Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
File:                     NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json)
Hash identifier:          wGQ9289nDmQmIt4IQ+GEjuJlRqVMJSpG21film5kAns=
Subject key identifier:   65:FD:D3:FE:02:55:A7:D1:AF:41:08:2D:2A:E6:06:B2:FD:EA:7F:E1
Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
Certificate issuer:       /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
Manifest number:          87
Signing time:             Wed 19 Aug 2026 08:18:14 +0000
Manifest this update:     Wed 19 Aug 2026 08:18:14 +0000
Manifest next update:     Wed 26 Aug 2026 08:18:14 +0000
Files and hashes:         1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: 44bTAC4xjAM+ufTtE0plBCDlbMpvYAEOsj3So18j+0A=)
                          2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: zPwsBxrk2TWYKMwX9feT4glmgUpbLrsFWyQ2jB0oPio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
        Validity
            Not Before: Aug 19 08:18:14 2026 GMT
            Not After : Aug 26 08:18:14 2026 GMT
        Subject: CN=6a8566c6-8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:73:a5:54:1d:04:91:23:68:19:83:d5:fe:
                    60:5f:e8:34:bd:16:71:80:67:db:da:bc:8e:34:8d:
                    09:d0:f2:7c:0d:16:10:20:b8:17:98:ae:9e:b7:04:
                    6b:51:dd:63:44:dd:76:c0:59:ce:95:28:cf:3f:58:
                    86:75:7d:91:68:b2:92:d8:98:9b:fa:09:f4:93:aa:
                    0a:0f:d0:bd:88:e0:52:fc:96:61:87:0d:14:a1:92:
                    54:b3:54:6e:40:af:01:c2:e9:d5:cf:de:19:6b:9b:
                    35:9e:c4:62:fc:61:19:55:3f:b6:2a:c6:76:92:e3:
                    ba:e5:7a:c9:23:1b:49:3d:f7:98:e3:c1:c9:85:18:
                    09:93:a0:01:17:13:57:ee:8a:02:21:10:08:69:2d:
                    76:b5:17:30:55:5e:a2:34:b7:a0:7c:bf:d8:37:fd:
                    a0:cc:4e:98:ec:7d:1c:c5:56:ad:b3:bd:f1:f2:d4:
                    20:16:04:b0:ae:5a:32:a1:e0:01:13:65:20:98:16:
                    dd:79:40:73:f0:cb:4e:61:4d:78:50:05:52:e3:fc:
                    f8:b7:aa:7d:f4:40:1a:68:ef:82:07:f4:b7:4c:69:
                    dc:af:32:7d:1a:f4:6b:e6:ed:4c:16:1d:35:b8:70:
                    8c:81:bd:22:89:6f:28:1e:4d:2a:cf:ff:84:98:53:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FD:D3:FE:02:55:A7:D1:AF:41:08:2D:2A:E6:06:B2:FD:EA:7F:E1
            X509v3 Authority Key Identifier:
                keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:52:14:91:f1:dd:5e:03:74:cc:08:0b:83:18:df:d9:d6:
         e7:fe:de:72:37:ed:51:04:92:11:1b:79:ca:8b:51:aa:53:37:
         b2:f3:13:37:ae:f8:cc:97:b3:60:9e:d0:30:7b:85:9c:d6:a7:
         ec:71:30:37:86:a5:3c:2b:ef:ca:86:d2:16:c1:7f:38:8e:15:
         a3:e6:10:46:18:af:b3:44:c6:f0:fb:44:b9:88:90:3d:08:d0:
         3e:56:70:57:e4:6c:e3:bc:e4:17:21:9f:ea:9a:63:05:3d:03:
         18:c6:ff:ff:48:86:fe:7d:f3:f0:78:bd:2e:0f:01:35:aa:a2:
         9a:1e:ef:69:be:bc:f7:3b:cd:31:df:31:ee:52:44:68:dd:4c:
         7f:12:fa:d6:a2:62:e2:62:7c:0b:b9:78:60:15:fe:70:6c:87:
         1c:fc:6c:35:df:8b:54:1d:37:f9:0e:fe:8f:cf:ed:bd:9a:ca:
         79:db:47:18:14:01:8d:f3:13:f3:34:c6:14:74:8c:a1:9f:e3:
         02:43:22:b4:7d:d8:40:b0:0c:2b:3f:b9:33:ad:5e:fa:9e:0e:
         2f:de:1e:15:75:d2:89:15:0e:eb:01:d1:df:83:4a:25:dc:91:
         a3:6e:fc:d0:63:ec:1c:5a:d6:be:da:73:ac:ca:a7:71:dc:cb:
         5e:01:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:56:35 2026 by rpki-client