Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File:                     nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier:          XaMJv7CXo0WN0gvwZ6A3JOFvIXfE1JDNlIZalFcAwUc=
Subject key identifier:   95:93:B5:41:A5:A6:0C:C0:CA:C6:95:F1:6E:DF:FD:81:10:75:49:56
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1EFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number:          1EE8
Signing time:             Sun 20 Sep 2026 16:00:07 +0000
Manifest this update:     Sun 20 Sep 2026 16:00:06 +0000
Manifest next update:     Sun 27 Sep 2026 16:00:06 +0000
Files and hashes:         1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: oyzQyNMVAoOI7vVyXZtnhL9rA0yTpRgRDWUriFvMakU=)
                          2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: RROYOUUPLvax3cmbs4qKsEl0RGd9SJbJvz0BOU3WyuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7931 (0x1efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Sep 20 16:00:06 2026 GMT
            Not After : Sep 27 16:00:06 2026 GMT
        Subject: CN=6ab00307-701a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:14:18:39:e3:99:d8:5a:12:92:5f:cd:d7:
                    e0:96:ec:50:8a:ec:97:69:ad:bc:a1:0b:0b:18:af:
                    ac:e9:99:19:52:c8:8d:fc:39:90:32:4c:0b:ad:d3:
                    2c:9a:ca:e0:2b:37:4e:4a:d3:06:3f:69:07:8b:07:
                    e7:6c:c0:34:4c:92:92:59:88:ec:77:67:14:2b:36:
                    1e:3e:52:3c:13:9e:07:a3:f4:5b:c2:f4:8d:3f:b0:
                    49:3c:f6:93:10:cc:d5:68:9b:c2:12:f5:71:ac:12:
                    24:d7:a2:d9:12:a4:8f:11:17:d2:41:41:66:50:47:
                    50:dc:56:38:e8:64:38:74:b7:4c:f6:03:a2:1b:5d:
                    53:9d:6e:cc:7a:1c:1f:17:6d:a0:5c:8c:2b:b7:20:
                    fb:0d:97:13:e7:1e:83:80:dd:c4:6c:14:34:6b:95:
                    4d:5b:ac:ec:51:f3:e6:f5:28:41:9b:87:e0:af:e2:
                    64:af:e4:1c:e6:63:19:94:b4:7a:71:09:15:77:b5:
                    e1:c1:03:97:92:e3:7d:83:9b:16:e3:66:be:d1:6d:
                    82:84:7e:26:41:da:60:1b:4b:8b:db:37:7e:df:e2:
                    c9:bc:a1:54:65:96:0c:0a:af:d7:3b:5a:fa:58:96:
                    27:04:62:b2:4f:76:09:dd:a1:9b:88:25:1f:cf:f9:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:93:B5:41:A5:A6:0C:C0:CA:C6:95:F1:6E:DF:FD:81:10:75:49:56
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:56:56:18:cc:ec:01:7b:43:85:cf:a1:fa:52:40:f2:cc:44:
         09:49:f1:ee:ad:d8:f2:e7:0c:35:4d:8d:c5:36:12:e9:32:16:
         4a:ca:7c:de:5e:17:94:fc:46:5d:a9:f6:53:c5:a4:83:fd:36:
         e0:57:f6:2e:29:4a:3c:a2:a8:1e:2c:bb:7e:1b:80:b6:e1:d7:
         76:aa:7a:98:25:1d:c7:ba:98:98:ee:f7:1f:9b:d4:e9:09:80:
         fc:d0:db:49:11:0b:58:85:e7:d2:a4:be:81:1e:e5:50:74:51:
         e6:12:ea:7e:0c:79:61:f7:8e:d1:af:1a:33:11:e7:f9:6d:15:
         f9:00:a1:17:5c:34:56:fd:7c:26:4d:d0:10:96:d5:fe:2d:f0:
         2b:af:50:e4:de:86:38:a3:41:17:b9:25:6a:c0:24:19:b0:ad:
         2f:84:dc:f9:1d:55:f7:f9:09:15:95:7d:23:37:52:6e:21:f5:
         21:9a:91:46:4b:e6:ba:d5:83:da:ba:28:30:3b:6d:aa:73:53:
         32:dc:fc:21:01:59:bc:7f:72:e7:04:12:73:59:7d:be:72:6c:
         81:d8:d7:29:88:5b:b7:ed:0e:72:ec:f3:83:01:ff:3b:ed:10:
         2f:6c:84:20:64:1a:e5:09:18:f9:83:71:31:9a:d3:26:cc:3d:
         e8:da:9c:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4
NDQyMzY2NzkwHhcNMjYwOTIwMTYwMDA2WhcNMjYwOTI3MTYwMDA2WjAYMRYwFAYD
VQQDEw02YWIwMDMwNy03MDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqasUGDnjmdhaEpJfzdfgluxQiuyXaa28oQsLGK+s6ZkZUsiN/DmQMkwLrdMs
msrgKzdOStMGP2kHiwfnbMA0TJKSWYjsd2cUKzYePlI8E54Ho/RbwvSNP7BJPPaT
EMzVaJvCEvVxrBIk16LZEqSPERfSQUFmUEdQ3FY46GQ4dLdM9gOiG11TnW7Mehwf
F22gXIwrtyD7DZcT5x6DgN3EbBQ0a5VNW6zsUfPm9ShBm4fgr+Jkr+Qc5mMZlLR6
cQkVd7XhwQOXkuN9g5sW42a+0W2ChH4mQdpgG0uL2zd+3+LJvKFUZZYMCq/XO1r6
WJYnBGKyT3YJ3aGbiCUfz/lSIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWTtUGl
pgzAysaV8W7f/YEQdUlWMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG
NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm
MjRUZU8ybVBaMjZFUWpabmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaFZWGMzsAXtDhc+h+lJA8sxECUnx7q3Y8ucMNU2NxTYS6TIWSsp83l4XlPxG
Xan2U8Wkg/024Ff2LilKPKKoHiy7fhuAtuHXdqp6mCUdx7qYmO73H5vU6QmA/NDb
SRELWIXn0qS+gR7lUHRR5hLqfgx5YfeO0a8aMxHn+W0V+QChF1w0Vv18Jk3QEJbV
/i3wK69Q5N6GOKNBF7klasAkGbCtL4Tc+R1V9/kJFZV9IzdSbiH1IZqRRkvmutWD
2rooMDttqnNTMtz8IQFZvH9y5wQSc1l9vnJsgdjXKYhbt+0OcuzzgwH/O+0QL2yE
IGQa5QkY+YNxMZrTJsw96Nqckw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:46:44 2026 by rpki-client