Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File:                     N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier:          0Je6MvIOELwCpE++yR7A+kmONMa2pCw+pEmwPSAe5Ns=
Subject key identifier:   CE:02:70:F6:05:9B:13:E7:32:0A:3A:19:C2:94:8C:A5:50:E5:93:71
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       1A6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number:          1A4C
Signing time:             Fri 04 Sep 2026 16:17:51 +0000
Manifest this update:     Fri 04 Sep 2026 16:17:51 +0000
Manifest next update:     Fri 11 Sep 2026 16:17:51 +0000
Files and hashes:         1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: h8J8OB5zX3ro5tFWdIn/Ov7hdibivJc6xzzUZTdfijE=)
                          2: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
                          3: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
                          4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6767 (0x1a6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Sep  4 16:17:51 2026 GMT
            Not After : Sep 11 16:17:51 2026 GMT
        Subject: CN=6a9aef2f-a71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:73:39:46:f0:88:f1:89:f3:45:4e:7a:8c:
                    bf:d0:6c:72:ee:c9:33:6f:34:d5:f2:a0:82:51:8d:
                    95:58:d7:91:aa:e6:22:4a:fd:93:9b:4c:ba:b4:ff:
                    0c:6e:d7:60:79:55:a0:9b:7b:27:c2:fd:75:a6:31:
                    c4:cb:3b:91:4e:2b:05:9d:cc:11:9b:92:5b:fc:46:
                    11:44:82:5f:76:d3:8f:9c:03:e5:73:48:ab:7a:6f:
                    d5:b7:28:1e:fe:59:5f:ae:d9:64:61:c4:e3:49:50:
                    40:3d:1d:f1:ef:0a:1f:d3:56:31:09:e3:6a:fe:04:
                    15:0b:99:66:e6:9e:88:6b:4d:26:72:ad:09:33:16:
                    e3:33:27:5c:29:0a:f2:18:53:d2:74:63:31:d8:30:
                    4e:6a:e6:5b:76:80:70:1e:18:60:bf:21:96:4e:af:
                    09:e9:a2:38:72:bd:c0:6f:a1:4f:ef:fe:9a:d0:55:
                    fa:b3:6e:46:0f:84:c0:d0:b8:59:48:df:a8:91:69:
                    79:78:7e:f7:0b:e4:a2:e3:1d:6d:ea:7d:ae:9c:81:
                    40:08:6a:76:cd:3c:f0:09:5a:27:54:b6:47:ed:22:
                    c2:76:7f:5d:11:a4:a0:8e:0c:93:09:16:b2:24:f4:
                    81:7c:9b:20:12:74:5a:67:a3:58:db:92:1b:bb:63:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:70:F6:05:9B:13:E7:32:0A:3A:19:C2:94:8C:A5:50:E5:93:71
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:8f:75:eb:c4:59:4c:da:df:68:fe:09:4a:c8:69:b0:f9:
         14:b1:cb:5a:ff:e1:fd:07:b6:43:71:58:db:d0:ce:7f:a0:d6:
         ec:8a:8c:dd:70:bf:2c:30:c8:79:6a:0e:a3:d5:24:1c:29:e2:
         09:f6:c3:1f:ad:2d:9a:0d:f7:13:cd:ba:92:40:25:1f:a4:00:
         db:ad:ff:6a:2e:2a:89:c6:95:a4:08:05:e2:fb:4f:3b:c5:cb:
         7b:fd:58:49:8a:3b:5a:6d:f4:4f:19:80:ae:fa:9f:44:2c:f1:
         cb:ed:6c:9e:6f:29:8b:84:b1:13:d0:33:b1:1d:a0:95:73:0e:
         0f:a2:51:60:60:8b:14:ac:99:25:9f:c4:50:8a:68:c9:63:d5:
         2e:f9:bd:2c:b0:cf:0b:e2:a6:56:02:00:d7:ac:ba:0c:35:e8:
         4e:5f:c6:20:37:07:02:37:b9:60:96:c7:1e:4e:69:c0:06:20:
         0f:a9:c3:f4:96:79:95:6a:20:e9:55:0b:55:a2:de:cf:f2:d7:
         2f:6e:b2:6e:08:89:46:df:72:61:3c:25:82:22:b6:ad:f0:0b:
         e6:6a:21:f7:77:38:61:73:19:78:40:0a:0a:58:73:31:a8:f4:
         98:41:a3:c0:ba:03:6f:19:e9:13:31:55:ae:52:b8:a4:93:94:
         63:8e:fb:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew
MzVFMjBERUEwHhcNMjYwOTA0MTYxNzUxWhcNMjYwOTExMTYxNzUxWjAYMRYwFAYD
VQQDEw02YTlhZWYyZi1hNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtvRzOUbwiPGJ80VOeoy/0Gxy7skzbzTV8qCCUY2VWNeRquYiSv2Tm0y6tP8M
btdgeVWgm3snwv11pjHEyzuRTisFncwRm5Jb/EYRRIJfdtOPnAPlc0irem/Vtyge
/llfrtlkYcTjSVBAPR3x7wof01YxCeNq/gQVC5lm5p6Ia00mcq0JMxbjMydcKQry
GFPSdGMx2DBOauZbdoBwHhhgvyGWTq8J6aI4cr3Ab6FP7/6a0FX6s25GD4TA0LhZ
SN+okWl5eH73C+Si4x1t6n2unIFACGp2zTzwCVonVLZH7SLCdn9dEaSgjgyTCRay
JPSBfJsgEnRaZ6NY25Ibu2MGcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4CcPYF
mxPnMgo6GcKUjKVQ5ZNxMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz
NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx
Z3RDLUJNYlllam9EWGlEZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD3CPdevEWUza32j+CUrIabD5FLHLWv/h/Qe2Q3FY29DOf6DW7IqM3XC/LDDI
eWoOo9UkHCniCfbDH60tmg33E826kkAlH6QA263/ai4qicaVpAgF4vtPO8XLe/1Y
SYo7Wm30TxmArvqfRCzxy+1snm8pi4SxE9AzsR2glXMOD6JRYGCLFKyZJZ/EUIpo
yWPVLvm9LLDPC+KmVgIA16y6DDXoTl/GIDcHAje5YJbHHk5pwAYgD6nD9JZ5lWog
6VULVaLez/LXL26ybgiJRt9yYTwlgiK2rfAL5moh93c4YXMZeEAKClhzMaj0mEGj
wLoDbxnpEzFVrlK4pJOUY4771A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:41:08 2026 by rpki-client