Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
File:                     NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json)
Hash identifier:          UHO9li0AWTvpY8svFtZtOfIz3dZH77dSSTW3faGB8yQ=
Subject key identifier:   BE:97:B8:B0:80:2E:37:E4:34:02:7E:C6:7F:6A:D4:29:7E:03:A3:7B
Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54
Certificate issuer:       /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
Manifest number:          0219
Signing time:             Mon 27 Jul 2026 04:27:43 +0000
Manifest this update:     Mon 27 Jul 2026 04:27:43 +0000
Manifest next update:     Mon 03 Aug 2026 04:27:43 +0000
Files and hashes:         1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: SNx6M/3o7qYu+sGTxqReiQ6/KLi3ad7Ev4oVHhf4+hM=)
                          2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg=)
                          3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 6ItTRA5BinCfkM/YDEDL4VrpFPkwwb1Q479PqDEMyKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
        Validity
            Not Before: Jul 27 04:27:43 2026 GMT
            Not After : Aug  3 04:27:43 2026 GMT
        Subject: CN=6a66de3f-a622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:a8:06:7b:f9:9c:18:fe:24:70:10:96:b2:
                    c0:2b:00:ac:ea:02:1e:cf:bb:87:d9:57:df:73:93:
                    e5:fb:11:14:d4:de:40:2c:d5:5d:0d:2d:e2:f3:1d:
                    8d:01:83:ab:0c:d3:16:55:1d:d4:94:f3:2e:7f:8b:
                    88:0d:eb:29:61:6b:79:31:0a:33:cf:49:83:30:2b:
                    12:52:f4:98:8f:f3:66:a8:ac:81:79:43:09:df:76:
                    fa:c1:5f:ae:ec:56:55:14:06:63:b2:b2:ef:81:ce:
                    d2:dd:28:22:da:43:30:46:18:d1:fb:78:a1:35:75:
                    47:9e:2a:9b:41:1a:0b:d8:2a:e3:0f:c8:0a:d8:08:
                    bb:48:81:ea:b5:7a:00:50:ef:c5:b4:b2:c2:fc:6e:
                    06:95:6d:80:7c:3e:fc:c5:8f:91:6b:b6:c1:ef:a8:
                    38:ec:a3:60:e8:16:6c:c6:40:6c:4a:e7:f5:ed:e0:
                    d2:1f:f0:4a:94:ad:60:33:f4:6d:ad:cb:11:b8:aa:
                    36:82:36:7c:2c:48:0e:82:dd:22:a6:65:9a:bf:de:
                    41:4e:ce:8c:44:d9:dd:82:89:ae:bc:32:22:27:00:
                    4a:74:fb:e7:26:fd:e9:25:6a:78:71:b6:84:a3:7f:
                    56:c5:27:d8:7d:b4:9c:a1:5f:20:1a:dc:2f:8b:91:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:97:B8:B0:80:2E:37:E4:34:02:7E:C6:7F:6A:D4:29:7E:03:A3:7B
            X509v3 Authority Key Identifier:
                keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:28:9a:0e:ac:82:84:34:0a:24:00:25:98:ba:6c:89:be:
         9f:7e:8b:d3:de:b5:d3:57:cf:5f:46:27:6e:5a:b8:b0:a3:60:
         04:62:27:92:b1:f3:de:f7:b6:65:d5:d4:07:89:fd:85:ec:2a:
         6f:66:aa:04:0c:02:a1:3f:28:08:d2:19:25:af:64:82:60:4e:
         a5:f2:b4:27:89:df:e8:a6:8d:68:44:c6:f9:00:bb:c6:6a:2c:
         91:bf:dc:47:41:ae:45:2c:2b:5d:6f:68:4c:b2:a1:d3:85:6b:
         a9:26:30:2b:91:81:02:40:50:fb:76:36:69:4c:a7:a5:48:de:
         f6:f5:c0:58:f1:59:0c:e9:fa:4d:c8:e0:06:d5:89:02:4e:8c:
         c4:14:f6:1a:50:08:a4:75:76:8d:12:d7:cb:42:3f:14:4f:ae:
         c3:27:73:de:8f:a9:c6:28:67:bc:e1:ab:6c:b3:1e:b9:3f:71:
         1e:33:0b:d3:81:58:a1:c7:05:ff:ab:03:15:2e:30:32:3e:ed:
         43:d2:7d:ef:04:a8:26:b6:a7:c4:1d:3d:26:26:ab:cd:93:c8:
         33:92:ab:a5:e7:aa:86:7e:d8:7b:bf:24:80:db:05:42:5b:e2:
         0f:70:e5:6b:91:57:a9:90:94:16:d0:80:94:43:6c:bd:b4:84:
         8a:74:cc:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD
OTREREQ0NTQwHhcNMjYwNzI3MDQyNzQzWhcNMjYwODAzMDQyNzQzWjAYMRYwFAYD
VQQDEw02YTY2ZGUzZi1hNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoN6oBnv5nBj+JHAQlrLAKwCs6gIez7uH2Vffc5Pl+xEU1N5ALNVdDS3i8x2N
AYOrDNMWVR3UlPMuf4uIDespYWt5MQozz0mDMCsSUvSYj/NmqKyBeUMJ33b6wV+u
7FZVFAZjsrLvgc7S3Sgi2kMwRhjR+3ihNXVHniqbQRoL2CrjD8gK2Ai7SIHqtXoA
UO/FtLLC/G4GlW2AfD78xY+Ra7bB76g47KNg6BZsxkBsSuf17eDSH/BKlK1gM/Rt
rcsRuKo2gjZ8LEgOgt0ipmWav95BTs6MRNndgomuvDIiJwBKdPvnJv3pJWp4cbaE
o39WxSfYfbScoV8gGtwvi5HMYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6XuLCA
LjfkNAJ+xn9q1Cl+A6N7MB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3
RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx
RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB
RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGOcomg6sgoQ0CiQAJZi6bIm+n36L096101fPX0Ynblq4sKNgBGInkrHz3ve2
ZdXUB4n9hewqb2aqBAwCoT8oCNIZJa9kgmBOpfK0J4nf6KaNaETG+QC7xmoskb/c
R0GuRSwrXW9oTLKh04VrqSYwK5GBAkBQ+3Y2aUynpUje9vXAWPFZDOn6TcjgBtWJ
Ak6MxBT2GlAIpHV2jRLXy0I/FE+uwydz3o+pxihnvOGrbLMeuT9xHjML04FYoccF
/6sDFS4wMj7tQ9J97wSoJranxB09JiarzZPIM5Krpeeqhn7Ye78kgNsFQlviD3Dl
a5FXqZCUFtCAlENsvbSEinTMAg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:46 2026 by rpki-client