Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
File:                     NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json)
Hash identifier:          cwqfg24XDD5fx37h/IlgzU6MMAGEZsPuUi9sb+lWxu4=
Subject key identifier:   DE:5D:AD:90:C9:09:81:6F:2E:AF:F5:19:7E:1B:E1:DD:A0:08:F4:E5
Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
Certificate issuer:       /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Certificate serial:       03AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
Manifest number:          039E
Signing time:             Thu 23 Jul 2026 01:37:01 +0000
Manifest this update:     Thu 23 Jul 2026 01:37:01 +0000
Manifest next update:     Thu 30 Jul 2026 01:37:01 +0000
Files and hashes:         1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: /uKANiiHVIFM/zgUa8d43jMESavuVVRae385qnsGGRs=)
                          2: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: a5mqDS8csnFhirJVB+mELKo1bbKHlBbrnlgJKARZXz8=)
                          3: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: xCxlkxmn+IYoOztMvnfz1vMt3zyfROldaTyC72io/60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
                          rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
        Validity
            Not Before: Jul 23 01:37:01 2026 GMT
            Not After : Jul 30 01:37:01 2026 GMT
        Subject: CN=6a61703d-2a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:77:2b:01:c4:df:0b:8b:76:26:b7:33:54:
                    80:13:1f:b7:ce:85:18:62:39:49:48:47:58:3f:8d:
                    1b:8c:7f:f5:af:2e:cc:ae:57:89:64:21:e5:12:01:
                    c6:84:22:3d:e1:61:bf:0a:e2:82:c2:25:7b:00:54:
                    3a:be:31:52:ad:8b:19:1b:20:cc:77:b8:5c:94:e4:
                    e4:6e:d9:96:06:47:d2:88:0a:a7:3a:75:54:8b:16:
                    23:5e:fc:3d:ad:56:1e:19:75:05:fe:b7:a9:21:00:
                    21:cf:78:c8:0b:e7:6a:c8:c5:01:32:82:2c:d9:ac:
                    25:26:50:89:d7:47:ce:cb:4f:a4:f1:50:3a:5e:e7:
                    ab:79:5f:d6:76:89:5a:0d:7b:44:30:c6:ad:85:ce:
                    32:81:bf:c7:31:ee:07:9a:94:65:e7:f7:c2:31:b0:
                    12:44:ec:0f:fa:cb:2e:3c:66:f4:83:36:be:6b:38:
                    31:8a:03:51:41:36:9c:7e:74:dc:19:af:6d:ad:3a:
                    ab:97:02:ac:53:84:39:2d:76:82:36:7e:11:9a:94:
                    12:fd:6e:cb:04:32:21:28:13:34:b6:82:1f:ff:96:
                    a1:f1:47:4b:d1:db:dd:0d:73:5b:fe:11:65:38:08:
                    aa:f1:7f:87:75:c3:45:f7:4a:9f:88:c6:1e:c9:ce:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5D:AD:90:C9:09:81:6F:2E:AF:F5:19:7E:1B:E1:DD:A0:08:F4:E5
            X509v3 Authority Key Identifier:
                keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:99:26:ac:1f:17:06:96:c3:79:d3:15:1e:2d:7e:2b:12:
         e2:e6:65:48:ac:16:ea:34:e2:2c:c4:7f:2b:27:ca:ca:a3:75:
         70:3a:20:dd:c9:dd:83:e7:bc:c8:22:5e:ff:67:a5:cc:39:f7:
         6c:61:b5:21:0c:44:ad:6f:f2:d2:da:94:9c:e8:e9:eb:28:70:
         9f:ce:3a:31:b0:e5:e9:1d:80:87:9a:b2:91:d5:02:8e:37:69:
         73:bf:02:1d:84:73:35:6a:9e:25:ce:d9:d3:ab:7d:d3:9d:90:
         6b:a1:40:9e:f9:fc:25:61:af:49:2c:1c:f2:60:8b:08:c7:23:
         4a:00:e2:18:ba:69:07:47:46:f7:f4:be:ca:26:b1:e8:f4:b2:
         68:10:8a:91:3e:5d:9c:96:8e:7b:85:48:3e:8f:31:b1:5b:f6:
         de:70:f0:40:13:77:b2:7c:ff:27:a8:59:9c:78:02:18:7f:d8:
         c1:22:cb:09:e1:ef:39:56:ba:9d:df:25:39:98:27:e5:ee:7f:
         1b:01:13:c8:3f:17:31:a1:69:56:f9:16:8f:e8:b7:8a:1c:fc:
         54:5c:fc:09:53:33:a4:4b:59:28:6b:78:e7:be:2c:ac:72:d4:
         49:ef:98:3b:c7:33:f1:da:ca:42:c5:27:30:84:be:87:cb:8b:
         64:47:58:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD
OTZFNkJBRTgwHhcNMjYwNzIzMDEzNzAxWhcNMjYwNzMwMDEzNzAxWjAYMRYwFAYD
VQQDEw02YTYxNzAzZC0yYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzX53KwHE3wuLdia3M1SAEx+3zoUYYjlJSEdYP40bjH/1ry7MrleJZCHlEgHG
hCI94WG/CuKCwiV7AFQ6vjFSrYsZGyDMd7hclOTkbtmWBkfSiAqnOnVUixYjXvw9
rVYeGXUF/repIQAhz3jIC+dqyMUBMoIs2awlJlCJ10fOy0+k8VA6XuereV/Wdola
DXtEMMathc4ygb/HMe4HmpRl5/fCMbASROwP+ssuPGb0gza+azgxigNRQTacfnTc
Ga9trTqrlwKsU4Q5LXaCNn4RmpQS/W7LBDIhKBM0toIf/5ah8UdL0dvdDXNb/hFl
OAiq8X+HdcNF90qfiMYeyc5TMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5drZDJ
CYFvLq/1GX4b4d2gCPTlMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw
RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt
UFI4MjNyTnNKSGJKYm11dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUDCZJqwfFwaWw3nTFR4tfisS4uZlSKwW6jTiLMR/KyfKyqN1cDog3cndg+e8
yCJe/2elzDn3bGG1IQxErW/y0tqUnOjp6yhwn846MbDl6R2Ah5qykdUCjjdpc78C
HYRzNWqeJc7Z06t9052Qa6FAnvn8JWGvSSwc8mCLCMcjSgDiGLppB0dG9/S+yiax
6PSyaBCKkT5dnJaOe4VIPo8xsVv23nDwQBN3snz/J6hZnHgCGH/YwSLLCeHvOVa6
nd8lOZgn5e5/GwETyD8XMaFpVvkWj+i3ihz8VFz8CVMzpEtZKGt4574srHLUSe+Y
O8cz8drKQsUnMIS+h8uLZEdYFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:38 2026 by rpki-client