Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          8qNhTA8IgoEuyAaCPDYObAdCAoZ37jW235eRGNHZrj0=
Subject key identifier:   52:D0:18:0E:D6:14:F3:DC:09:ED:D4:60:4C:F9:D1:33:0E:61:DB:66
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          23D2
Signing time:             Thu 22 Oct 2026 15:54:55 +0000
Manifest this update:     Thu 22 Oct 2026 15:54:55 +0000
Manifest next update:     Thu 29 Oct 2026 15:54:55 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: E8RArx18XMbDIjyukEch/H2zJR2uIYb7abxunEBw5r0=)
                          2: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q=)
                          3: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=)
                          4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: v07Pprp9lf3TRtO+9xznb1E1Na5Oj+IgXg/hHlg/17g=)
                          5: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM=)
                          6: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: kGjjVFLeftJ4iWIxg8Q1sbQUrd0A5MgOTgnq5zEqwbE=)
                          7: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: zQF+T1/pOLzDuzv2qEa0T9BdUI0ppH7RANttefdBlH0=)
                          8: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: EedI26Sx2994grPUcSKFjJ1j0cv3YZqLAHCyNSdQVkI=)
                          9: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=)
                          10: BA007060162D11EEB79F703CC4F9AE02.roa (hash: yhtnb/OOA/wXXD8maZO8n4AsJMc9HBQT2aQqAHCJfOQ=)
                          11: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: avBOKsbWyKUECTQ8CZJG8sV4Ncdv4AJ8R93izTNrcYY=)
                          12: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Ij+zJZ5CkWG7jXCiWRJZjJ77nuWw4Opj7SW89egSHU=)
                          13: 94C16496222811EF99153155C4F9AE02.roa (hash: rblIsywW3HeGBV9SYXZ48ueArKjs04dIk6+AvNganu0=)
                          14: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak=)
                          15: BC0BEA7097A711F1B52646145711F970.roa (hash: FK0wm6fnHM7OiT7uO89KpKgA8A61+DR31lbgj+sRWdQ=)
                          16: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw=)
                          17: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=)
                          18: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=)
                          19: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=)
                          20: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: X8qoiiScFa9eVjABlsfQ/cyRc8nDS1tlAxe/2JVazO0=)
                          21: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: F/3d2MdmWAQWy2/KkyrR/TKf6kjUWhedoqi+Mnvoopg=)
                          22: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: CjGoyKN0HrGuZB1eGY3YN8uhsmzlKryekK6FbSvP2zk=)
                          23: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=)
                          24: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM=)
                          25: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=)
                          26: EA731210895D11F193C4BB306611F970.roa (hash: LhIix3MqgGCa2w3+feEZuut9yVtkWwXiLFodoDN7Li8=)
                          27: D9DF7F88C76A11F1ADC885333511F970.roa (hash: ENvkh2uJkUa298NQ33xvuz9yt/DWysnnec0iL9Catis=)
                          28: E2174D9E525211F1980710C0B7833773.roa (hash: GVFs6VYrJH2axU/RPQFKKSwevv3jFE1gWqL31n3FQw0=)
                          29: E1B38BC080C811F181550F2C98A30FBC.roa (hash: WRADBx/SaXJk7j6yqZeKGAjOAQr20gzsAPuwRVAsDf4=)
