Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File:                     nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier:          MGcSR1bpdGS+9amSRauEz3Sb6jAs1uKykHt8XFII2Og=
Subject key identifier:   12:57:45:CD:65:AC:32:0F:6B:37:E3:34:5A:1F:2C:D5:8B:48:E0:62
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer:       /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial:       17C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number:          17B3
Signing time:             Tue 28 Jul 2026 16:39:42 +0000
Manifest this update:     Tue 28 Jul 2026 16:39:41 +0000
Manifest next update:     Tue 04 Aug 2026 16:39:41 +0000
Files and hashes:         1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: Ym06/zeofDuWebGFu/7xoKni8YfQpM1ZF/QTtSji5vI=)
                          2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
                          rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6083 (0x17c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
        Validity
            Not Before: Jul 28 16:39:41 2026 GMT
            Not After : Aug  4 16:39:41 2026 GMT
        Subject: CN=6a68db4e-a41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:e1:c5:e4:a7:27:84:ea:4b:a9:4d:ab:3c:
                    97:ac:ad:d5:47:2d:3f:d4:84:ad:7d:b3:b1:e6:57:
                    1c:ed:09:b9:50:14:da:2a:bf:be:4a:70:34:d9:96:
                    96:06:1d:eb:cd:6d:f3:8f:a2:8d:4b:49:d2:63:e7:
                    0b:5c:3e:9b:17:c5:eb:54:cc:de:70:d9:8a:e9:d3:
                    ad:08:e0:e9:cc:b1:d9:96:db:8e:a0:2a:f8:4f:89:
                    1c:9e:e0:e0:a0:30:ab:bf:71:bc:83:48:11:c7:67:
                    ae:45:ef:46:67:3e:2b:4a:a5:90:b5:99:12:ee:44:
                    91:01:30:4d:46:49:3d:d1:cc:25:ad:38:13:54:69:
                    6f:f6:c1:6f:fd:17:8c:2b:48:c7:6c:84:22:ee:02:
                    e5:91:2a:2b:72:ad:57:ec:73:00:34:94:7b:d8:96:
                    21:22:a2:18:f0:1f:a9:c3:3a:06:7a:9c:61:8e:e4:
                    99:f6:d6:7f:70:51:5c:bc:57:69:21:0c:e4:61:4a:
                    40:67:fc:df:91:44:de:86:19:89:34:34:4d:ed:e7:
                    27:10:5b:51:82:6e:87:5b:72:fa:d4:0a:e3:99:8d:
                    44:92:74:40:0f:8a:24:60:e9:18:cd:c4:bd:ff:d3:
                    f0:87:8f:07:6b:db:1d:fd:a5:24:7a:42:3a:94:62:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:45:CD:65:AC:32:0F:6B:37:E3:34:5A:1F:2C:D5:8B:48:E0:62
            X509v3 Authority Key Identifier:
                keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:5e:34:01:e4:dd:0b:ac:20:f5:d9:7b:36:4c:26:e0:91:
         85:51:2e:0b:2e:28:c2:51:9d:97:da:15:3d:44:db:30:b5:b6:
         88:f2:99:33:51:00:11:f5:ed:47:c0:32:ce:0e:6e:1e:db:92:
         d2:40:80:8d:79:f7:3b:f3:51:fc:52:26:90:95:11:76:79:5a:
         db:dd:29:a8:85:fd:93:ce:68:f2:0d:49:34:0a:55:75:85:02:
         2c:72:5c:b2:16:9a:ab:07:d5:c5:4e:c8:38:bf:a8:f3:54:e5:
         d8:46:ac:0c:12:0a:89:bc:c4:9b:0b:47:01:2e:17:a4:75:b9:
         8f:ef:0a:04:3c:f4:e2:00:a6:e2:0c:04:e1:6c:2c:2f:37:6f:
         df:16:c4:53:ce:89:f1:a2:d3:59:e9:3a:58:79:b4:02:3a:d5:
         d2:be:b7:1e:f3:9a:ef:72:80:6a:9d:56:da:1d:53:0a:c6:65:
         82:3c:0c:32:59:d8:34:63:c3:e6:8b:e0:d0:f9:a3:34:49:98:
         b1:19:ce:9d:ab:60:16:b6:2d:0d:d1:25:27:4a:4c:fe:8c:90:
         e7:ff:52:55:90:80:72:cc:d5:2f:c8:22:bd:7e:ca:23:8c:08:
         50:60:e4:0f:42:8e:ee:e9:52:9e:25:6f:cc:b2:14:cc:26:59:
         9f:94:77:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx
NTkwNUNBMkMwHhcNMjYwNzI4MTYzOTQxWhcNMjYwODA0MTYzOTQxWjAYMRYwFAYD
VQQDEw02YTY4ZGI0ZS1hNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlXzhxeSnJ4TqS6lNqzyXrK3VRy0/1IStfbOx5lcc7Qm5UBTaKr++SnA02ZaW
Bh3rzW3zj6KNS0nSY+cLXD6bF8XrVMzecNmK6dOtCODpzLHZltuOoCr4T4kcnuDg
oDCrv3G8g0gRx2euRe9GZz4rSqWQtZkS7kSRATBNRkk90cwlrTgTVGlv9sFv/ReM
K0jHbIQi7gLlkSorcq1X7HMANJR72JYhIqIY8B+pwzoGepxhjuSZ9tZ/cFFcvFdp
IQzkYUpAZ/zfkUTehhmJNDRN7ecnEFtRgm6HW3L61ArjmY1EknRAD4okYOkYzcS9
/9Pwh48Ha9sd/aUkekI6lGIqtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJXRc1l
rDIPazfjNFofLNWLSOBiMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz
QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl
MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW7teNAHk3QusIPXZezZMJuCRhVEuCy4owlGdl9oVPUTbMLW2iPKZM1EAEfXt
R8Ayzg5uHtuS0kCAjXn3O/NR/FImkJURdnla290pqIX9k85o8g1JNApVdYUCLHJc
shaaqwfVxU7IOL+o81Tl2EasDBIKibzEmwtHAS4XpHW5j+8KBDz04gCm4gwE4Wws
Lzdv3xbEU86J8aLTWek6WHm0AjrV0r63HvOa73KAap1W2h1TCsZlgjwMMlnYNGPD
5ovg0PmjNEmYsRnOnatgFrYtDdElJ0pM/oyQ5/9SVZCAcszVL8givX7KI4wIUGDk
D0KO7ulSniVvzLIUzCZZn5R3Dg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:49 2026 by rpki-client