Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File:                     nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier:          7slp8dRuCfVp7ChESeVG9f1M3Ta5uhkk7cS+canNWVk=
Subject key identifier:   1E:50:C9:CC:0D:CB:74:2C:6E:DC:01:6A:F2:F1:55:9A:14:EA:B0:A5
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer:       /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number:          36
Signing time:             Wed 15 Apr 2026 08:10:02 +0000
Manifest this update:     Wed 15 Apr 2026 08:10:01 +0000
Manifest next update:     Wed 22 Apr 2026 08:10:01 +0000
Files and hashes:         1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: t6GBK+1Rdl18f4+LMkkte3EvJC+wti36H0W1mveeXPE=)
                          2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
        Validity
            Not Before: Apr 15 08:10:01 2026 GMT
            Not After : Apr 22 08:10:01 2026 GMT
        Subject: CN=69df47da-9a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:e7:cb:7f:00:81:b3:71:87:f5:4b:fe:6d:
                    ce:94:b1:a3:9f:d4:8b:7a:84:5e:b0:dd:50:d3:8f:
                    aa:4b:0f:e3:84:5d:ab:5f:f2:f5:d2:5b:11:0e:76:
                    8e:df:cc:bd:d0:7c:85:fa:6e:1d:10:57:fa:52:b5:
                    f0:58:ff:0d:5a:83:18:49:6d:c7:a8:87:41:83:61:
                    00:b5:77:f8:e6:dc:25:49:f4:66:99:f8:d6:84:9a:
                    6e:2c:ab:7c:d4:02:81:c5:11:26:fe:28:3a:ec:5d:
                    e4:d0:cf:50:6b:9b:7e:8c:e4:f5:58:54:b0:9c:32:
                    91:30:48:25:73:1d:82:73:4b:9e:07:49:da:38:e8:
                    20:76:33:b6:90:7e:da:70:9b:3e:81:0e:8e:4f:4c:
                    de:ac:a0:5c:51:e8:6a:fb:c4:4f:c3:70:17:69:df:
                    8f:2b:5c:8f:de:c3:f0:fa:99:90:0b:0e:d5:d5:53:
                    06:33:d6:98:43:42:d2:6b:f4:bc:11:c4:0e:5c:07:
                    b7:73:10:81:1d:e8:28:67:ac:9f:0e:07:28:37:30:
                    ae:24:e9:44:7a:68:7d:05:00:49:61:96:30:e0:ea:
                    88:92:11:0f:c9:05:c6:03:c7:10:51:43:0f:82:10:
                    f3:69:99:11:65:34:61:29:ec:18:78:77:d5:13:d9:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:C9:CC:0D:CB:74:2C:6E:DC:01:6A:F2:F1:55:9A:14:EA:B0:A5
            X509v3 Authority Key Identifier:
                keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:b3:7b:ec:d8:f3:18:80:f9:74:e9:a0:30:a4:0a:ef:38:
         31:f9:a6:ab:ed:a8:cf:8c:0f:40:6d:4b:1e:68:e4:10:4a:39:
         27:cb:e0:26:54:05:cd:8f:49:25:a3:dd:7e:d6:f6:98:4c:bc:
         77:c9:34:f0:19:8c:b6:23:73:b7:ff:e0:1a:66:5c:3e:b5:70:
         da:09:97:4c:7d:c3:2e:0e:41:60:43:d7:53:d9:af:a9:ee:b1:
         e9:db:0f:38:84:ea:0c:54:c7:ee:df:a3:94:0e:b9:65:b1:c8:
         7e:4a:76:e6:86:3c:53:bd:9e:f0:6c:be:3d:7d:84:e0:48:f5:
         1e:5e:72:51:37:b6:dd:e7:80:61:74:ac:c3:27:44:8c:f7:c0:
         7f:82:9d:22:d3:11:35:81:2f:2b:51:7d:47:28:95:07:11:a2:
         9b:28:69:1b:ce:31:55:c1:1c:15:d6:27:30:33:36:db:97:03:
         d2:3b:4d:a0:4b:ee:72:de:2c:56:4c:c2:25:b3:db:6c:aa:39:
         03:e1:46:6b:f3:8b:e6:06:fb:d7:20:ae:34:0d:f5:ce:25:d7:
         86:f5:91:07:aa:aa:46:6b:ee:1f:cb:1b:9c:9c:38:24:af:49:
         fc:14:34:25:1b:63:3c:c5:24:66:6d:f1:2f:1f:74:fe:70:67:
         14:e0:64:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMzMEEwMjc4MjJC
OUNBMUZCOTAeFw0yNjA0MTUwODEwMDFaFw0yNjA0MjIwODEwMDFaMBgxFjAUBgNV
BAMTDTY5ZGY0N2RhLTlhNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkr+fLfwCBs3GH9Uv+bc6UsaOf1It6hF6w3VDTj6pLD+OEXatf8vXSWxEOdo7f
zL3QfIX6bh0QV/pStfBY/w1agxhJbceoh0GDYQC1d/jm3CVJ9GaZ+NaEmm4sq3zU
AoHFESb+KDrsXeTQz1Brm36M5PVYVLCcMpEwSCVzHYJzS54HSdo46CB2M7aQftpw
mz6BDo5PTN6soFxR6Gr7xE/DcBdp348rXI/ew/D6mZALDtXVUwYz1phDQtJr9LwR
xA5cB7dzEIEd6ChnrJ8OByg3MK4k6UR6aH0FAElhljDg6oiSEQ/JBcYDxxBRQw+C
EPNpmRFlNGEp7Bh4d9UT2XCxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHlDJzA3L
dCxu3AFq8vFVmhTqsKUwHwYDVR0jBBgwFoAUnmz6q5S0KyF2AeEzCgJ4IrnKH7kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0UyN0M5M0FFRUQy
RTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbm16NnE1UzBLeUYyQWVFekNnSjRJcm5LSDdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
OURGL0UyN0M5M0FFRUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lG
MkFlRXpDZ0o0SXJuS0g3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWqLN77NjzGID5dOmgMKQK7zgx+aar7ajPjA9AbUseaOQQSjkny+AmVAXNj0kl
o91+1vaYTLx3yTTwGYy2I3O3/+AaZlw+tXDaCZdMfcMuDkFgQ9dT2a+p7rHp2w84
hOoMVMfu36OUDrllsch+SnbmhjxTvZ7wbL49fYTgSPUeXnJRN7bd54BhdKzDJ0SM
98B/gp0i0xE1gS8rUX1HKJUHEaKbKGkbzjFVwRwV1icwMzbblwPSO02gS+5y3ixW
TMIls9tsqjkD4UZr84vmBvvXIK40DfXOJdeG9ZEHqqpGa+4fyxucnDgkr0n8FDQl
G2M8xSRmbfEvH3T+cGcU4GTo
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:00 2026 by rpki-client