Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
File:                     nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json)
Hash identifier:          RhVfmrrtdbVYGQy45i9vqW0so+KYNqq8IT0jxuXbPAE=
Subject key identifier:   DE:EE:10:EF:4B:B5:03:96:A5:32:1E:ED:55:85:87:0F:40:63:1B:A1
Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29
Certificate issuer:       /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729
Certificate serial:       068D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
Manifest number:          068B
Signing time:             Wed 20 May 2026 22:30:25 +0000
Manifest this update:     Wed 20 May 2026 22:30:24 +0000
Manifest next update:     Wed 27 May 2026 22:30:24 +0000
Files and hashes:         1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: InAw5ykEOdzWvYINFqTRgzedVaJUV9tN1UxRTCCjogc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl
                          rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729
        Validity
            Not Before: May 20 22:30:24 2026 GMT
            Not After : May 27 22:30:24 2026 GMT
        Subject: CN=6a0e3600-4c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:d7:11:af:c3:63:7a:b0:85:34:1c:b1:36:
                    df:e7:be:e0:63:49:de:cf:5c:ff:f7:90:91:f0:30:
                    45:b4:21:a6:84:70:1b:27:32:44:0b:3a:6d:ab:41:
                    50:6d:42:30:4a:aa:88:65:b2:ec:59:59:ca:5b:47:
                    f9:17:ea:6b:96:b6:aa:15:8d:de:ae:aa:da:7b:73:
                    e6:20:c9:de:e2:b6:16:fb:ae:3a:59:7a:47:55:26:
                    c8:6c:c1:e7:50:73:dd:2b:85:9f:33:52:c6:3c:13:
                    17:18:0c:7a:b3:2f:7b:d8:8f:55:e8:d4:b2:b0:dd:
                    fe:99:f6:e7:f7:4e:81:47:bc:f9:34:32:20:a8:b1:
                    fc:08:80:b3:bb:0f:86:3c:13:94:2c:75:a4:60:30:
                    6d:16:9e:34:d3:3f:63:cc:1c:b7:0e:9f:f4:b2:b5:
                    e7:ff:46:3e:46:36:d1:ca:bc:26:be:84:9e:f4:f4:
                    1e:b1:b4:d2:18:34:88:00:0a:f2:0d:90:d5:49:f3:
                    93:37:60:53:de:59:55:60:aa:2d:54:ca:43:88:b8:
                    37:21:2d:ef:71:e6:4e:e1:82:fe:c2:f2:fd:df:f6:
                    52:6c:e9:11:5e:4a:95:c8:9d:ce:ad:b0:e2:8f:80:
                    0b:6c:b5:71:72:04:df:8d:92:ac:65:45:31:31:1d:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EE:10:EF:4B:B5:03:96:A5:32:1E:ED:55:85:87:0F:40:63:1B:A1
            X509v3 Authority Key Identifier:
                keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a3:22:14:ab:6b:55:b3:75:15:d6:6c:a2:36:a8:0f:86:89:
         34:d6:51:29:ef:14:ed:f9:75:b7:b2:a1:ba:00:ff:ed:97:24:
         64:cc:1f:2f:39:16:96:03:0c:0b:8b:d2:5e:ae:8e:8a:36:bb:
         21:58:22:14:7b:0b:0f:0b:b6:68:ea:fa:65:b7:4e:2c:91:f0:
         40:c6:db:49:2b:87:c0:7b:28:79:8e:e8:37:f4:1a:49:a7:67:
         6a:57:aa:33:e1:cb:4d:b4:48:42:54:59:69:a0:4e:90:bf:f8:
         dd:f2:54:b8:3e:80:03:b7:f3:96:77:0d:34:42:e8:4d:57:21:
         8f:d1:cb:62:c2:95:a9:8a:ca:fb:06:a6:fb:69:4f:54:18:30:
         55:29:e5:62:a2:35:88:b1:d1:85:dc:c9:7f:5c:4d:9a:16:22:
         db:81:4c:c1:20:23:20:93:a5:5c:28:37:d2:90:3a:84:6f:82:
         eb:b5:2d:de:ec:36:57:e5:f1:75:ca:76:e1:4a:ff:59:9f:ff:
         d1:3d:37:20:bd:ba:c1:f6:67:28:c6:02:72:e6:81:81:4b:2c:
         d0:35:b9:a5:e9:80:8f:73:2a:2e:00:48:71:31:72:01:c9:bd:
         e6:fc:f7:c7:6c:79:c7:f7:2f:c6:76:46:7f:e1:b6:23:db:02:
         d0:db:fb:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBQzExMTAvBgNVBAUTKDlDOUE3NDdERTAwQUY0NUI4OEY3ODQxMTI4RTg5REIx
M0QyMzE3MjkwHhcNMjYwNTIwMjIzMDI0WhcNMjYwNTI3MjIzMDI0WjAYMRYwFAYD
VQQDEw02YTBlMzYwMC00YzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0x3XEa/DY3qwhTQcsTbf577gY0nez1z/95CR8DBFtCGmhHAbJzJECzptq0FQ
bUIwSqqIZbLsWVnKW0f5F+prlraqFY3erqrae3PmIMne4rYW+646WXpHVSbIbMHn
UHPdK4WfM1LGPBMXGAx6sy972I9V6NSysN3+mfbn906BR7z5NDIgqLH8CICzuw+G
PBOULHWkYDBtFp400z9jzBy3Dp/0srXn/0Y+RjbRyrwmvoSe9PQesbTSGDSIAAry
DZDVSfOTN2BT3llVYKotVMpDiLg3IS3vceZO4YL+wvL93/ZSbOkRXkqVyJ3OrbDi
j4ALbLVxcgTfjZKsZUUxMR0LYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7uEO9L
tQOWpTIe7VWFhw9AYxuhMB8GA1UdIwQYMBaAFJyadH3gCvRbiPeEESjonbE9Ixcp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFDMS9GRTY4RDNDNEI5
OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlGdUk5NFFSS09pZHNUMGpG
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25KcDBmZUFLOUZ1STk0UVJLT2lkc1QwakZ5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUFDMS9GRTY4RDNDNEI5OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlG
dUk5NFFSS09pZHNUMGpGeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxKMiFKtrVbN1FdZsojaoD4aJNNZRKe8U7fl1t7KhugD/7ZckZMwfLzkWlgMM
C4vSXq6Oija7IVgiFHsLDwu2aOr6ZbdOLJHwQMbbSSuHwHsoeY7oN/QaSadnaleq
M+HLTbRIQlRZaaBOkL/43fJUuD6AA7fzlncNNELoTVchj9HLYsKVqYrK+wam+2lP
VBgwVSnlYqI1iLHRhdzJf1xNmhYi24FMwSAjIJOlXCg30pA6hG+C67Ut3uw2V+Xx
dcp24Ur/WZ//0T03IL26wfZnKMYCcuaBgUss0DW5pemAj3MqLgBIcTFyAcm95vz3
x2x5x/cvxnZGf+G2I9sC0Nv72A==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:12 2026 by rpki-client