Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          g/ap8U/7UYoMFIr2zY3HB2DrnNCLUgT2YDKYKwDDG14=
Subject key identifier:   85:4B:9B:5F:E6:2F:80:D8:36:37:12:84:75:9C:4F:34:6E:28:8E:E0
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          C0
Signing time:             Fri 17 Apr 2026 06:41:35 +0000
Manifest this update:     Fri 17 Apr 2026 06:41:35 +0000
Manifest next update:     Fri 24 Apr 2026 06:41:35 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: 1kA6rqmlQMf8BFmywMRfCeVR/Uw6tUbRhDv2BoujN0I=)
                          2: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: nnqJ8G7VjssukS+0G1GxoQBw1mxaaAbrJ8au5Om0Jj4=)
                          3: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: PGiX+wx067z9cwIv48GLAtfIhUtJveteXDe5HO2XbGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Apr 17 06:41:35 2026 GMT
            Not After : Apr 24 06:41:35 2026 GMT
        Subject: CN=69e1d61f-c751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:ae:95:8f:88:7f:d3:0f:c9:5a:04:0a:cc:
                    7b:28:ed:bf:f4:4c:2f:88:91:01:d5:8d:33:77:03:
                    ec:ee:9e:e6:f7:22:a8:d8:81:5c:17:32:bf:a4:52:
                    70:48:34:fe:62:46:b0:bb:10:b7:3f:3f:7c:dc:ee:
                    79:ed:30:51:d2:72:29:08:17:eb:db:78:6c:cc:12:
                    e4:11:39:a0:8f:a9:f3:1f:07:22:81:1e:2d:fc:e3:
                    66:a2:11:f7:c8:42:bb:a2:a0:e9:44:5f:83:44:eb:
                    a8:06:ff:85:1f:2a:78:0f:6b:4b:c9:06:f1:79:f5:
                    59:ba:d0:66:1f:b9:00:6e:b4:e3:3d:f1:8f:8b:ae:
                    54:57:93:7f:34:1e:71:ad:4f:8a:f4:38:3c:5a:3d:
                    b9:a9:e1:8a:5a:90:11:48:4c:4d:78:d7:f4:27:97:
                    72:07:24:d4:87:41:57:8b:ec:f6:f6:bd:94:35:d8:
                    bb:fd:92:f3:9c:26:5a:60:51:7b:c5:f3:b5:e5:07:
                    82:8e:fd:70:54:e3:dc:4d:51:13:66:41:74:5f:c5:
                    a4:20:ce:02:78:1b:6f:76:d8:19:62:33:55:73:23:
                    4d:c7:10:35:92:c9:72:64:1b:5f:ac:4e:84:ea:dc:
                    a8:55:9d:ad:e2:4b:62:81:a5:2e:43:06:be:73:0b:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:9B:5F:E6:2F:80:D8:36:37:12:84:75:9C:4F:34:6E:28:8E:E0
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:69:61:5a:7c:29:2b:1c:a6:1a:09:ee:f6:42:a4:bb:54:
         3f:e9:4e:38:5c:f6:97:6f:d8:fe:3e:2b:db:80:e9:d2:b9:96:
         d1:33:fd:00:35:7d:92:74:8d:e1:f9:49:fb:02:c3:2a:58:b1:
         40:77:0a:56:ea:d4:12:9d:00:88:f8:8a:0e:47:2a:85:2c:6e:
         48:a1:71:df:32:e4:68:85:5d:0d:fe:56:e4:1e:67:56:04:2a:
         e6:a3:b5:33:73:12:0a:c2:ec:bc:f5:91:02:10:6d:b4:00:58:
         a5:18:0b:a0:17:7a:4e:77:4e:0e:7d:b6:11:ee:a1:39:e9:52:
         f6:d0:e2:b2:53:53:79:42:84:04:83:a7:a9:75:da:ab:80:3e:
         ee:a4:81:92:bc:0e:89:f2:08:78:02:70:be:62:59:43:3b:67:
         f5:1c:54:98:14:be:61:1a:40:26:ed:36:42:dc:8c:eb:b5:ca:
         1e:c1:f1:37:8e:e8:e5:9f:84:35:9f:25:10:9f:05:25:30:76:
         d2:ef:38:d9:40:2d:29:10:39:65:0b:b3:eb:36:76:e6:0c:ce:
         77:26:14:47:2b:f8:32:ed:d2:3b:e3:35:2d:97:a1:15:1e:41:
         75:b2:93:69:b5:4b:40:f8:ff:3e:89:85:a8:fb:dd:9c:f2:35:
         ab:9f:bd:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJFREUxMTAvBgNVBAUTKDlEQjI1OEMxNzBCMjMyMjk0RDg2M0Y2MEQyREMwMTIz
Q0RBQUU3ODkwHhcNMjYwNDE3MDY0MTM1WhcNMjYwNDI0MDY0MTM1WjAYMRYwFAYD
VQQDEw02OWUxZDYxZi1jNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyiulY+If9MPyVoECsx7KO2/9EwviJEB1Y0zdwPs7p7m9yKo2IFcFzK/pFJw
SDT+YkawuxC3Pz983O557TBR0nIpCBfr23hszBLkETmgj6nzHwcigR4t/ONmohH3
yEK7oqDpRF+DROuoBv+FHyp4D2tLyQbxefVZutBmH7kAbrTjPfGPi65UV5N/NB5x
rU+K9Dg8Wj25qeGKWpARSExNeNf0J5dyByTUh0FXi+z29r2UNdi7/ZLznCZaYFF7
xfO15QeCjv1wVOPcTVETZkF0X8WkIM4CeBtvdtgZYjNVcyNNxxA1kslyZBtfrE6E
6tyoVZ2t4ktigaUuQwa+cwvWCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVLm1/m
L4DYNjcShHWcTzRuKI7gMB8GA1UdIwQYMBaAFJ2yWMFwsjIpTYY/YNLcASPNqueJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkVERS81NUNCMkUwNDFB
QjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1pbE5oajlnMHR3Qkk4MnE1
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkVERS81NUNCMkUwNDFBQjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1p
bE5oajlnMHR3Qkk4MnE1NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVBppYVp8KSscphoJ7vZCpLtUP+lOOFz2l2/Y/j4r24Dp0rmW0TP9ADV9knSN
4flJ+wLDKlixQHcKVurUEp0AiPiKDkcqhSxuSKFx3zLkaIVdDf5W5B5nVgQq5qO1
M3MSCsLsvPWRAhBttABYpRgLoBd6TndODn22Ee6hOelS9tDislNTeUKEBIOnqXXa
q4A+7qSBkrwOifIIeAJwvmJZQztn9RxUmBS+YRpAJu02QtyM67XKHsHxN47o5Z+E
NZ8lEJ8FJTB20u842UAtKRA5ZQuz6zZ25gzOdyYURyv4Mu3SO+M1LZehFR5BdbKT
abVLQPj/PomFqPvdnPI1q5+9kQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:34 2026 by rpki-client