Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File:                     nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier:          1R4Afml4reH5aHHxk6O4q6m9sGX8DmwQ44Y0TApyfiM=
Subject key identifier:   03:62:D2:38:9D:DD:7B:30:73:D6:C0:E3:CC:7D:F0:F2:05:F5:B2:15
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer:       /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number:          64
Signing time:             Fri 17 Jul 2026 09:18:37 +0000
Manifest this update:     Fri 17 Jul 2026 09:18:36 +0000
Manifest next update:     Fri 24 Jul 2026 09:18:36 +0000
Files and hashes:         1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: nibvB+0uQBjGO1GUbhTCz1Mh8lpJCOX1fFw/oZGsM0c=)
                          2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
        Validity
            Not Before: Jul 17 09:18:36 2026 GMT
            Not After : Jul 24 09:18:36 2026 GMT
        Subject: CN=6a59f36d-7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:de:5a:05:48:68:28:bd:14:40:2c:1d:af:
                    7d:39:fd:41:30:68:30:ca:dc:70:5f:83:fa:2a:b7:
                    60:47:7f:77:e4:0b:c5:ec:ed:18:e7:fc:e8:1b:48:
                    28:a8:55:76:65:2e:90:c8:73:b8:5d:92:ee:69:54:
                    50:d4:d4:ec:67:a8:97:89:08:47:8d:9e:25:a6:2f:
                    b9:bd:df:79:7f:5e:13:bb:61:29:6a:5c:04:e5:34:
                    77:78:b3:97:32:95:b1:fa:db:fc:a4:de:09:ab:e3:
                    eb:9e:76:78:e6:d6:6f:82:f0:75:95:b0:fe:db:a5:
                    fc:e9:c2:01:84:55:2a:ec:58:2e:ef:1b:da:99:09:
                    a4:b3:fe:4c:c9:d9:b4:e7:71:4b:76:f1:36:c9:73:
                    c8:dd:a3:4e:ab:5c:b8:2b:49:2a:5f:eb:2b:ba:b6:
                    96:32:07:49:43:39:a6:2e:38:2c:4f:a4:3d:6f:d4:
                    93:73:ac:67:dc:a3:b5:7b:fb:99:2e:a2:ce:d6:d3:
                    6b:24:44:fb:9b:2d:0e:07:c7:c8:e5:f9:8a:ff:c0:
                    4b:17:88:48:9f:8b:9c:8c:62:71:5e:cc:12:2d:7d:
                    eb:4e:f4:c3:aa:e7:d1:0f:0c:4e:41:18:2c:95:49:
                    d6:0a:20:9d:c3:d6:34:14:1b:58:3c:0a:1e:cc:5f:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:D2:38:9D:DD:7B:30:73:D6:C0:E3:CC:7D:F0:F2:05:F5:B2:15
            X509v3 Authority Key Identifier:
                keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:23:f1:b7:25:58:6c:94:0e:1d:c3:e4:94:2a:43:93:78:a1:
         b2:6a:2a:20:6b:29:d4:68:36:68:5b:b9:e6:9a:c1:53:7b:04:
         a8:9f:9d:8b:75:78:01:d2:71:cf:06:66:f1:7c:06:22:3d:b9:
         06:df:65:ed:a2:15:dc:55:86:6f:79:ca:7c:19:b9:f3:f2:e9:
         ea:4e:fb:2e:17:ae:c0:c6:77:92:05:d6:f0:ff:dc:59:94:9e:
         8a:bd:cc:ca:79:f7:a1:8c:41:b1:d1:c1:89:91:ad:52:47:bd:
         6b:0d:f4:e9:10:e5:36:df:43:21:15:7e:7b:19:57:78:96:a5:
         07:8c:fa:72:80:83:81:87:ac:ea:0b:18:d1:86:c3:24:bf:ba:
         b5:d1:31:19:8b:23:bd:86:c6:58:24:1c:38:80:ce:9a:30:ab:
         49:a1:cb:f5:6e:6f:38:f7:20:fc:50:5f:a2:a5:d8:3d:4c:ff:
         31:19:d5:2b:84:02:e4:a4:1c:da:ad:33:44:38:53:3c:40:0c:
         f6:0d:a4:d4:99:d7:ee:52:09:b3:d8:e2:78:bb:01:29:bf:05:
         7e:ed:6f:d9:82:e6:48:c5:38:55:71:bf:be:cb:74:74:76:c3:
         59:0a:a4:e1:4d:a4:d6:a3:69:fa:c1:d7:28:52:0c:7d:6c:c1:
         19:46:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:21 2026 by rpki-client