Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File:                     nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier:          2Dqrahwfh1DGq4C4EbOpQMVu5cfFda0sapu11nPJIhA=
Subject key identifier:   F9:01:CF:78:21:A4:FC:22:2F:AB:06:03:6F:88:92:0D:E6:E5:D4:D1
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer:       /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number:          85
Signing time:             Sat 19 Sep 2026 07:41:17 +0000
Manifest this update:     Sat 19 Sep 2026 07:41:16 +0000
Manifest next update:     Sat 26 Sep 2026 07:41:16 +0000
Files and hashes:         1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: o/xVQpAqwIDxgQkgEWxJuRMp7cmttkJrolfSKZJhLes=)
                          2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 07:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
        Validity
            Not Before: Sep 19 07:41:16 2026 GMT
            Not After : Sep 26 07:41:16 2026 GMT
        Subject: CN=6aae3c9d-c3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:e1:4e:a3:09:3e:7e:d1:b0:07:5b:b3:ee:
                    f6:10:00:6c:ce:20:e3:ea:94:dc:50:49:f7:03:94:
                    e6:45:ef:68:d3:8f:8a:58:f3:d3:55:f6:8c:5b:19:
                    7d:48:02:b6:ec:b6:8e:ea:69:07:57:d8:38:25:3d:
                    8d:18:c1:73:1e:da:24:90:01:02:2e:44:fa:28:cf:
                    84:03:dc:88:17:50:57:73:4c:d8:fd:f4:2a:78:b5:
                    60:1f:72:4d:d7:71:cd:21:b0:8a:85:a1:32:86:5a:
                    b7:33:50:a0:90:a5:17:1b:4f:e2:2c:e7:4a:ec:e9:
                    fc:f1:9f:4e:0a:2b:9f:ed:39:92:c8:7e:08:c5:54:
                    a6:66:41:2b:6f:a7:8d:0e:98:0e:a2:46:da:30:57:
                    69:1c:3e:31:44:fc:bb:09:84:90:2c:a0:ea:00:e7:
                    3c:42:70:ed:5c:f0:c3:c9:2c:e3:96:fd:4a:27:11:
                    e6:55:c3:9c:ae:b8:2c:5d:7e:8f:fc:76:31:6e:44:
                    7f:8d:cb:d0:4d:08:c1:da:07:a9:24:93:97:22:40:
                    19:f9:e8:d8:4a:a8:8b:5d:7d:9d:58:02:e4:63:73:
                    93:c8:f6:a4:bd:14:16:f2:0c:c8:c9:2f:a1:b3:d0:
                    cc:bd:3b:8d:e1:d7:33:07:7f:32:11:21:59:83:72:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:01:CF:78:21:A4:FC:22:2F:AB:06:03:6F:88:92:0D:E6:E5:D4:D1
            X509v3 Authority Key Identifier:
                keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:c8:d9:2d:af:04:19:f1:bf:a5:5c:c3:3a:d3:a8:2c:57:
         74:aa:dc:be:85:56:e8:fe:a7:f7:e9:5c:1a:43:4b:8d:35:ca:
         35:0a:5d:81:1d:06:22:ae:42:18:87:65:90:64:a6:e9:74:a5:
         b3:02:ee:4a:a2:cf:fd:5b:a5:1a:eb:d8:dd:8f:6c:e7:6f:99:
         9f:c1:df:0f:1a:20:cd:2e:fa:aa:0e:a9:aa:e1:d6:44:e8:2d:
         cc:a7:e8:59:2a:81:1b:c5:11:d5:67:c8:ba:97:68:66:bb:45:
         c7:fd:38:0b:23:da:16:32:fd:c9:91:4a:6b:05:ea:6e:12:8b:
         82:1d:34:ae:0a:c2:3b:62:bb:df:cc:16:25:b8:29:35:d9:25:
         25:f5:68:aa:ed:82:1b:30:73:88:43:92:18:e4:b9:71:d9:b8:
         ad:b3:ef:5d:26:2f:e4:85:24:3e:40:82:63:c8:c0:2a:08:67:
         6b:b9:83:4f:92:e5:bd:02:27:2d:5a:32:07:98:47:02:10:1c:
         0c:23:9c:c4:09:fe:38:70:d7:a8:d6:f1:72:1d:47:6a:b7:17:
         7a:7a:99:af:8e:b7:c5:41:b7:52:09:b1:67:89:f4:4c:48:fe:
         7e:06:b7:64:82:b6:1a:a6:e3:e2:85:0d:cc:43:3a:72:63:9f:
         1f:c9:f3:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5REYxMTAvBgNVBAUTKDlFNkNGQUFCOTRCNDJCMjE3NjAxRTEzMzBBMDI3ODIy
QjlDQTFGQjkwHhcNMjYwOTE5MDc0MTE2WhcNMjYwOTI2MDc0MTE2WjAYMRYwFAYD
VQQDEw02YWFlM2M5ZC1jM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxHhTqMJPn7RsAdbs+72EABsziDj6pTcUEn3A5TmRe9o04+KWPPTVfaMWxl9
SAK27LaO6mkHV9g4JT2NGMFzHtokkAECLkT6KM+EA9yIF1BXc0zY/fQqeLVgH3JN
13HNIbCKhaEyhlq3M1CgkKUXG0/iLOdK7On88Z9OCiuf7TmSyH4IxVSmZkErb6eN
DpgOokbaMFdpHD4xRPy7CYSQLKDqAOc8QnDtXPDDySzjlv1KJxHmVcOcrrgsXX6P
/HYxbkR/jcvQTQjB2gepJJOXIkAZ+ejYSqiLXX2dWALkY3OTyPakvRQW8gzIyS+h
s9DMvTuN4dczB38yESFZg3IUCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkBz3gh
pPwiL6sGA2+Ikg3m5dTRMB8GA1UdIwQYMBaAFJ5s+quUtCshdgHhMwoCeCK5yh+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlERi9FMjdDOTNBRUVE
MkUxMUYwODBDNDYwMzI0NzZGNTZCQy9ubXo2cTVTMEt5RjJBZUV6Q2dKNElybktI
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjlERi9FMjdDOTNBRUVEMkUxMUYwODBDNDYwMzI0NzZGNTZCQy9ubXo2cTVTMEt5
RjJBZUV6Q2dKNElybktIN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGynI2S2vBBnxv6VcwzrTqCxXdKrcvoVW6P6n9+lcGkNLjTXKNQpdgR0GIq5C
GIdlkGSm6XSlswLuSqLP/VulGuvY3Y9s52+Zn8HfDxogzS76qg6pquHWROgtzKfo
WSqBG8UR1WfIupdoZrtFx/04CyPaFjL9yZFKawXqbhKLgh00rgrCO2K738wWJbgp
NdklJfVoqu2CGzBziEOSGOS5cdm4rbPvXSYv5IUkPkCCY8jAKghna7mDT5LlvQIn
LVoyB5hHAhAcDCOcxAn+OHDXqNbxch1HarcXenqZr463xUG3UgmxZ4n0TEj+fga3
ZIK2Gqbj4oUNzEM6cmOfH8nzdw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:31 2026 by rpki-client