Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File:                     NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier:          NZ0za68szHg51IIzU7gRbgvuvjZaXt7bAxz2CHpt5Fg=
Subject key identifier:   A4:8B:CB:4C:E9:79:B8:A7:90:6A:26:D8:F3:48:6B:24:56:32:A0:44
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer:       /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number:          F6
Signing time:             Sat 19 Sep 2026 00:25:36 +0000
Manifest this update:     Sat 19 Sep 2026 00:25:35 +0000
Manifest next update:     Sat 26 Sep 2026 00:25:35 +0000
Files and hashes:         1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: KQP0qLyS5tGeREffXSQLrB3fEK+dt+sUXr1jbJ43uL0=)
                          2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: jv1KvzcTvw26f2C0XqbVWuFuNFMIpOIQKmYH0GVxJUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
        Validity
            Not Before: Sep 19 00:25:35 2026 GMT
            Not After : Sep 26 00:25:35 2026 GMT
        Subject: CN=6aadd680-b7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:39:78:73:a8:94:74:e7:88:05:bd:3d:b1:
                    f0:c0:18:26:86:7f:9b:ba:42:33:c0:c9:a4:bb:fc:
                    e1:06:81:05:2c:2d:bf:c8:ea:de:87:f2:5b:0d:b8:
                    3c:0f:8e:09:ca:c0:de:6b:1f:e1:1f:b0:9d:ce:a1:
                    f2:8c:09:20:04:6e:e7:8d:a3:ff:99:13:8d:1b:59:
                    6b:b1:62:1e:e9:37:93:17:ae:15:46:5e:cc:1b:ed:
                    69:7e:44:95:c3:68:6f:3a:c2:1f:ea:8a:a3:9b:4c:
                    49:e1:a9:0e:ae:6d:cc:8b:25:f5:f9:25:f6:8e:1f:
                    7a:07:c5:95:02:16:e8:da:58:d4:38:6d:36:4f:23:
                    3c:94:ac:f4:b9:7d:3c:b0:e2:d5:a8:3d:93:90:93:
                    c0:df:13:7b:b9:98:7e:8d:0b:85:63:d2:28:8f:2c:
                    92:2b:18:5b:97:e5:05:fa:07:de:87:87:17:f5:44:
                    71:58:a8:71:6b:46:17:bd:f8:9e:17:e6:d1:49:06:
                    2d:1e:e9:a2:d5:26:92:69:04:c4:38:9a:91:b1:7c:
                    4c:e9:c9:bb:30:c2:49:73:34:0a:e8:2c:96:79:72:
                    79:cc:82:3a:8b:14:9b:c6:15:75:8a:9c:be:11:1d:
                    f2:89:a6:c9:9e:0d:e0:0e:73:d0:03:1f:a2:7b:dc:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8B:CB:4C:E9:79:B8:A7:90:6A:26:D8:F3:48:6B:24:56:32:A0:44
            X509v3 Authority Key Identifier:
                keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:5f:fb:f0:6c:6a:5d:5e:d4:0d:46:78:03:59:01:2f:23:
         4f:4f:40:a1:28:44:c0:9f:ed:75:56:83:9d:14:e4:99:ba:ef:
         a5:f0:7e:a0:a0:db:7f:45:2a:15:71:f9:49:1f:49:43:30:9d:
         b8:c7:e3:27:89:25:45:e9:9d:77:4b:91:2d:bc:19:de:58:cd:
         86:14:a4:a3:d9:76:82:73:db:75:37:f6:57:95:c5:59:39:50:
         70:a0:f4:86:2c:c3:5e:d5:a1:da:70:97:7a:29:59:7b:53:68:
         0c:ff:1b:4f:1b:6a:8b:b5:14:eb:7b:17:a3:c5:13:2b:1c:ad:
         3b:04:a6:f5:d0:3e:eb:ea:4a:ed:34:60:9a:c7:6d:95:26:33:
         49:9f:e2:58:37:57:78:3f:1e:18:09:27:7e:0c:77:d2:df:42:
         e1:c6:a0:a6:45:5b:8b:c7:b2:ea:14:77:3f:b1:73:01:4c:8c:
         69:0b:a0:d8:6a:46:21:1b:1f:d9:80:45:9f:d8:7c:cd:eb:dc:
         ce:5a:d7:5b:15:50:bc:3e:cb:4e:a9:73:d4:95:9d:12:61:5d:
         9d:c0:e6:b2:75:cb:49:76:b0:8c:d5:fe:2d:e6:bf:8c:41:3a:
         7b:68:2a:68:1a:1c:e7:14:d5:4b:cd:f4:4a:57:04:7f:fc:59:
         94:ea:84:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDM1NEUzMkI5REUwRTU2OUExOTUxQTk3QjkzMjAxOUY2
ODhBMzUwQUMwHhcNMjYwOTE5MDAyNTM1WhcNMjYwOTI2MDAyNTM1WjAYMRYwFAYD
VQQDEw02YWFkZDY4MC1iN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxu45eHOolHTniAW9PbHwwBgmhn+bukIzwMmku/zhBoEFLC2/yOreh/JbDbg8
D44JysDeax/hH7CdzqHyjAkgBG7njaP/mRONG1lrsWIe6TeTF64VRl7MG+1pfkSV
w2hvOsIf6oqjm0xJ4akOrm3MiyX1+SX2jh96B8WVAhbo2ljUOG02TyM8lKz0uX08
sOLVqD2TkJPA3xN7uZh+jQuFY9IojyySKxhbl+UF+gfeh4cX9URxWKhxa0YXvfie
F+bRSQYtHumi1SaSaQTEOJqRsXxM6cm7MMJJczQK6CyWeXJ5zII6ixSbxhV1ipy+
ER3yiabJng3gDnPQAx+ie9x5IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSLy0zp
ebinkGom2PNIayRWMqBEMB8GA1UdIwQYMBaAFDVOMrneDlaaGVGpe5MgGfaIo1Cs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS81NUVCQjg1ODRF
M0IxMUYwOUMxMjU1NDdDNEY5QUUwMi9OVTR5dWQ0T1Zwb1pVYWw3a3lBWjlvaWpV
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVLdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS81NUVCQjg1ODRFM0IxMUYwOUMxMjU1NDdDNEY5QUUwMi9OVTR5dWQ0T1Zw
b1pVYWw3a3lBWjlvaWpVS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK2Bf+/Bsal1e1A1GeANZAS8jT09AoShEwJ/tdVaDnRTkmbrvpfB+oKDbf0Uq
FXH5SR9JQzCduMfjJ4klRemdd0uRLbwZ3ljNhhSko9l2gnPbdTf2V5XFWTlQcKD0
hizDXtWh2nCXeilZe1NoDP8bTxtqi7UU63sXo8UTKxytOwSm9dA+6+pK7TRgmsdt
lSYzSZ/iWDdXeD8eGAknfgx30t9C4cagpkVbi8ey6hR3P7FzAUyMaQug2GpGIRsf
2YBFn9h8zevczlrXWxVQvD7LTqlz1JWdEmFdncDmsnXLSXawjNX+Lea/jEE6e2gq
aBoc5xTVS830SlcEf/xZlOqE/w==
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:46:48 2026 by rpki-client