Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          xzrvcQWS9MdMjAwm/zyl+XhseOXnSoGOU/eQ1rtYyLM=
Subject key identifier:   F1:EF:D2:8E:D0:45:01:F0:F3:FD:90:80:72:05:B8:4E:F8:86:0A:80
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0D5B
Signing time:             Sun 26 Apr 2026 18:01:23 +0000
Manifest this update:     Sun 26 Apr 2026 18:01:22 +0000
Manifest next update:     Sun 03 May 2026 18:01:22 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: 7KK+S78xjWDRmO5sYcoiWzKsqmSTeODVNCz9Y6CODYg=)
                          2: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: O3t2hIIT2ftD/XMhSLHv6uv1WSk8u/lPKBYC3WyqprQ=)
                          3: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: h8pcOFfHHKAzYno1AnQaMU90IxuRx7WrkR44Fvue/Sg=)
                          4: 13D5D992979E11F08E996475C4F9AE02.roa (hash: l2h+kLqNSRAA/8kNK3Z7PjdMfsh/1wuCk20+NGCclYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Apr 26 18:01:22 2026 GMT
            Not After : May  3 18:01:22 2026 GMT
        Subject: CN=69ee52f2-f300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:b7:f6:e9:fe:39:0e:95:38:9f:0e:e0:94:
                    63:39:48:71:fc:d1:68:c2:12:31:d3:c1:fe:2a:37:
                    12:07:96:66:af:63:c5:5c:d9:81:a6:5e:b9:4c:3c:
                    25:19:b1:61:10:17:e5:da:4c:60:31:23:01:f8:78:
                    85:38:8d:72:ea:34:78:ab:65:c6:ba:4c:a5:df:df:
                    27:48:ed:d4:b2:af:4d:f4:9f:4f:f2:9e:76:8d:ff:
                    83:ef:e8:46:b9:91:9f:d3:d4:0f:ac:46:12:00:5a:
                    24:44:d4:4c:66:0a:6e:b6:91:aa:3a:db:ab:91:d5:
                    01:1b:a9:fd:9e:90:bd:58:45:e2:59:85:c1:a7:b9:
                    d7:89:40:30:37:7d:90:6b:ca:69:8d:16:a9:da:79:
                    fa:2b:f0:ad:0f:fc:71:48:86:1e:c8:b1:c8:03:14:
                    2e:2e:0b:ef:66:0c:28:85:cb:cc:2e:3f:de:41:2f:
                    5e:9c:88:f9:a3:ea:4e:d4:60:29:6f:cb:c1:e7:97:
                    ab:6f:55:cd:70:28:9f:12:df:c4:a4:18:bf:ad:79:
                    67:ca:8f:84:9f:47:86:a7:bc:34:2a:50:af:fe:2f:
                    c9:18:d6:14:eb:9a:b6:35:15:71:e0:ec:73:74:50:
                    37:c3:64:3c:3a:17:7d:72:af:6e:99:62:90:03:9f:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EF:D2:8E:D0:45:01:F0:F3:FD:90:80:72:05:B8:4E:F8:86:0A:80
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:81:74:a8:06:fa:0a:cf:2f:12:9b:52:93:fa:f1:a4:a4:
         60:ba:78:05:1f:fe:eb:b0:e6:37:16:f6:d0:da:48:a4:c8:17:
         36:64:31:67:6b:eb:d8:67:e5:f5:cf:be:ae:0d:3a:49:a6:73:
         3d:cb:75:89:1b:38:45:d8:22:c9:7f:92:d2:7f:96:3a:71:24:
         25:73:27:e4:ca:ae:e1:d6:49:84:cf:c2:59:11:ab:10:d8:9d:
         04:e1:04:a0:78:d9:34:ba:0c:d1:e9:1f:65:06:7e:09:f4:36:
         d9:ba:17:72:2d:d2:f1:68:74:3f:84:42:8a:37:0e:f2:82:32:
         37:0e:99:bd:e8:10:49:29:7c:24:36:a3:18:f0:c8:3d:3b:34:
         f9:dc:a2:a8:ce:c0:26:2b:04:19:00:eb:f5:96:21:5e:7f:7f:
         5b:80:eb:5f:8f:64:72:54:cc:95:85:7d:d7:74:b5:00:97:b6:
         f7:cc:10:47:ee:61:ed:9e:54:7d:7f:d6:ee:d0:60:c0:0e:dc:
         24:9b:c8:98:b3:62:0c:86:8f:0b:73:8e:a0:4c:6e:26:d3:04:
         18:49:e1:1f:e7:7a:c9:d8:27:14:0e:bf:63:57:98:9b:ec:b2:
         ff:c1:43:51:cf:fc:3b:42:4a:fa:ee:c0:4c:68:da:29:78:56:
         38:c5:e0:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC
QTI0QTFFMDYwHhcNMjYwNDI2MTgwMTIyWhcNMjYwNTAzMTgwMTIyWjAYMRYwFAYD
VQQDEw02OWVlNTJmMi1mMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5239un+OQ6VOJ8O4JRjOUhx/NFowhIx08H+KjcSB5Zmr2PFXNmBpl65TDwl
GbFhEBfl2kxgMSMB+HiFOI1y6jR4q2XGukyl398nSO3Usq9N9J9P8p52jf+D7+hG
uZGf09QPrEYSAFokRNRMZgputpGqOturkdUBG6n9npC9WEXiWYXBp7nXiUAwN32Q
a8ppjRap2nn6K/CtD/xxSIYeyLHIAxQuLgvvZgwohcvMLj/eQS9enIj5o+pO1GAp
b8vB55erb1XNcCifEt/EpBi/rXlnyo+En0eGp7w0KlCv/i/JGNYU65q2NRVx4Oxz
dFA3w2Q8Ohd9cq9umWKQA5+1CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHv0o7Q
RQHw8/2QgHIFuE74hgqAMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG
OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm
XzRnVmx3QTNZOEc2SktIZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR8+BdKgG+grPLxKbUpP68aSkYLp4BR/+67DmNxb20NpIpMgXNmQxZ2vr2Gfl
9c++rg06SaZzPct1iRs4RdgiyX+S0n+WOnEkJXMn5Mqu4dZJhM/CWRGrENidBOEE
oHjZNLoM0ekfZQZ+CfQ22boXci3S8Wh0P4RCijcO8oIyNw6ZvegQSSl8JDajGPDI
PTs0+dyiqM7AJisEGQDr9ZYhXn9/W4DrX49kclTMlYV913S1AJe298wQR+5h7Z5U
fX/W7tBgwA7cJJvImLNiDIaPC3OOoExuJtMEGEnhH+d6ydgnFA6/Y1eYm+yy/8FD
Uc/8O0JK+u7ATGjaKXhWOMXgag==
-----END CERTIFICATE-----
Generated at Tue Apr 28 12:47:26 2026 by rpki-client