Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
File:                     NNz0cp9FgmKIjvB6K9RnX24xE4A.mft (raw, json)
Hash identifier:          CPRu8XNzk/PaVdnfYHjuVW7z/VDS95HJNYa4wFjv27U=
Subject key identifier:   23:A7:92:57:ED:7B:E1:F3:85:B0:2B:C2:FD:6F:36:9A:E2:2F:C9:B0
Authority key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Certificate issuer:       /CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Certificate serial:       0783
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
Manifest number:          0775
Signing time:             Tue 18 Aug 2026 21:57:41 +0000
Manifest this update:     Tue 18 Aug 2026 21:57:41 +0000
Manifest next update:     Tue 25 Aug 2026 21:57:41 +0000
Files and hashes:         1: NNz0cp9FgmKIjvB6K9RnX24xE4A.crl (hash: IdzdztFBPyeFQUJloxwWYL0qdVZ2XcxHVhNaLavE7XM=)
                          2: AE27A8A671B311EBB90BB364C4F9AE02.roa (hash: Yz43RwlZ5yy4nBg8j+EwoqSiXNci2+WLpvODtls54Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
                          rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B7F, serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
        Validity
            Not Before: Aug 18 21:57:41 2026 GMT
            Not After : Aug 25 21:57:41 2026 GMT
        Subject: CN=6a84d555-a13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:1c:d6:cc:25:ca:9f:3c:88:d6:54:f2:01:
                    7d:91:46:d8:8c:42:2b:d7:a0:ab:98:4f:f4:be:a8:
                    de:c9:39:77:44:66:21:1c:43:b4:f0:21:3c:39:e0:
                    d8:fc:0f:db:c4:3b:3d:bc:eb:2a:2c:f0:6b:26:5d:
                    36:2d:89:b1:f4:7c:c9:57:99:46:31:bc:a2:e3:1f:
                    99:f9:80:d1:12:83:64:65:45:eb:21:06:10:7a:82:
                    a2:3b:cd:fc:90:b2:d9:15:89:6b:b5:c1:7b:3d:34:
                    a7:0c:9d:8a:3e:e0:ea:1e:56:96:20:ea:67:b6:a8:
                    e8:33:80:51:89:9c:fd:12:a4:ef:6b:ca:10:da:b5:
                    8e:9f:ee:fb:29:7c:58:2a:06:59:c1:f6:74:6b:49:
                    8e:37:e0:1a:f8:6d:76:72:66:12:93:ee:a4:1c:24:
                    47:fb:97:64:2b:3d:a1:ee:98:d7:5b:5b:95:4d:3f:
                    38:f7:a3:4b:83:c9:20:19:b3:e9:cd:85:58:97:4a:
                    3d:c7:51:42:9e:2e:53:26:44:6a:f7:a2:a4:24:29:
                    37:be:2e:f9:a0:5d:6d:80:d7:9e:e2:30:24:8e:1f:
                    e5:ee:57:b8:5c:2a:be:f9:4d:4e:dd:c2:6b:a9:c2:
                    83:27:34:6a:28:28:11:51:c6:3a:da:5b:90:8e:91:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:92:57:ED:7B:E1:F3:85:B0:2B:C2:FD:6F:36:9A:E2:2F:C9:B0
            X509v3 Authority Key Identifier:
                keyid:34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cc:62:90:c6:36:60:19:05:f4:c0:a1:e8:b0:54:42:0b:df:
         2a:f3:a4:51:f1:3e:4c:6f:52:8f:a0:2e:98:30:47:2e:d0:8e:
         55:56:55:c3:36:0d:dd:04:76:92:12:c0:f1:27:34:27:d2:07:
         ea:ef:ac:2c:86:f9:7e:6c:95:ed:cc:61:b9:b6:5f:e4:66:72:
         1a:6a:d8:d7:3b:7f:97:ec:1f:54:18:27:f7:38:04:46:f6:75:
         29:25:55:d2:84:fb:07:30:92:53:cb:45:70:08:9e:3d:0c:e5:
         50:93:c9:80:00:0c:03:a5:82:a3:fa:f1:e8:86:9e:e5:9a:3f:
         bf:a0:35:6b:a0:b1:10:82:91:0b:41:54:16:ad:85:04:87:c8:
         a1:be:32:1d:76:06:b8:f9:01:44:8b:ed:6f:07:2d:65:a5:08:
         bc:e2:b4:09:24:fb:71:5a:7c:31:bb:c0:d4:5f:f1:85:49:32:
         f0:12:4f:8f:da:4d:d1:fc:1d:18:7a:fd:86:63:98:8c:c6:64:
         5e:b2:4f:fa:0f:dc:1f:62:5a:34:8e:66:fa:95:13:cf:a3:52:
         06:7f:13:18:4f:ae:6d:f9:a5:80:65:81:9f:85:83:00:22:3b:
         6f:82:4f:c0:2c:81:97:ac:80:74:b4:8a:8a:97:7f:f2:0b:38:
         dc:4a:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:45 2026 by rpki-client