVHGbMUKLC9R
7U/Q5WEutlsTJM0odtXctHvo5HdZ92ZeR9bSmmcvyEAbQK1A7ctJ16Yf8bZ30Znj
H63wuXO5Um+/htCKgguJJKzahP8w0WL/i5U/1AsG51frCg2tRby6wMqAlkCh6duc
2I9BKB4GATVv3Zfb/KuKZ6NNr9Bgric4y0y97zC9LSEziZfLxSdfkGsLPDw1WMNc
GRioOsfUrVpTUckZ1+CdkeFOowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZR7nen
q+WBMKarKJq7eZJxbTfxMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky
ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy
VWktdHZ4bFU3bF81MWdIZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXnW3kF4NsuNChBHPdLcK8JNAA1eYaU1R9JcqNV6qspx+vUOaLAPPICnhThxi
ECNcQ9EhWTeawuvNd9dmwao7slymdscCr2cUM0bxhlhIjtMQ2vp1jLcID7QAUloW
1z6lnUWLLiRvGT2ogcqXiua1J4Y/VYJgeVoLO2XYhnzH+IEQqvoXC2M7Qf+GzeUQ
DzJmSg3oRYF8pe8M4I/ockpJ7PC8L+Ed4+UFvQn2XSJ/fBD36mr9fbTXY8lltxUU
L3PzaqEOqLEROz956Rcea3pAAkqwCQqzB0ypNjEzM5vMQwh+B6AGX9+mTL7luKcP
vHe3A5Pudeg1zOatPYHg7D0dEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:15 2026 by rpki-client