Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File:                     Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier:          zpAoC94DTv/Bk5cCps3eGnWTAdeZ1NVMhAUOd5ssjyo=
Subject key identifier:   5A:7A:7B:9D:89:AC:BD:20:FF:E2:BB:5A:C3:04:A7:EE:EB:41:95:D1
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer:       /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number:          0146
Signing time:             Mon 21 Sep 2026 05:21:28 +0000
Manifest this update:     Mon 21 Sep 2026 05:21:27 +0000
Manifest next update:     Mon 28 Sep 2026 05:21:27 +0000
Files and hashes:         1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: 9Xb6FJHL4ZzSDFAUtadV4+UgZlZZwfmVAj7O/BSiA7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
                          rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
        Validity
            Not Before: Sep 21 05:21:27 2026 GMT
            Not After : Sep 28 05:21:27 2026 GMT
        Subject: CN=6ab0bed7-00e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:8c:6b:5c:95:34:a0:19:44:fa:d0:29:53:
                    2d:29:29:ef:9d:d0:36:ea:58:16:3a:a4:43:02:fb:
                    c5:cf:ef:43:1d:f7:12:68:e1:b8:ea:36:7d:9e:06:
                    1b:26:7b:97:4f:82:f3:6f:c7:3e:18:52:e9:f2:23:
                    a4:11:c3:4e:cd:2a:8e:4b:23:a2:b1:2a:68:6c:f1:
                    54:53:59:31:ef:b2:9a:de:6c:6e:b8:ca:e7:d9:07:
                    f3:16:e9:76:17:9e:e3:36:8c:f9:3c:e7:33:5b:b3:
                    0f:99:03:22:84:37:40:e1:7e:46:a5:af:a4:1e:67:
                    4b:7a:53:25:39:95:e0:91:58:2b:0b:c7:10:cb:74:
                    b8:8c:22:f9:48:b6:c6:ed:04:45:2c:4e:cb:d9:5a:
                    6b:37:56:e6:21:ed:1b:36:61:c1:6a:bd:95:41:f6:
                    5d:bd:d5:d4:05:71:08:00:3b:45:37:a5:57:c2:f5:
                    38:01:fe:ae:66:dd:99:2e:24:75:a3:c9:32:19:be:
                    59:39:00:5c:a4:ca:9f:72:13:24:67:5a:77:9d:c6:
                    86:b3:5b:d3:4d:80:5a:d0:c6:7d:3c:d6:6f:54:bd:
                    20:73:b4:bf:46:bd:d7:35:ed:78:ef:43:cf:10:95:
                    c2:58:cb:cd:57:3c:e9:55:f1:4c:93:b8:13:7e:6e:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7A:7B:9D:89:AC:BD:20:FF:E2:BB:5A:C3:04:A7:EE:EB:41:95:D1
            X509v3 Authority Key Identifier:
                keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:19:d8:ee:76:17:f4:e3:c6:94:e6:f3:21:c2:79:5d:ba:58:
         b2:58:24:60:4e:7c:63:62:61:02:d1:c7:7e:ba:90:8c:16:11:
         33:b8:4a:bc:91:81:4e:cf:74:71:75:1b:cb:37:a8:7e:ba:d1:
         e6:38:e8:71:8b:99:50:78:a8:6e:6f:52:da:3c:64:b5:bc:88:
         99:91:44:da:6e:cc:5c:f7:53:b4:7e:17:19:8d:58:98:56:86:
         13:e6:03:ec:44:2f:35:43:6d:5b:33:6c:76:9a:04:3a:18:02:
         d9:4b:8e:f7:39:43:91:6f:1a:9a:4e:e5:3e:59:9a:53:f7:34:
         19:38:0e:b4:a4:36:10:7c:f6:d6:1b:1d:18:bd:cb:bd:25:7a:
         68:ad:4c:a0:3c:40:5e:83:64:73:a8:a1:25:d9:cd:6c:a5:98:
         38:f5:b5:a0:80:07:59:ee:ac:e5:47:61:a4:1b:02:6c:10:89:
         16:60:84:60:cd:16:32:95:ee:f2:22:63:c4:d7:b2:17:aa:1f:
         73:c5:f3:ee:1a:10:a1:87:4c:89:99:9a:27:b7:b6:c4:50:02:
         c8:de:c3:7f:0c:88:f9:d4:6b:a4:92:85:7e:91:72:57:19:52:
         ed:74:c2:ec:05:a7:33:75:a1:ab:da:ba:a9:86:64:a0:2a:20:
         4d:07:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:42:11 2026 by rpki-client