Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File:                     NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier:          kyuAMh4Zuuwv6pkLA7GfS99Q//84WDkvuU8Vfm22SdY=
Subject key identifier:   39:64:DC:D4:3E:0D:8D:A0:6A:4F:0C:F7:86:DE:4F:BF:D1:93:2E:C4
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number:          017B
Signing time:             Wed 13 May 2026 04:40:33 +0000
Manifest this update:     Wed 13 May 2026 04:40:32 +0000
Manifest next update:     Wed 20 May 2026 04:40:32 +0000
Files and hashes:         1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: Sw+4BE41QaIo4bvEkYYrZzY/yHpb0NArqYcNt9CRB0g=)
                          2: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=)
                          3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=)
                          4: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: May 13 04:40:32 2026 GMT
            Not After : May 20 04:40:32 2026 GMT
        Subject: CN=6a0400c0-a9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:bd:4c:9c:92:99:bf:18:1c:07:01:b3:bf:
                    4e:e1:fa:c1:63:01:c4:ac:b5:34:86:ab:e8:24:9f:
                    86:e0:3f:69:86:4a:f4:6a:8a:d9:e5:9d:3f:7f:82:
                    60:e4:ae:85:7c:99:77:84:fe:36:13:26:cb:b4:9b:
                    c7:1e:05:da:f1:3b:94:60:94:1b:f2:ae:25:20:33:
                    ca:ed:26:fd:f7:01:ff:49:75:ef:5b:ef:2d:94:44:
                    8a:0a:81:f6:b6:46:60:3e:14:2c:fe:50:62:a7:79:
                    4b:b2:11:7e:16:cf:f1:a9:8e:18:56:3d:09:c3:2f:
                    9a:ba:ef:36:98:89:b1:e0:bf:2e:e4:72:d2:8e:16:
                    4a:72:c6:d5:dc:43:84:0a:7f:5d:36:9e:8c:20:1d:
                    fc:fd:28:1d:cc:86:dd:55:88:1c:81:86:f7:05:62:
                    d9:cb:3c:06:39:b5:c0:dc:65:7f:25:5c:eb:87:f1:
                    be:6b:48:cd:2a:c0:f8:28:55:68:93:d3:1d:99:8d:
                    69:6d:d8:62:53:db:f7:59:21:f2:12:e8:a4:10:61:
                    e3:fa:40:61:4f:02:a5:05:57:fe:11:96:b0:69:a4:
                    ba:f1:5a:9b:bf:6f:e2:fc:3c:83:92:cc:a6:b7:49:
                    31:a9:2f:b7:1b:65:f0:6a:dc:48:43:c5:39:f6:ac:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:64:DC:D4:3E:0D:8D:A0:6A:4F:0C:F7:86:DE:4F:BF:D1:93:2E:C4
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:a3:73:00:b1:73:83:1f:6d:ab:80:7d:a6:de:40:24:8a:
         a5:1b:75:be:1c:39:b9:1f:56:95:55:ee:60:ec:80:87:4e:25:
         0f:56:0b:8c:ae:e7:50:0e:ab:5f:10:86:1a:6e:6c:47:22:5d:
         99:18:3e:8c:30:fa:b1:31:75:ef:44:3d:4f:b8:76:81:af:de:
         f6:4e:54:9b:e8:0b:d3:a3:28:e2:e0:2d:92:be:f4:16:df:c7:
         91:4c:fc:78:12:62:96:6b:8a:6b:d8:27:f0:84:be:79:95:b1:
         28:84:d9:51:c7:bc:e3:a5:c5:14:bc:6a:bd:6f:f3:3a:48:05:
         26:19:cc:a0:54:7e:6f:a9:c0:9b:65:03:74:29:c9:79:30:35:
         f7:75:a5:26:ef:a9:1a:10:2f:15:6f:98:13:94:ee:60:6e:bd:
         b4:7e:f3:3b:19:23:90:de:9f:c7:fa:5c:14:29:e5:81:1b:43:
         93:6c:d1:f0:fc:f3:a1:fa:ae:ae:2b:eb:55:b5:46:0f:6d:b0:
         51:4d:a4:a1:64:9f:d8:8d:b0:ee:0f:6b:39:6c:9d:b3:ae:42:
         52:1d:bb:0e:8a:28:2b:aa:32:e4:7d:92:34:40:0d:74:4e:1f:
         60:3b:70:ef:4e:6b:9b:a5:52:0b:00:b3:5a:b0:cf:b0:8f:70:
         d7:14:49:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE
MTQ1RkU0OTgwHhcNMjYwNTEzMDQ0MDMyWhcNMjYwNTIwMDQ0MDMyWjAYMRYwFAYD
VQQDEw02YTA0MDBjMC1hOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2OW9TJySmb8YHAcBs79O4frBYwHErLU0hqvoJJ+G4D9phkr0aorZ5Z0/f4Jg
5K6FfJl3hP42EybLtJvHHgXa8TuUYJQb8q4lIDPK7Sb99wH/SXXvW+8tlESKCoH2
tkZgPhQs/lBip3lLshF+Fs/xqY4YVj0Jwy+auu82mImx4L8u5HLSjhZKcsbV3EOE
Cn9dNp6MIB38/SgdzIbdVYgcgYb3BWLZyzwGObXA3GV/JVzrh/G+a0jNKsD4KFVo
k9MdmY1pbdhiU9v3WSHyEuikEGHj+kBhTwKlBVf+EZawaaS68Vqbv2/i/DyDksym
t0kxqS+3G2XwatxIQ8U59qwFCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlk3NQ+
DY2gak8M94beT7/Rky7EMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD
RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw
bzlMYWRZbTlnekhSUmY1SmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApJyjcwCxc4MfbauAfabeQCSKpRt1vhw5uR9WlVXuYOyAh04lD1YLjK7nUA6r
XxCGGm5sRyJdmRg+jDD6sTF170Q9T7h2ga/e9k5Um+gL06Mo4uAtkr70Ft/HkUz8
eBJilmuKa9gn8IS+eZWxKITZUce846XFFLxqvW/zOkgFJhnMoFR+b6nAm2UDdCnJ
eTA193WlJu+pGhAvFW+YE5TuYG69tH7zOxkjkN6fx/pcFCnlgRtDk2zR8Pzzofqu
rivrVbVGD22wUU2koWSf2I2w7g9rOWyds65CUh27DoooK6oy5H2SNEANdE4fYDtw
705rm6VSCwCzWrDPsI9w1xRJpA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:55:58 2026 by rpki-client