Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
File:                     NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json)
Hash identifier:          TrVMBjLGnCPVbSxE6ysf+CYbYfOdnZmovmxyC7qAHhk=
Subject key identifier:   C0:ED:A5:07:C5:18:DB:72:5D:22:A2:A5:23:9B:7A:46:08:19:59:8A
Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
Certificate issuer:       /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
Manifest number:          A1
Signing time:             Fri 09 Oct 2026 07:59:21 +0000
Manifest this update:     Fri 09 Oct 2026 07:59:20 +0000
Manifest next update:     Fri 16 Oct 2026 07:59:20 +0000
Files and hashes:         1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: 80q1eORyUd/ZwHuI48oe3z6ZpIQbN3Ih1gsbwFTPitY=)
                          2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: zPwsBxrk2TWYKMwX9feT4glmgUpbLrsFWyQ2jB0oPio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
        Validity
            Not Before: Oct  9 07:59:20 2026 GMT
            Not After : Oct 16 07:59:20 2026 GMT
        Subject: CN=6ac89ed9-2d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:36:36:2c:c4:58:76:39:ef:33:31:05:ab:dd:
                    fc:fe:13:5f:8c:eb:4d:c0:56:62:3a:cf:0d:ae:5b:
                    ca:93:f1:8f:e6:ef:aa:09:04:d5:78:4c:db:35:3a:
                    11:dd:e0:f0:73:23:b0:bf:53:99:8c:d4:66:0e:73:
                    f2:4f:12:41:8b:64:ea:2d:15:b3:c3:8d:44:ac:77:
                    bc:4a:02:02:1b:63:d5:6b:a0:fd:b3:16:c4:8a:83:
                    57:60:63:d2:c5:ff:89:f5:32:17:01:97:60:3e:31:
                    6b:ab:b4:f3:07:29:b1:ac:16:90:e0:04:06:92:ee:
                    dc:f6:a2:a3:f6:8a:1e:d6:6d:6c:8a:8f:4c:0e:0b:
                    6d:4e:80:fb:d0:d5:98:3b:4b:14:2a:2f:0c:06:1f:
                    7f:73:cc:f8:7b:3d:64:6a:9f:96:3e:22:67:4d:5e:
                    e9:91:cf:1c:02:b8:f6:ff:44:be:28:cd:b3:a7:fb:
                    d6:fd:41:ee:ef:d0:a9:ec:5c:fb:69:fc:a6:e4:30:
                    1c:54:32:2e:c2:f3:dc:28:e7:4b:be:db:ae:80:8d:
                    6b:15:d3:fb:41:38:a0:29:a1:66:13:97:52:2c:92:
                    1d:dc:91:a3:fe:13:a6:f2:ef:b9:e3:97:eb:d9:0c:
                    6e:59:13:32:5d:5a:6d:3e:0f:a4:6d:e2:bf:4c:4c:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:A5:07:C5:18:DB:72:5D:22:A2:A5:23:9B:7A:46:08:19:59:8A
            X509v3 Authority Key Identifier:
                keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:90:19:a4:bb:2c:66:64:af:b2:3f:30:63:c1:d5:a9:63:
         72:54:88:6b:98:8b:2c:5c:03:af:b5:dc:6f:03:2f:b1:34:46:
         cb:96:89:01:b1:14:17:02:b0:9c:8c:5f:a0:89:79:5f:2e:28:
         bd:d6:b4:eb:5a:3a:14:3d:01:ed:90:7a:a0:a0:4c:5c:da:29:
         2a:32:0e:1a:ef:00:a1:64:38:da:bf:cc:aa:45:cb:5b:75:8a:
         d9:a1:af:a0:60:85:f5:e6:f9:c8:63:6b:c7:dd:b9:49:12:84:
         69:e1:20:c5:ce:3e:12:4d:e4:d3:8e:a2:60:37:bd:56:15:28:
         8f:87:31:3f:1f:ea:5e:11:e5:56:6b:e2:43:7b:70:0b:6b:39:
         18:3b:d6:12:19:55:43:9a:20:a5:59:21:56:bf:8f:05:f4:81:
         5e:f0:32:1e:33:63:67:a3:0e:5e:f6:67:59:cf:ec:a2:60:f4:
         91:0e:51:e1:ec:14:53:32:79:3e:6a:ef:30:be:19:86:ea:63:
         12:b2:f3:a5:57:c6:ca:1b:8e:e5:9b:fc:7c:f6:e8:09:04:df:
         b7:03:e6:f5:26:61:ab:c8:6b:8c:3d:85:04:c3:83:45:e2:a6:
         1d:7a:6e:a0:3d:72:70:d7:ad:cd:02:25:75:6e:2b:3c:0c:bc:
         a8:70:df:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFMDExMTAvBgNVBAUTKDM0OEI1NENGRjc5OTY1RTIxQjJEQkFCOTlGMjEwMUUz
MUE1NjBFOUIwHhcNMjYxMDA5MDc1OTIwWhcNMjYxMDE2MDc1OTIwWjAYMRYwFAYD
VQQDEw02YWM4OWVkOS0yZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6TY2LMRYdjnvMzEFq938/hNfjOtNwFZiOs8NrlvKk/GP5u+qCQTVeEzbNToR
3eDwcyOwv1OZjNRmDnPyTxJBi2TqLRWzw41ErHe8SgICG2PVa6D9sxbEioNXYGPS
xf+J9TIXAZdgPjFrq7TzBymxrBaQ4AQGku7c9qKj9ooe1m1sio9MDgttToD70NWY
O0sUKi8MBh9/c8z4ez1kap+WPiJnTV7pkc8cArj2/0S+KM2zp/vW/UHu79Cp7Fz7
afym5DAcVDIuwvPcKOdLvtuugI1rFdP7QTigKaFmE5dSLJId3JGj/hOm8u+545fr
2QxuWRMyXVptPg+kbeK/TEyu4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDtpQfF
GNtyXSKipSObekYIGVmKMB8GA1UdIwQYMBaAFDSLVM/3mWXiGy26uZ8hAeMaVg6b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwMS80NjkyN0YxNENG
NTkxMUYwODVCQkREMTFDNEY5QUUwMi9OSXRVel9lWlplSWJMYnE1bnlFQjR4cFdE
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05JdFV6X2VaWmVJYkxicTVueUVCNHhwV0Rwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUUwMS80NjkyN0YxNENGNTkxMUYwODVCQkREMTFDNEY5QUUwMi9OSXRVel9lWlpl
SWJMYnE1bnlFQjR4cFdEcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO4qQGaS7LGZkr7I/MGPB1aljclSIa5iLLFwDr7XcbwMvsTRGy5aJAbEUFwKw
nIxfoIl5Xy4ovda061o6FD0B7ZB6oKBMXNopKjIOGu8AoWQ42r/MqkXLW3WK2aGv
oGCF9eb5yGNrx925SRKEaeEgxc4+Ek3k046iYDe9VhUoj4cxPx/qXhHlVmviQ3tw
C2s5GDvWEhlVQ5ogpVkhVr+PBfSBXvAyHjNjZ6MOXvZnWc/somD0kQ5R4ewUUzJ5
PmrvML4ZhupjErLzpVfGyhuO5Zv8fPboCQTftwPm9SZhq8hrjD2FBMODReKmHXpu
oD1ycNetzQIldW4rPAy8qHDfuA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:50 2026 by rpki-client