Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File:                     Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier:          hvvP9rqRtQpWwju4kwEyHFR6DGi5Xtu2KuDl/Op/UlU=
Subject key identifier:   1B:56:4B:EC:F7:B8:DD:43:D9:BD:FD:4B:1F:BB:FC:DD:60:CD:3F:E7
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer:       /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial:       09E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number:          0A6E
Signing time:             Tue 18 Aug 2026 20:11:04 +0000
Manifest this update:     Tue 18 Aug 2026 20:11:04 +0000
Manifest next update:     Tue 25 Aug 2026 20:11:04 +0000
Files and hashes:         1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: ItaSmFTQCsinAc48nnwwvlApSIvtiwtAIgSowUK24Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
        Validity
            Not Before: Aug 18 20:11:04 2026 GMT
            Not After : Aug 25 20:11:04 2026 GMT
        Subject: CN=6a84bc58-897c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:4a:fd:29:6c:84:29:01:bb:d8:fe:42:46:
                    28:83:45:4d:f9:75:57:3a:0e:2c:54:0d:c3:41:b4:
                    2e:f6:8f:a3:0e:b6:4c:2e:f3:76:41:2c:1b:3f:a0:
                    ac:51:c9:47:1b:79:e5:39:db:64:2a:16:13:b6:10:
                    79:db:7f:cf:7d:82:da:02:23:74:f0:6e:42:b4:3a:
                    84:b2:a0:1c:fc:20:26:1b:00:8a:66:7b:7c:eb:86:
                    44:ec:ec:73:63:8e:ac:01:c1:68:f4:78:75:a3:b4:
                    4e:c2:63:3e:7c:f2:9e:9b:5b:09:19:2a:3c:35:d3:
                    d0:5d:5a:5b:53:cf:00:d0:23:31:6c:90:2d:65:e8:
                    3d:63:0e:56:d7:3e:2f:5d:1b:5e:f1:7d:07:22:8c:
                    6f:09:52:0d:2b:b0:10:cf:44:e0:f4:5c:c1:19:3a:
                    94:7f:e0:d7:70:94:1b:ca:b2:5b:e9:f4:00:2e:40:
                    07:d5:91:86:cc:f5:3c:ce:15:b2:1b:7d:75:77:44:
                    23:ba:db:a3:7f:bb:68:92:6f:a5:17:2d:a5:67:3b:
                    50:ed:fa:96:bc:f0:a9:2b:e9:ce:57:b0:a6:a0:da:
                    9e:15:25:03:45:e9:d1:7e:99:e0:d5:41:e5:21:d4:
                    3c:b7:e5:8e:c0:d6:02:fc:cb:7b:b6:50:c9:c1:02:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:56:4B:EC:F7:B8:DD:43:D9:BD:FD:4B:1F:BB:FC:DD:60:CD:3F:E7
            X509v3 Authority Key Identifier:
                keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b4:dc:16:87:3c:45:70:c7:3d:80:4b:49:dc:d3:17:68:fb:
         e2:ae:cf:38:4b:8e:a2:33:85:e7:71:37:84:92:22:6a:af:12:
         1d:59:a5:60:2d:aa:6a:d9:01:a4:18:2d:96:e4:79:19:7f:ee:
         41:c5:73:bd:39:77:14:0b:e6:ff:76:01:47:dd:b3:93:65:19:
         07:c4:42:64:8e:84:38:b7:f1:6c:c7:13:6b:37:2f:01:50:5a:
         5b:8f:6f:0c:95:17:11:b3:4f:c5:cb:d9:7c:d2:75:ca:e9:55:
         bc:0a:22:09:53:16:35:d8:8e:a2:b8:eb:77:46:e6:a5:e7:31:
         05:f1:3b:67:c9:c0:4a:1e:8f:3e:9e:f4:5a:f7:6c:92:cf:c6:
         2c:56:e8:47:b0:48:42:e0:91:2b:b9:9b:06:c0:39:47:bc:d8:
         4d:28:e9:25:a0:bb:9a:ae:fe:c4:3a:9a:7a:d1:4f:3d:51:d0:
         93:83:e5:68:e2:13:6d:5e:f8:be:16:84:56:68:a7:87:bb:b6:
         40:24:51:d9:7b:14:3f:c7:51:ec:eb:c3:b2:1c:8c:e6:0b:5d:
         e6:5c:f0:3b:c5:ee:7b:31:7e:6a:e5:cb:bf:8a:15:42:27:46:
         8b:c7:17:ca:f5:aa:ff:c4:a4:54:bd:4d:39:32:af:d6:d1:0f:
         44:92:05:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw
MzIxNTc1QzcwHhcNMjYwODE4MjAxMTA0WhcNMjYwODI1MjAxMTA0WjAYMRYwFAYD
VQQDEw02YTg0YmM1OC04OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRhK/SlshCkBu9j+QkYog0VN+XVXOg4sVA3DQbQu9o+jDrZMLvN2QSwbP6Cs
UclHG3nlOdtkKhYTthB523/PfYLaAiN08G5CtDqEsqAc/CAmGwCKZnt864ZE7Oxz
Y46sAcFo9Hh1o7ROwmM+fPKem1sJGSo8NdPQXVpbU88A0CMxbJAtZeg9Yw5W1z4v
XRte8X0HIoxvCVINK7AQz0Tg9FzBGTqUf+DXcJQbyrJb6fQALkAH1ZGGzPU8zhWy
G311d0Qjutujf7tokm+lFy2lZztQ7fqWvPCpK+nOV7CmoNqeFSUDRenRfpng1UHl
IdQ8t+WOwNYC/Mt7tlDJwQJ3lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtWS+z3
uN1D2b39Sx+7/N1gzT/nMB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC
QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4
X0VQWWNnbUNRT2dESVZkY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmbTcFoc8RXDHPYBLSdzTF2j74q7POEuOojOF53E3hJIiaq8SHVmlYC2qatkB
pBgtluR5GX/uQcVzvTl3FAvm/3YBR92zk2UZB8RCZI6EOLfxbMcTazcvAVBaW49v
DJUXEbNPxcvZfNJ1yulVvAoiCVMWNdiOorjrd0bmpecxBfE7Z8nASh6PPp70Wvds
ks/GLFboR7BIQuCRK7mbBsA5R7zYTSjpJaC7mq7+xDqaetFPPVHQk4PlaOITbV74
vhaEVminh7u2QCRR2XsUP8dR7OvDshyM5gtd5lzwO8XuezF+auXLv4oVQidGi8cX
yvWq/8SkVL1NOTKv1tEPRJIFtg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:23 2026 by rpki-client