Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          rx84/B4d7c52Tpkl03d7pVq/0e6VuExEJdGmGysyYkw=
Subject key identifier:   96:26:78:DC:DC:FD:F6:E5:D1:35:31:3B:8C:06:72:BF:B7:A9:F8:87
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          06FF
Signing time:             Fri 12 Jun 2026 22:09:21 +0000
Manifest this update:     Fri 12 Jun 2026 22:09:21 +0000
Manifest next update:     Fri 19 Jun 2026 22:09:21 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: sTYtZrMJQtG7P+mLo3MoPdeeGDN/A5LHTPxddS6i8NI=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Jun 12 22:09:21 2026 GMT
            Not After : Jun 19 22:09:21 2026 GMT
        Subject: CN=6a2c8391-25fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:8c:34:e7:29:3a:99:68:c2:0f:26:0f:ff:
                    f0:92:0c:67:f7:69:a1:c5:e4:1b:37:28:72:65:8d:
                    b2:a5:55:dd:47:2f:bc:84:85:93:3d:82:d2:98:41:
                    e5:95:db:fd:92:12:70:6a:be:36:1b:06:cf:7b:fb:
                    d4:d7:bc:1f:aa:07:07:e8:16:e4:92:16:a6:d0:14:
                    88:78:94:aa:f3:f4:f1:51:70:c3:fe:a2:0f:6f:38:
                    4f:75:27:c5:b6:0b:87:45:ba:58:dc:83:3f:c2:b3:
                    ea:46:83:6c:7b:77:23:5c:fd:db:f4:e5:fb:ea:69:
                    1a:6b:0c:16:06:b2:ff:14:30:3a:a6:fd:ca:ad:12:
                    e8:93:1d:11:8c:71:01:7b:71:9f:09:13:1e:2f:f1:
                    79:2c:9b:b0:d3:86:20:83:d9:ae:c1:00:dd:b1:16:
                    97:85:f5:6a:1e:9a:ff:71:8c:bb:ab:83:47:0d:19:
                    b3:73:9a:39:32:71:26:59:53:d3:83:e7:58:b8:ee:
                    76:e3:60:80:21:6c:ed:2a:c6:96:01:94:2d:f1:ec:
                    f2:5b:c4:67:96:b6:4e:6a:15:1e:96:c7:0e:04:aa:
                    41:56:3a:f1:8c:ed:5e:b2:c6:8c:7d:de:aa:63:e2:
                    25:50:b1:d2:24:3c:7c:2f:68:c1:c0:46:ee:c5:7c:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:26:78:DC:DC:FD:F6:E5:D1:35:31:3B:8C:06:72:BF:B7:A9:F8:87
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:de:2b:e3:a6:65:ea:c4:18:b3:06:73:d6:98:88:1d:55:af:
         3c:d9:c3:f2:76:65:ed:f2:9d:ff:15:25:2a:58:38:69:64:05:
         87:be:aa:a5:ca:40:e7:6f:3f:c4:68:ca:68:64:77:11:b3:e7:
         a2:68:e1:d0:d6:64:cd:77:8b:47:c9:76:e2:03:b1:a0:6b:f5:
         38:c8:a8:89:af:48:49:f5:71:15:00:a6:83:ec:c1:73:74:de:
         c1:60:b2:34:69:63:c4:da:b2:b7:22:50:87:32:31:69:78:62:
         17:ac:6c:a8:08:0e:99:89:0c:06:cf:0b:6e:7e:26:ed:ad:cc:
         8b:e9:3f:6c:41:5c:ff:83:ec:33:f9:b1:f4:e0:21:78:94:ab:
         e3:57:7a:a8:d9:24:e1:ad:c7:ae:9d:34:57:ff:e6:f7:44:3a:
         e5:49:56:fa:6b:6d:24:07:2d:58:42:80:06:a1:a5:c7:b7:8a:
         86:66:c6:29:89:5a:ca:84:fb:9a:2b:c8:b1:a6:a6:f0:6f:75:
         a9:82:82:bd:3e:20:5f:8c:b1:32:e2:56:cf:ef:f5:f7:7b:c2:
         08:68:2f:32:dc:ce:9a:07:f0:f0:65:e6:a2:86:da:3a:ce:6e:
         4d:53:b4:0c:b0:46:38:7d:c1:59:6a:3b:b7:d7:42:df:03:42:
         92:78:6b:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG
OUQ2MDFFMEUwHhcNMjYwNjEyMjIwOTIxWhcNMjYwNjE5MjIwOTIxWjAYMRYwFAYD
VQQDEw02YTJjODM5MS0yNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGuMNOcpOplowg8mD//wkgxn92mhxeQbNyhyZY2ypVXdRy+8hIWTPYLSmEHl
ldv9khJwar42GwbPe/vU17wfqgcH6Bbkkham0BSIeJSq8/TxUXDD/qIPbzhPdSfF
tguHRbpY3IM/wrPqRoNse3cjXP3b9OX76mkaawwWBrL/FDA6pv3KrRLokx0RjHEB
e3GfCRMeL/F5LJuw04Ygg9muwQDdsRaXhfVqHpr/cYy7q4NHDRmzc5o5MnEmWVPT
g+dYuO5242CAIWztKsaWAZQt8ezyW8RnlrZOahUelscOBKpBVjrxjO1essaMfd6q
Y+IlULHSJDx8L2jBwEbuxXwQGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYmeNzc
/fbl0TUxO4wGcr+3qfiHMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky
ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy
VWktdHZ4bFU3bF81MWdIZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw94r46Zl6sQYswZz1piIHVWvPNnD8nZl7fKd/xUlKlg4aWQFh76qpcpA528/
xGjKaGR3EbPnomjh0NZkzXeLR8l24gOxoGv1OMioia9ISfVxFQCmg+zBc3TewWCy
NGljxNqytyJQhzIxaXhiF6xsqAgOmYkMBs8Lbn4m7a3Mi+k/bEFc/4PsM/mx9OAh
eJSr41d6qNkk4a3Hrp00V//m90Q65UlW+mttJActWEKABqGlx7eKhmbGKYlayoT7
mivIsaam8G91qYKCvT4gX4yxMuJWz+/193vCCGgvMtzOmgfw8GXmoobaOs5uTVO0
DLBGOH3BWWo7t9dC3wNCknhrRA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:22 2026 by rpki-client