Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File:                     nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier:          qz2g4PpDwvVfCTJsGDjJ3q9dx8J+4KTe8WYd8C6NNQs=
Subject key identifier:   AF:8B:3C:A9:99:D1:82:E0:47:9E:01:AA:77:1B:50:97:69:B6:58:69
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0F2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number:          0E4F
Signing time:             Fri 06 Mar 2026 17:41:25 +0000
Manifest this update:     Fri 06 Mar 2026 17:41:25 +0000
Manifest next update:     Fri 13 Mar 2026 17:41:25 +0000
Files and hashes:         1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: ZjYBryz1LV6LGTMqZ54o8e/Fg1yVLn+DNpfhAGasNxQ=)
                          2: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: k6OuevF23aA2TplDmcNj+qm0rXJRW20WiPv4Wp1+30E=)
                          3: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SA9YgZulOsbutBgFsU8Wu5yc4Xs1zZlAjWQzNI7B7i0=)
                          4: 03774914696211EC8A05D115C4F9AE02.roa (hash: CB3MIcKyVyXQbZ66EnYA6EbSNtNek2Q/PRmkgNfK5Yg=)
                          5: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: 3yEVjRC35ERIGd2waebGab6NNy9thlNVb+YoM5V4VX0=)
                          6: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: EHjrgV+zCp3M+YUIjW+WaA9S8cDjg/AOkY5k5d/f3LU=)
                          7: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: Q6+c2/hwaoBdMNZAFpiz0ONyEYwxDpFlzv6FTSsTYrU=)
                          8: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: B2aPwnCTxCtKmkTz0kgNmn1+iaO+XM4B+/YtNmN756U=)
                          9: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: l903aSPwgwjNFISltHvDzbBe3lskGyn6Jq+nK8GBx8o=)
                          10: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (hash: NLsiXFMZwTtb+eoIe6Og+OMNL5LmJCAQY9wq0T4heUo=)
                          11: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 9q/AczHm5+Io7yx8sxuZzoWtY/RpS2QZIN4vNw4A+Tc=)
                          12: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: 4RKoM/T0YYH8fM4hbX/yd710Hb/Dbs6SjaA7XjYdphw=)
                          13: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: ltfUKJwTqWZFi+ETCGh0pHEPgtdhF2qDnHtNgnGUkF0=)
                          14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: YqyjVqfObaCdKqCeGud1APSOhnvT5Ziqju1SCkE5CAY=)
                          15: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: ZQpUiykIVZom+nDYZHnoyWkMtFPWzsFZwY3wYuMDeoQ=)
                          16: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IluNMpq3dGAsO9HziPcrP8OWpE/psmN+D6WuRRN5/jI=)
                          17: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: 5u+eTzxsr/xvvxbSFNp3Fi16h/z0i8prEdkb9c/H7aQ=)
                          18: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: d52/pTpfNEB3CiMijRJ81aMdpRpkY6spHWzuXYcjVLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3887 (0xf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Mar  6 17:41:25 2026 GMT
            Not After : Mar 13 17:41:25 2026 GMT
        Subject: CN=69ab11c5-feae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:f4:0d:df:b8:15:c5:11:52:8b:09:e8:ff:
                    ed:4e:bf:3a:46:9c:74:d6:14:a9:bf:ac:af:50:c3:
                    8a:78:42:93:c4:43:2a:97:07:9f:d8:94:6d:82:6f:
                    51:af:b2:c9:ad:c1:19:19:c8:20:9f:cd:3a:49:d8:
                    a3:95:37:df:15:ae:82:4a:61:e5:24:86:8e:72:e3:
                    b3:af:ea:b8:5b:d3:dc:1c:fc:59:48:82:17:fd:35:
                    56:36:a1:70:7d:6d:cd:5a:26:fd:e0:9e:3b:2c:f0:
                    d9:e6:3f:18:4c:63:6b:3a:14:b7:50:62:71:37:76:
                    06:54:07:04:42:cd:80:1b:e8:47:33:da:85:3f:15:
                    81:ec:60:34:68:c7:3d:48:57:4b:7c:df:fb:3f:c2:
                    48:cb:e2:d8:61:84:68:eb:ac:f5:44:ea:c0:35:cc:
                    c3:e8:c5:8d:b5:82:9b:a4:d3:1c:39:28:6d:8e:0a:
                    ae:2a:da:08:44:f7:7d:a4:08:47:e8:0b:d7:67:1b:
                    c2:fe:35:9a:58:e6:a1:e8:64:34:da:45:b1:81:36:
                    8c:75:dc:02:1a:ee:6c:5d:20:aa:40:01:f6:f4:80:
                    43:7d:29:5a:12:14:eb:e3:dd:2e:6b:3b:70:4f:2b:
                    4d:69:89:88:47:7c:f7:d5:a2:9f:98:c9:1f:57:b4:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:3C:A9:99:D1:82:E0:47:9E:01:AA:77:1B:50:97:69:B6:58:69
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:3e:20:50:c1:8f:17:b7:6d:9f:0c:06:53:89:a3:e1:b2:
         e3:5b:d9:ee:49:e9:05:18:42:65:33:82:90:d1:82:ae:05:d8:
         15:df:73:42:a9:74:46:90:7e:c2:6a:76:f8:53:1e:6c:c4:a6:
         21:07:c3:58:57:0b:44:eb:29:96:a7:34:85:68:94:c4:92:78:
         c7:0e:34:9b:f7:a5:ab:32:62:16:b4:90:e3:d1:7c:d3:c1:bb:
         08:a7:34:24:38:8c:90:ed:cb:d7:94:02:a2:c9:c6:4b:19:9e:
         1c:f1:7e:a6:5b:b9:00:c2:e7:5f:b7:ec:34:3d:1c:ea:30:1c:
         13:31:0f:b6:90:5b:85:9a:cd:71:b0:f3:86:db:90:02:c6:57:
         e0:59:99:78:14:d2:04:85:29:2d:b8:fd:1a:65:eb:40:62:46:
         65:65:fb:7c:c9:34:94:fc:24:fd:a5:ea:a2:de:77:a5:02:37:
         c8:d1:0e:fe:9a:a0:a1:20:2f:1f:e0:91:c8:f4:72:fc:5b:dd:
         bc:d2:69:87:f1:10:82:32:f4:02:4c:f3:06:87:62:b0:86:45:
         06:04:d4:94:e0:38:a3:87:f8:36:26:21:4b:56:17:d2:60:ed:
         2b:71:38:92:5e:88:9e:e8:e4:8e:1b:25:5e:b0:25:31:0d:b4:
         32:22:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:53:36 2026 by rpki-client