Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File:                     NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier:          AXhA/ZoWU+CqkfIAyN6H5+YEpRpMyIXUO99ED9GFfIM=
Subject key identifier:   F1:70:1A:44:06:3F:CA:98:39:A3:43:E2:E7:56:7F:89:9A:E3:A9:88
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number:          0205
Signing time:             Mon 27 Jul 2026 04:44:06 +0000
Manifest this update:     Mon 27 Jul 2026 04:44:05 +0000
Manifest next update:     Mon 03 Aug 2026 04:44:05 +0000
Files and hashes:         1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: n9FVPCb0sFC2ZaO+Se/hRAtrrVEVbd3OaJLVx3mNCfE=)
                          2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Jul 27 04:44:05 2026 GMT
            Not After : Aug  3 04:44:05 2026 GMT
        Subject: CN=6a66e216-e3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:f8:75:19:3f:fe:ce:f1:14:d8:ec:63:06:
                    ed:f5:82:d9:e8:ae:91:2e:87:cb:ce:0c:76:b0:14:
                    01:e3:ff:a3:ab:65:0f:58:98:75:c3:5c:3f:85:c9:
                    3a:a3:5b:ba:7a:50:06:2c:2c:2a:a6:ef:ca:da:e8:
                    f1:cb:73:11:2e:3e:9d:8d:ca:0a:38:8e:9d:17:f0:
                    c8:10:32:0c:9d:65:4e:c9:9f:28:7b:81:13:d7:e4:
                    c0:4f:f7:0d:62:99:cf:ee:e2:ab:91:91:95:70:10:
                    91:08:31:58:21:d5:45:fc:5e:4f:2a:cf:84:26:74:
                    ae:7c:22:d4:58:fe:fe:41:bc:24:b4:c2:fd:8b:b0:
                    fd:17:19:36:67:f1:b3:a0:9a:da:9c:ef:90:b5:a3:
                    b6:b6:fb:fd:c3:40:7d:c5:1b:d3:73:6d:05:fb:bd:
                    e7:b3:72:a3:d7:a4:a9:9b:9a:17:af:c5:65:21:21:
                    bd:01:73:33:66:8f:b7:ba:b3:cf:44:8b:50:3d:75:
                    5a:7b:52:1b:bc:65:b3:b6:d6:32:70:53:d3:4f:e2:
                    8b:25:29:5f:bf:cf:4a:0c:09:df:23:95:d1:a2:b9:
                    ce:6e:f6:31:ed:b0:d1:1d:32:ef:0a:69:80:71:e7:
                    87:4a:db:85:14:e2:69:8c:0f:67:2d:3f:b7:92:51:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:1A:44:06:3F:CA:98:39:A3:43:E2:E7:56:7F:89:9A:E3:A9:88
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:ba:2f:cc:39:d5:76:73:30:04:80:db:ff:04:27:c2:47:
         9a:47:cb:cc:6c:ca:fb:c3:0c:e1:70:4b:62:c4:e3:fb:99:40:
         d4:a2:60:1d:db:67:cd:ce:4c:e5:26:a9:ee:a1:89:9e:a8:2c:
         24:c8:79:5e:49:15:20:43:03:56:1e:63:c1:bd:18:08:13:d0:
         3a:0b:cc:4b:95:cb:f8:44:87:e8:6c:e3:0f:b4:4c:ad:5e:ae:
         5a:3a:90:db:97:a9:a0:c8:d5:98:ec:4a:99:1b:b6:6e:70:1e:
         5c:6d:b0:f9:84:27:48:aa:ae:b0:80:68:5b:2f:97:19:e8:18:
         3b:66:82:20:9d:c7:cf:ea:33:8c:e7:37:80:73:c8:ce:df:f6:
         43:b0:3f:7e:67:90:3a:ae:f5:d1:88:13:b7:30:39:ea:1e:cd:
         95:a2:72:fb:8b:92:00:94:a5:f2:7e:ec:0d:f3:d5:3e:11:72:
         bf:42:92:18:06:08:a2:4c:94:4a:2e:f6:55:6c:68:95:a6:10:
         bf:c2:8a:58:35:7c:ac:f9:cb:b9:e8:f6:e0:77:de:e2:5d:56:
         81:0b:3a:ca:e4:be:2a:98:d3:59:45:a5:66:c8:0c:d5:75:70:
         85:e3:a3:44:51:ff:9b:fd:3b:22:77:34:36:39:7a:4e:98:db:
         21:8c:1b:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC
MzMwRkREOUQwHhcNMjYwNzI3MDQ0NDA1WhcNMjYwODAzMDQ0NDA1WjAYMRYwFAYD
VQQDEw02YTY2ZTIxNi1lM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutn4dRk//s7xFNjsYwbt9YLZ6K6RLofLzgx2sBQB4/+jq2UPWJh1w1w/hck6
o1u6elAGLCwqpu/K2ujxy3MRLj6djcoKOI6dF/DIEDIMnWVOyZ8oe4ET1+TAT/cN
YpnP7uKrkZGVcBCRCDFYIdVF/F5PKs+EJnSufCLUWP7+QbwktML9i7D9Fxk2Z/Gz
oJranO+QtaO2tvv9w0B9xRvTc20F+73ns3Kj16Spm5oXr8VlISG9AXMzZo+3urPP
RItQPXVae1IbvGWzttYycFPTT+KLJSlfv89KDAnfI5XRornObvYx7bDRHTLvCmmA
ceeHStuFFOJpjA9nLT+3klHTFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFwGkQG
P8qYOaND4udWf4ma46mIMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4
QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw
X1hOcUxDUUdHZml6TVAzWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjdS6L8w51XZzMASA2/8EJ8JHmkfLzGzK+8MM4XBLYsTj+5lA1KJgHdtnzc5M
5Sap7qGJnqgsJMh5XkkVIEMDVh5jwb0YCBPQOgvMS5XL+ESH6GzjD7RMrV6uWjqQ
25epoMjVmOxKmRu2bnAeXG2w+YQnSKqusIBoWy+XGegYO2aCIJ3Hz+ozjOc3gHPI
zt/2Q7A/fmeQOq710YgTtzA56h7NlaJy+4uSAJSl8n7sDfPVPhFyv0KSGAYIokyU
Si72VWxolaYQv8KKWDV8rPnLuej24Hfe4l1WgQs6yuS+KpjTWUWlZsgM1XVwheOj
RFH/m/07Inc0Njl6TpjbIYwbbg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:29 2026 by rpki-client