                          30: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Ifg7lXJOQP+18o4CZaAo7GSgxBafrvA0XUWHav5Uo0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 15:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9986 (0x2702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Oct 22 15:54:55 2026 GMT
            Not After : Oct 29 15:54:55 2026 GMT
        Subject: CN=6ada31cf-1161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:d5:0b:69:56:51:de:dd:a3:01:fd:58:49:
                    d6:d8:9d:90:e6:40:f1:20:f7:2e:1c:0c:6f:ae:2e:
                    0e:3b:1b:22:3c:e7:44:1d:9a:cb:89:47:0a:43:b3:
                    e3:fb:39:29:fd:7d:b0:9b:f8:8f:5a:3f:04:92:c9:
                    21:45:d9:9f:27:f2:bf:e6:0e:29:b5:69:25:3d:2e:
                    94:67:8e:e8:fe:a7:99:13:37:5b:7e:2c:85:49:62:
                    64:9b:e9:fb:b6:90:ee:29:60:a8:29:d3:0d:93:7c:
                    37:94:62:a7:3f:be:4a:ae:3f:6b:4b:48:f0:27:89:
                    3b:b8:af:77:6d:8f:10:7d:8c:8c:d2:6e:27:47:73:
                    75:68:25:a2:42:cf:39:a9:4a:64:2b:07:93:95:b3:
                    3a:18:05:25:6a:5a:b6:19:5e:d8:40:7f:37:4b:46:
                    06:b1:fe:ca:a5:09:1f:e2:cd:53:c4:5c:29:58:96:
                    fd:6b:2a:d2:36:da:46:b0:a3:7d:39:22:45:35:07:
                    4c:a9:0a:2a:97:09:bf:c5:39:ae:17:cc:6d:5a:a1:
                    63:20:94:fc:1f:d9:0d:ce:41:be:ee:5e:0a:08:b9:
                    05:5b:66:37:ba:ff:95:29:80:37:72:47:41:50:1d:
                    b6:4d:7c:28:28:93:cf:40:0a:e8:1e:a4:9b:9b:f8:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:18:0E:D6:14:F3:DC:09:ED:D4:60:4C:F9:D1:33:0E:61:DB:66
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:49:5b:d9:90:66:27:e2:29:67:44:2c:ea:e1:0b:ea:f3:27:
         44:e6:e3:bf:e3:a4:2b:8e:17:46:ba:14:96:d6:75:d7:ff:0e:
         c2:32:d6:1a:bf:7b:7e:dd:1d:af:c3:aa:ff:49:0d:c7:47:fc:
         68:f7:d6:72:c7:12:65:ba:2a:85:fb:16:7d:af:f3:22:b3:86:
         d5:81:3d:73:2a:6c:66:05:d4:5a:fa:0e:f6:1e:b2:ee:9f:90:
         1c:f0:a0:13:4d:31:17:92:08:27:66:10:67:67:52:51:03:4b:
         bc:b9:71:40:73:84:ad:23:67:6a:ae:5f:81:bb:82:ce:2d:3a:
         49:df:6e:c2:53:bc:a3:82:67:d3:93:d6:cc:c2:c9:a4:04:3c:
         75:95:47:8d:d3:c5:ea:b3:b2:e0:cd:a2:3e:e9:4d:a8:a9:b2:
         ca:83:30:3c:c2:eb:16:03:e9:a8:33:d6:38:4a:86:d0:00:ae:
         62:82:22:18:b4:18:e4:8c:b2:18:a9:e7:5a:51:b8:87:3d:5d:
         94:95:91:65:15:05:02:7c:92:a4:d5:1a:87:a4:6f:13:81:4a:
         29:f2:90:24:3d:22:91:58:c3:e7:08:b9:6c:e4:93:13:e4:25:
         cb:80:13:c9:b5:f6:33:10:32:9e:57:89:32:24:f9:fd:9e:63:
         ff:59:8a:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYxMDIyMTU1NDU1WhcNMjYxMDI5MTU1NDU1WjAYMRYwFAYD
VQQDEw02YWRhMzFjZi0xMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUfVC2lWUd7dowH9WEnW2J2Q5kDxIPcuHAxvri4OOxsiPOdEHZrLiUcKQ7Pj
+zkp/X2wm/iPWj8EkskhRdmfJ/K/5g4ptWklPS6UZ47o/qeZEzdbfiyFSWJkm+n7
tpDuKWCoKdMNk3w3lGKnP75Krj9rS0jwJ4k7uK93bY8QfYyM0m4nR3N1aCWiQs85
qUpkKweTlbM6GAUlalq2GV7YQH83S0YGsf7KpQkf4s1TxFwpWJb9ayrSNtpGsKN9
OSJFNQdMqQoqlwm/xTmuF8xtWqFjIJT8H9kNzkG+7l4KCLkFW2Y3uv+VKYA3ckdB
UB22TXwoKJPPQAroHqSbm/idpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLQGA7W
FPPcCe3UYEz50TMOYdtmMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL
ejVRS0lveEx3Sk80c2tBQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv0lb2ZBmJ+IpZ0Qs6uEL6vMnRObjv+OkK44XRroUltZ11/8OwjLWGr97ft0d
r8Oq/0kNx0f8aPfWcscSZboqhfsWfa/zIrOG1YE9cypsZgXUWvoO9h6y7p+QHPCg
E00xF5IIJ2YQZ2dSUQNLvLlxQHOErSNnaq5fgbuCzi06Sd9uwlO8o4Jn05PWzMLJ
pAQ8dZVHjdPF6rOy4M2iPulNqKmyyoMwPMLrFgPpqDPWOEqG0ACuYoIiGLQY5Iyy
GKnnWlG4hz1dlJWRZRUFAnySpNUah6RvE4FKKfKQJD0ikVjD5wi5bOSTE+Qly4AT
ybX2MxAynleJMiT5/Z5j/1mKJg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 09:48:17 2026 by rpki-client