Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File:                     Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier:          Am7qXU0zJnLBYQVDhD4xwfcbYLorrhtBDBNtnF4/zFo=
Subject key identifier:   57:E6:E9:99:ED:FB:A0:B2:A5:8E:3B:6A:7B:2A:79:D0:47:B0:01:CF
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer:       /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial:       0343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number:          0337
Signing time:             Mon 05 Oct 2026 01:00:58 +0000
Manifest this update:     Mon 05 Oct 2026 01:00:57 +0000
Manifest next update:     Mon 12 Oct 2026 01:00:57 +0000
Files and hashes:         1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: gym2jJb1SeDFq6udfGzW2e3XurU6AMMInyLjD5+xVTs=)
                          2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: pcUI164QP94dET6vxGqZiMWs2E97pOagQxpOZq2263A=)
                          3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
                          rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
        Validity
            Not Before: Oct  5 01:00:57 2026 GMT
            Not After : Oct 12 01:00:57 2026 GMT
        Subject: CN=6ac2f6ca-9f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:cb:d6:ab:4f:ba:14:60:11:44:75:25:ad:
                    38:b5:95:af:cc:b6:c7:4f:d5:08:46:8a:11:80:41:
                    16:25:04:1d:04:08:c8:c0:db:9f:13:38:2d:de:b0:
                    58:71:c1:84:53:e6:c4:53:96:67:59:ab:d5:4f:9c:
                    32:5b:be:98:44:68:ae:13:c9:90:d7:94:6b:d9:da:
                    48:ee:29:61:a4:df:77:f1:fb:98:13:6d:bf:3e:d8:
                    70:64:ba:fc:cf:5b:28:6b:b5:11:1a:67:dd:d8:f5:
                    5b:fd:3f:44:b7:40:63:da:1d:9d:5d:ce:87:75:a6:
                    38:df:e8:9a:9c:9d:3b:5c:62:aa:44:43:9d:21:b4:
                    1b:0f:56:e7:ab:03:35:c1:35:90:27:9b:a7:9b:c6:
                    8b:fc:b6:0a:47:db:20:0e:3d:50:2e:35:6d:15:71:
                    c8:55:c4:c7:e4:93:76:1e:c0:5c:c7:ec:32:13:80:
                    33:32:e5:f0:c4:a7:78:c1:ad:a8:eb:99:15:ab:53:
                    fa:da:b2:26:67:bf:4c:e2:3f:3e:9b:d1:c8:b9:5e:
                    df:be:ae:fb:24:14:94:6b:a0:d7:d3:fa:42:7a:61:
                    14:fa:cf:cf:92:69:c9:ca:46:20:00:4c:a6:4f:08:
                    82:ce:0a:9f:37:bf:a7:b5:ad:5b:20:7d:8a:0e:8f:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:E9:99:ED:FB:A0:B2:A5:8E:3B:6A:7B:2A:79:D0:47:B0:01:CF
            X509v3 Authority Key Identifier:
                keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:46:d4:61:14:91:05:0d:af:be:24:41:a4:57:f6:f6:26:cd:
         d3:ea:ae:80:d2:b7:f6:76:2d:c2:fc:6e:0d:91:61:e5:35:3c:
         13:be:ee:39:52:c7:3c:1a:7c:3f:58:c4:03:e2:aa:e7:59:e0:
         d8:fc:7a:5a:df:6e:ab:1e:22:01:4f:93:13:7d:b4:59:2b:f1:
         d5:0f:13:81:a0:00:7f:74:5a:a9:45:3b:84:ea:bd:aa:93:7b:
         36:e9:2a:f7:f1:7e:65:8f:12:1a:30:a8:36:af:d3:ed:3e:0c:
         63:36:b1:f6:29:88:ac:58:32:42:80:14:09:79:ee:31:09:7e:
         d7:31:bc:04:d2:4b:a9:7e:b1:b0:45:e0:9e:c9:f2:22:67:70:
         31:fa:81:b3:e4:78:5a:ea:4b:fd:ca:36:46:1a:b4:9c:0b:6e:
         04:b9:b3:c3:e4:9d:a6:2a:c4:66:42:cc:ce:9e:8d:86:9e:84:
         5a:52:1e:2b:c2:92:4a:97:a3:ad:50:26:61:ca:ec:22:2c:e4:
         b4:cd:a3:57:f5:c3:10:18:b2:54:bc:ae:50:5a:42:d6:94:9e:
         c1:39:ed:70:49:06:b7:10:fa:45:f8:b8:ff:05:5c:9d:11:77:
         4c:79:22:f6:3f:a4:f6:c9:e3:7e:d9:fd:95:7f:1e:c3:a9:ed:
         a9:7d:f4:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5
Q0IyRjYxMDgwHhcNMjYxMDA1MDEwMDU3WhcNMjYxMDEyMDEwMDU3WjAYMRYwFAYD
VQQDEw02YWMyZjZjYS05ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkhHL1qtPuhRgEUR1Ja04tZWvzLbHT9UIRooRgEEWJQQdBAjIwNufEzgt3rBY
ccGEU+bEU5ZnWavVT5wyW76YRGiuE8mQ15Rr2dpI7ilhpN938fuYE22/PthwZLr8
z1soa7URGmfd2PVb/T9Et0Bj2h2dXc6HdaY43+ianJ07XGKqREOdIbQbD1bnqwM1
wTWQJ5unm8aL/LYKR9sgDj1QLjVtFXHIVcTH5JN2HsBcx+wyE4AzMuXwxKd4wa2o
65kVq1P62rImZ79M4j8+m9HIuV7fvq77JBSUa6DX0/pCemEU+s/PkmnJykYgAEym
TwiCzgqfN7+nta1bIH2KDo+xmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfm6Znt
+6CypY47ansqedBHsAHPMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3
NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl
dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApUbUYRSRBQ2vviRBpFf29ibN0+qugNK39nYtwvxuDZFh5TU8E77uOVLHPBp8
P1jEA+Kq51ng2Px6Wt9uqx4iAU+TE320WSvx1Q8TgaAAf3RaqUU7hOq9qpN7Nukq
9/F+ZY8SGjCoNq/T7T4MYzax9imIrFgyQoAUCXnuMQl+1zG8BNJLqX6xsEXgnsny
ImdwMfqBs+R4WupL/co2Rhq0nAtuBLmzw+SdpirEZkLMzp6Nhp6EWlIeK8KSSpej
rVAmYcrsIizktM2jV/XDEBiyVLyuUFpC1pSewTntcEkGtxD6Rfi4/wVcnRF3THki
9j+k9snjftn9lX8ew6ntqX30tQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:53:12 2026 by rpki-client