Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File:                     nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier:          fvLsj9lNtLnuc3htpCDs6Py8ZAbSE0ZPNqPTCjSWbp0=
Subject key identifier:   80:57:A7:D4:5A:C0:C3:DA:03:64:5C:B7:11:F2:42:51:1F:45:19:98
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1EEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number:          1EDA
Signing time:             Wed 26 Aug 2026 16:00:27 +0000
Manifest this update:     Wed 26 Aug 2026 16:00:26 +0000
Manifest next update:     Wed 02 Sep 2026 16:00:26 +0000
Files and hashes:         1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: xoBrLl2fvQyGbGoaGR9DyV6OeXpE62kcpIH7k7kdA3w=)
                          2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: OwaX0UG7/hJcFPCKxkwtoBgH6ACvrE1k7J8ZbYuydvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7916 (0x1eec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Aug 26 16:00:26 2026 GMT
            Not After : Sep  2 16:00:26 2026 GMT
        Subject: CN=6a8f0d9b-5e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:26:64:e1:10:83:62:9d:e1:bf:7a:b7:44:
                    79:a5:ed:94:c1:d0:9f:33:20:c3:ac:6f:f6:c3:f5:
                    d9:46:25:a2:1b:cc:72:e2:46:93:96:e2:bf:4e:8a:
                    7b:de:3c:e2:d7:75:1a:7c:25:36:0b:be:54:73:19:
                    75:c4:5b:1f:9e:51:b5:4b:2c:5d:b7:fe:b4:f5:33:
                    15:49:d3:98:63:ba:b7:6e:ac:67:20:2e:83:50:38:
                    b9:bb:2e:0b:80:71:d2:5a:94:25:2a:0c:d6:c6:90:
                    4a:6e:67:bd:29:97:fe:78:d1:b8:b2:51:c3:3b:d5:
                    8c:f2:a6:ac:6a:d4:67:d4:24:dc:09:4d:f2:87:64:
                    50:cd:4e:fc:5b:02:49:e0:d0:49:f6:68:b5:1d:b2:
                    22:72:f1:b4:0c:14:b3:d9:b1:cc:26:d3:eb:02:b1:
                    0d:cf:f1:6b:9e:ce:0a:d1:7f:c5:a5:98:14:85:40:
                    fc:51:cc:cf:0f:e0:58:6f:b7:e9:f0:b5:47:e5:2b:
                    5c:f4:d3:27:86:ef:93:3a:05:11:a2:31:eb:74:56:
                    37:97:b0:46:14:36:e3:f2:87:b1:32:15:07:f4:50:
                    e5:89:7c:47:34:53:df:e5:b7:22:40:35:a7:3c:94:
                    93:1b:6e:fd:e8:b7:ac:50:4a:7c:2a:23:33:a5:ab:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:A7:D4:5A:C0:C3:DA:03:64:5C:B7:11:F2:42:51:1F:45:19:98
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e6:76:8b:ea:c5:70:ce:b6:de:61:3d:ac:a6:d0:5d:50:e4:
         03:09:92:62:e3:48:98:12:d9:cc:e2:a3:3f:07:34:8b:43:b3:
         94:d5:c6:53:e9:20:04:23:67:33:84:f7:6a:fd:7f:f5:14:c6:
         f0:6c:45:96:e2:d1:a6:92:74:a0:09:73:f8:d2:ed:2c:ca:02:
         26:28:f2:af:46:18:87:1e:8b:17:6c:b0:d7:b2:e8:1f:cc:75:
         19:c3:60:06:21:71:5e:81:c1:b9:5d:6a:c6:f5:fb:b7:c3:8b:
         62:78:9f:ae:4d:5a:c3:39:80:bb:02:aa:93:5b:1b:cc:be:2d:
         ed:62:73:60:61:fe:57:ab:5a:48:3a:c0:a4:22:ee:76:61:a8:
         ce:1c:29:aa:eb:fb:c8:3d:9b:4d:c8:8c:84:dd:7b:cb:e5:0b:
         2f:9d:25:0e:35:cc:8f:9a:32:43:2e:51:8d:75:4a:5e:3d:4d:
         43:9c:5c:ae:4a:e3:fa:82:eb:94:84:2c:a6:b4:35:60:2d:0c:
         88:70:4e:5a:da:02:40:64:9a:62:96:95:aa:bd:18:ea:8d:d9:
         8c:5a:93:58:6a:ae:5f:f2:36:63:92:bc:01:18:5d:4b:1b:22:
         ec:e0:87:a8:6c:87:ec:6c:45:91:88:3f:7b:5f:36:fa:b1:55:
         c1:50:9c:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4
NDQyMzY2NzkwHhcNMjYwODI2MTYwMDI2WhcNMjYwOTAyMTYwMDI2WjAYMRYwFAYD
VQQDEw02YThmMGQ5Yi01ZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDwmZOEQg2Kd4b96t0R5pe2UwdCfMyDDrG/2w/XZRiWiG8xy4kaTluK/Top7
3jzi13UafCU2C75Ucxl1xFsfnlG1Syxdt/609TMVSdOYY7q3bqxnIC6DUDi5uy4L
gHHSWpQlKgzWxpBKbme9KZf+eNG4slHDO9WM8qasatRn1CTcCU3yh2RQzU78WwJJ
4NBJ9mi1HbIicvG0DBSz2bHMJtPrArENz/Frns4K0X/FpZgUhUD8UczPD+BYb7fp
8LVH5Stc9NMnhu+TOgURojHrdFY3l7BGFDbj8oexMhUH9FDliXxHNFPf5bciQDWn
PJSTG2796LesUEp8KiMzpavlaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBXp9Ra
wMPaA2RctxHyQlEfRRmYMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG
NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm
MjRUZU8ybVBaMjZFUWpabmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALOZ2i+rFcM623mE9rKbQXVDkAwmSYuNImBLZzOKjPwc0i0OzlNXGU+kgBCNn
M4T3av1/9RTG8GxFluLRppJ0oAlz+NLtLMoCJijyr0YYhx6LF2yw17LoH8x1GcNg
BiFxXoHBuV1qxvX7t8OLYnifrk1awzmAuwKqk1sbzL4t7WJzYGH+V6taSDrApCLu
dmGozhwpquv7yD2bTciMhN17y+ULL50lDjXMj5oyQy5RjXVKXj1NQ5xcrkrj+oLr
lIQsprQ1YC0MiHBOWtoCQGSaYpaVqr0Y6o3ZjFqTWGquX/I2Y5K8ARhdSxsi7OCH
qGyH7GxFkYg/e182+rFVwVCcnQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:07:46 2026 by rpki-client