Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          pGTXMk25zZpyF2ve0lac93NoBEJIS+RoHjaglcay6Yw=
Subject key identifier:   CB:F4:42:9C:CB:86:B2:3C:5E:80:3C:59:5C:04:37:A3:DF:03:E5:22
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          23B4
Signing time:             Fri 04 Sep 2026 15:52:41 +0000
Manifest this update:     Fri 04 Sep 2026 15:52:41 +0000
Manifest next update:     Fri 11 Sep 2026 15:52:41 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: vBlAKBLI/bD4ybym+bmWiWDsndaUwIbPnSGV/SSkl2A=)
                          2: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q=)
                          3: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Ij+zJZ5CkWG7jXCiWRJZjJ77nuWw4Opj7SW89egSHU=)
                          4: BA007060162D11EEB79F703CC4F9AE02.roa (hash: yhtnb/OOA/wXXD8maZO8n4AsJMc9HBQT2aQqAHCJfOQ=)
                          5: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=)
                          6: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: avBOKsbWyKUECTQ8CZJG8sV4Ncdv4AJ8R93izTNrcYY=)
                          7: E2174D9E525211F1980710C0B7833773.roa (hash: GVFs6VYrJH2axU/RPQFKKSwevv3jFE1gWqL31n3FQw0=)
                          8: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: CjGoyKN0HrGuZB1eGY3YN8uhsmzlKryekK6FbSvP2zk=)
                          9: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: zQF+T1/pOLzDuzv2qEa0T9BdUI0ppH7RANttefdBlH0=)
                          10: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Ifg7lXJOQP+18o4CZaAo7GSgxBafrvA0XUWHav5Uo0c=)
                          11: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: EedI26Sx2994grPUcSKFjJ1j0cv3YZqLAHCyNSdQVkI=)
                          12: 94C16496222811EF99153155C4F9AE02.roa (hash: rblIsywW3HeGBV9SYXZ48ueArKjs04dIk6+AvNganu0=)
                          13: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=)
                          14: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=)
                          15: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM=)
                          16: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=)
                          17: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw=)
                          18: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: F/3d2MdmWAQWy2/KkyrR/TKf6kjUWhedoqi+Mnvoopg=)
                          19: BC0BEA7097A711F1B52646145711F970.roa (hash: ZyIGPkGGRXio1Xqap4enBoMSAYMzJ6w/sHA0g9751g0=)
                          20: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=)
                          21: EA731210895D11F193C4BB306611F970.roa (hash: LhIix3MqgGCa2w3+feEZuut9yVtkWwXiLFodoDN7Li8=)
                          22: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: v07Pprp9lf3TRtO+9xznb1E1Na5Oj+IgXg/hHlg/17g=)
                          23: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: X8qoiiScFa9eVjABlsfQ/cyRc8nDS1tlAxe/2JVazO0=)
                          24: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM=)
                          25: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak=)
                          26: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: kGjjVFLeftJ4iWIxg8Q1sbQUrd0A5MgOTgnq5zEqwbE=)
                          27: E1B38BC080C811F181550F2C98A30FBC.roa (hash: WRADBx/SaXJk7j6yqZeKGAjOAQr20gzsAPuwRVAsDf4=)
                          28: 229B83C4685811F180A7311C9C47A888.roa (hash: ZDnamRNvi7dksMJwyc/mAFv1Y9uc7PCP3+Gsifgq/jo=)
                          29: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=)
                          30: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9947 (0x26db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Sep  4 15:52:41 2026 GMT
            Not After : Sep 11 15:52:41 2026 GMT
        Subject: CN=6a9ae949-7bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:28:7e:cd:85:0f:8a:40:0b:a6:ac:6f:c0:2f:
                    28:54:30:6f:94:0f:39:90:1e:a5:b0:d9:d8:31:83:
                    eb:e2:bc:91:86:8e:16:01:f6:7a:73:1f:52:f2:9b:
                    96:67:28:67:ee:4b:7c:ae:87:52:64:32:fe:11:42:
                    3b:b5:c7:50:f2:ce:be:ea:3a:4a:83:63:f7:03:3a:
                    2e:9c:36:e4:b8:5c:d7:09:29:04:e6:54:03:a4:c3:
                    79:20:89:47:04:62:cf:04:6d:b9:f3:f8:9d:73:23:
                    14:6c:30:d7:39:ed:7c:a7:92:d5:be:e5:b8:2f:d1:
                    f2:7d:4b:0b:42:42:81:fe:cf:58:b0:af:ae:28:db:
                    00:72:10:39:81:5d:fd:5c:3e:e8:ee:1c:41:d7:68:
                    9d:18:55:6c:fb:c3:4d:48:38:57:7c:fe:6f:8d:6d:
                    f6:a7:59:b3:05:87:bd:09:a2:57:e2:92:aa:02:25:
                    ea:89:d7:e0:f4:d8:ea:1f:17:10:95:19:93:d0:72:
                    77:4b:e5:2e:28:6a:96:14:1b:e8:44:19:a7:60:df:
                    28:41:ac:70:8b:c5:c3:56:ec:53:a7:ee:5b:ea:fa:
                    5e:99:fd:e3:a6:c2:47:77:6e:e4:ef:a1:46:95:01:
                    f8:8e:84:f7:85:ad:96:e5:00:60:6d:09:38:67:10:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:42:9C:CB:86:B2:3C:5E:80:3C:59:5C:04:37:A3:DF:03:E5:22
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:0a:87:d7:1b:4f:6e:49:3a:ea:bb:62:23:4c:2a:62:63:
         34:eb:7d:17:29:2f:50:49:b3:57:fe:78:5f:bd:9d:f9:8e:8e:
         11:d6:09:39:26:02:f7:ad:4f:e9:9f:d5:3a:25:7d:6e:51:60:
         1c:6d:3b:21:35:46:89:a6:90:6c:29:76:3c:25:d2:35:a4:15:
         44:3c:be:25:5c:3a:cc:18:1d:5f:64:b1:e1:aa:b7:6b:00:a7:
         bf:b7:e5:31:ec:8e:80:17:01:dd:a9:41:01:14:d3:1a:97:ea:
         23:01:10:3a:22:1d:08:b7:bd:c6:8f:04:ae:08:ea:4b:1d:b7:
         d7:4d:3c:14:30:aa:e3:0d:54:77:42:59:df:7b:72:cc:80:7e:
         3a:a5:3c:6b:ac:5e:f5:bf:d3:e2:86:c2:de:01:69:ba:00:5f:
         c0:fe:1b:1a:83:ae:46:88:c7:69:5b:40:ee:49:39:bc:8e:89:
         4a:f6:ef:1c:33:bb:27:07:e7:82:bc:31:c3:fe:17:49:29:42:
         14:a1:47:5f:a1:b1:db:c0:90:31:77:b2:00:3a:2a:28:f3:83:
         88:1c:a9:d3:43:7e:4c:6a:c9:45:88:e5:16:81:d8:e5:46:9f:
         5a:fb:d1:dd:a1:2b:37:d1:f0:8e:6e:a7:a3:7a:3c:54:83:40:
         8a:27:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:55:35 2026 by rpki-client