Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
File:                     nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json)
Hash identifier:          ckKv5lLxeIEQI8rw0R4rls7Z82k7qyYDmQA1Po/bXZY=
Subject key identifier:   88:F7:45:42:F4:49:61:54:2A:91:E7:3E:79:68:F7:39:9B:2F:B5:81
Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
Certificate issuer:       /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
Manifest number:          0147
Signing time:             Wed 15 Apr 2026 04:47:09 +0000
Manifest this update:     Wed 15 Apr 2026 04:47:08 +0000
Manifest next update:     Wed 22 Apr 2026 04:47:08 +0000
Files and hashes:         1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: zxlrynEwben9bzpFV4/GNkDYvocoSbGFal4BdZJXxi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
                          rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
        Validity
            Not Before: Apr 15 04:47:08 2026 GMT
            Not After : Apr 22 04:47:08 2026 GMT
        Subject: CN=69df184d-12d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:ee:be:96:de:50:4a:df:72:d0:d2:f9:fd:
                    1f:ae:bc:75:ed:09:e6:13:27:f3:0d:9e:97:a1:ec:
                    03:b7:bf:50:99:47:c3:50:ee:ad:2c:1b:e7:be:a4:
                    9d:85:a5:ed:5f:49:73:da:8f:76:90:85:56:82:18:
                    2b:0f:e3:83:a8:45:89:89:97:d9:e8:55:25:63:b8:
                    07:8e:b8:40:98:c5:93:26:15:fb:6f:89:8e:94:1f:
                    fb:76:2b:71:5d:e6:f4:ea:36:f9:18:a8:3d:41:49:
                    4e:8b:76:e2:fe:75:a1:dd:38:b5:b3:9a:03:68:74:
                    72:13:e8:29:fb:83:7f:bc:cc:08:fb:af:ea:9a:29:
                    53:98:ab:1c:06:a4:8d:e7:76:44:ea:4d:87:5d:46:
                    a7:b8:51:0f:8f:9e:d4:ae:a2:0b:fe:74:39:c6:cb:
                    84:e9:42:f7:6e:dd:2d:86:37:91:7b:f2:de:9e:64:
                    5c:b5:41:18:10:3a:47:e1:b1:25:18:ef:e4:a5:84:
                    e5:4d:25:72:fb:73:90:8d:2d:e0:e7:db:ac:a6:f6:
                    d8:d4:0f:ef:ac:44:b8:b5:dd:35:4e:0f:02:61:ca:
                    32:18:42:65:5f:86:51:64:f3:14:e3:b5:64:19:d9:
                    ea:fb:ab:06:1c:bf:f9:3c:db:f5:79:ce:d7:5c:2e:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:45:42:F4:49:61:54:2A:91:E7:3E:79:68:F7:39:9B:2F:B5:81
            X509v3 Authority Key Identifier:
                keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:55:4c:e3:4d:0e:ad:3f:ad:82:f7:e5:00:69:60:27:f1:
         54:06:5e:cf:ce:88:d8:11:3d:32:10:d4:7f:9a:ae:73:12:4d:
         df:ef:0f:0f:37:b6:85:bc:de:0c:be:c6:d1:82:0b:fe:47:85:
         d0:7e:fe:96:4e:4c:50:5a:64:6c:30:5b:71:54:30:f0:84:f1:
         5d:89:da:cf:d5:54:d2:28:d3:36:b5:81:d6:c2:8e:17:9b:3a:
         1e:8f:36:67:95:b7:35:c6:d8:54:3d:71:ed:27:16:fc:41:bc:
         b7:39:2b:6e:2b:cd:24:f0:fc:ca:4e:b5:db:2c:f6:05:a3:6f:
         53:ab:ae:84:3f:c9:d0:75:0a:54:97:ab:80:4c:61:43:a0:34:
         af:6f:ea:e1:07:96:21:54:0f:f7:02:4f:a5:a7:6c:40:02:e6:
         77:46:db:01:c5:0e:4d:7f:f2:d4:07:8c:84:ff:44:4b:48:b7:
         0a:ec:ca:e2:69:67:20:3d:5e:98:39:ae:f3:3e:af:cc:c4:00:
         fa:33:68:86:2b:85:93:ef:cc:83:9c:6f:ce:85:4f:07:c6:62:
         d2:43:37:ed:2a:f5:b6:73:98:ef:69:87:30:1f:02:15:71:5f:
         36:fa:fb:8b:e3:bb:dc:a2:0b:ba:ba:90:76:2d:55:b2:a1:94:
         9f:75:56:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0
ODk4MDAzQTkwHhcNMjYwNDE1MDQ0NzA4WhcNMjYwNDIyMDQ0NzA4WjAYMRYwFAYD
VQQDEw02OWRmMTg0ZC0xMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2t/uvpbeUErfctDS+f0frrx17QnmEyfzDZ6XoewDt79QmUfDUO6tLBvnvqSd
haXtX0lz2o92kIVWghgrD+ODqEWJiZfZ6FUlY7gHjrhAmMWTJhX7b4mOlB/7ditx
Xeb06jb5GKg9QUlOi3bi/nWh3Ti1s5oDaHRyE+gp+4N/vMwI+6/qmilTmKscBqSN
53ZE6k2HXUanuFEPj57UrqIL/nQ5xsuE6UL3bt0thjeRe/LenmRctUEYEDpH4bEl
GO/kpYTlTSVy+3OQjS3g59uspvbY1A/vrES4td01Tg8CYcoyGEJlX4ZRZPMU47Vk
Gdnq+6sGHL/5PNv1ec7XXC5AwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj3RUL0
SWFUKpHnPnlo9zmbL7WBMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz
MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0
V25QVDlkQXQtYXRJbUFBNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn3pVTONNDq0/rYL35QBpYCfxVAZez86I2BE9MhDUf5qucxJN3+8PDze2hbze
DL7G0YIL/keF0H7+lk5MUFpkbDBbcVQw8ITxXYnaz9VU0ijTNrWB1sKOF5s6Ho82
Z5W3NcbYVD1x7ScW/EG8tzkrbivNJPD8yk612yz2BaNvU6uuhD/J0HUKVJergExh
Q6A0r2/q4QeWIVQP9wJPpadsQALmd0bbAcUOTX/y1AeMhP9ES0i3CuzK4mlnID1e
mDmu8z6vzMQA+jNohiuFk+/Mg5xvzoVPB8Zi0kM37Sr1tnOY72mHMB8CFXFfNvr7
i+O73KILurqQdi1VsqGUn3VWDw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:18 2026 by rpki-client