Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          YYzgR0QmnknLlAZm3xNYBViygbhkJnCNutBS8zWQMt0=
Subject key identifier:   EB:97:A4:D2:E3:46:20:44:58:6D:9E:B3:E6:73:2C:7F:DD:87:9C:56
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          2394
Signing time:             Mon 20 Jul 2026 16:17:31 +0000
Manifest this update:     Mon 20 Jul 2026 16:17:30 +0000
Manifest next update:     Mon 27 Jul 2026 16:17:30 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: yny+kd5r5NJUp8II1FAEHQgRtNr4CCqGosD1/+ITmnU=)
                          2: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: kGjjVFLeftJ4iWIxg8Q1sbQUrd0A5MgOTgnq5zEqwbE=)
                          3: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=)
                          4: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=)
                          5: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Ifg7lXJOQP+18o4CZaAo7GSgxBafrvA0XUWHav5Uo0c=)
                          6: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: EedI26Sx2994grPUcSKFjJ1j0cv3YZqLAHCyNSdQVkI=)
                          7: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM=)
                          8: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=)
                          9: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=)
                          10: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=)
                          11: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM=)
                          12: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: CjGoyKN0HrGuZB1eGY3YN8uhsmzlKryekK6FbSvP2zk=)
                          13: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: F/3d2MdmWAQWy2/KkyrR/TKf6kjUWhedoqi+Mnvoopg=)
                          14: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: zQF+T1/pOLzDuzv2qEa0T9BdUI0ppH7RANttefdBlH0=)
                          15: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q=)
                          16: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: avBOKsbWyKUECTQ8CZJG8sV4Ncdv4AJ8R93izTNrcYY=)
                          17: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: X8qoiiScFa9eVjABlsfQ/cyRc8nDS1tlAxe/2JVazO0=)
                          18: CE013B0E80C811F198040B2C98A30FBC.roa (hash: Ar17Y2pgM2IRJ1et+drWpyUgBGRbm+nUgjvhgOIWiGw=)
                          19: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=)
                          20: E1B38BC080C811F181550F2C98A30FBC.roa (hash: WRADBx/SaXJk7j6yqZeKGAjOAQr20gzsAPuwRVAsDf4=)
                          21: BA007060162D11EEB79F703CC4F9AE02.roa (hash: yhtnb/OOA/wXXD8maZO8n4AsJMc9HBQT2aQqAHCJfOQ=)
                          22: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw=)
                          23: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: v07Pprp9lf3TRtO+9xznb1E1Na5Oj+IgXg/hHlg/17g=)
                          24: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=)
                          25: 229B83C4685811F180A7311C9C47A888.roa (hash: ZDnamRNvi7dksMJwyc/mAFv1Y9uc7PCP3+Gsifgq/jo=)
                          26: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Ij+zJZ5CkWG7jXCiWRJZjJ77nuWw4Opj7SW89egSHU=)
                          27: E2174D9E525211F1980710C0B7833773.roa (hash: UXHBEi6kZUQ14KonHrPxrJtLjBz35nVjc3YNK54R6Qw=)
                          28: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: 9nyxv5vDqtD62E6UbjNswDwUiNqVOWE9KMQNkQhnhtU=)
                          29: 94C16496222811EF99153155C4F9AE02.roa (hash: rblIsywW3HeGBV9SYXZ48ueArKjs04dIk6+AvNganu0=)
                          30: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9907 (0x26b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:17:30 2026 GMT
            Not After : Jul 27 16:17:30 2026 GMT
        Subject: CN=6a5e4a1b-4cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:a4:73:0e:17:23:13:e0:90:ae:ea:b7:c6:
                    8d:0b:92:10:ff:c6:96:76:1f:8c:39:fd:f3:6c:cf:
                    e8:51:94:35:bd:92:2e:d2:0d:76:4b:03:62:02:01:
                    63:22:e9:46:f7:f5:17:8e:f8:e2:9e:a5:f5:3d:92:
                    0e:1e:ef:c6:4d:07:dc:b2:aa:d8:a7:91:e5:f9:12:
                    a2:e0:ea:24:f3:b2:e4:eb:49:5e:f3:ee:56:a8:6f:
                    04:79:3f:f7:90:0f:59:45:20:e8:b7:1d:09:a5:9c:
                    ac:0d:5f:c2:58:5e:70:ee:ed:3d:9f:fb:bd:21:59:
                    ea:31:8f:75:55:5d:b4:ee:6c:2b:93:f8:68:da:77:
                    1d:6c:57:a5:23:3e:56:85:ce:6f:c0:31:9a:4c:b0:
                    be:c1:95:a1:be:2e:d3:55:76:91:65:ab:6d:b2:58:
                    f7:7e:cb:37:2f:58:ce:d0:a7:eb:c0:d1:a8:db:1a:
                    2a:50:75:2b:76:b2:87:25:d1:0d:50:91:a9:33:66:
                    bf:9f:06:32:63:66:d0:83:50:02:66:cb:59:55:a8:
                    80:07:88:16:e2:64:f6:e3:c3:2e:74:3b:0d:6d:66:
                    c7:b5:02:2d:ef:52:ef:a9:ad:aa:05:00:a3:28:e0:
                    43:d0:c5:fe:ce:cb:7a:25:8f:f8:0b:18:61:72:b0:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:A4:D2:E3:46:20:44:58:6D:9E:B3:E6:73:2C:7F:DD:87:9C:56
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:15:e0:82:d4:2c:7b:2d:5c:29:1d:66:21:97:7c:59:72:
         fb:5a:97:d9:a1:69:b9:83:87:cf:a5:9f:13:46:8f:38:5a:1c:
         b1:0e:66:ad:88:3b:77:17:9f:52:cc:57:49:85:e7:64:24:0a:
         e7:6d:41:eb:7f:c5:04:eb:03:c8:51:a3:31:79:c2:7c:62:37:
         91:21:11:8f:33:95:98:cc:62:59:e3:db:58:49:17:7a:1c:3a:
         88:de:a7:8e:51:45:28:c7:23:92:dd:aa:50:be:81:9b:b6:9a:
         7a:f1:88:02:7f:17:21:41:7c:06:35:ff:9f:14:c8:65:65:6f:
         c4:94:4b:cf:d7:22:84:54:9d:82:7f:e4:bb:42:3b:f4:f0:99:
         06:ed:9d:03:13:20:b1:6a:83:4b:a8:da:0f:18:83:a7:90:e8:
         9c:ad:6a:73:ae:12:87:f9:c1:37:e5:44:98:3d:0c:8a:3e:e0:
         63:ef:dc:a2:1b:04:3d:2b:3a:6f:12:1e:14:a7:9c:51:31:81:
         c2:92:4b:22:d4:b0:07:90:69:5a:06:40:e5:70:f5:d6:d8:51:
         ff:61:51:2b:ad:0b:77:c2:6d:c7:38:b0:1f:b7:ff:85:ba:a7:
         b7:2d:5b:9e:b2:d4:3d:71:20:10:9d:e3:7a:c0:af:56:81:96:
         c4:96:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:20:53 2026 by rpki-client