Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          3/eongmh4fH5G/jKCXlhsocefkW4DVwvmsyQ+cJVVlU=
Subject key identifier:   5B:8A:DD:CC:50:AF:3C:AF:D8:5A:7C:56:81:D6:51:2E:70:CD:3D:CA
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       0744
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          073C
Signing time:             Sat 10 Oct 2026 22:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:12 +0000
Manifest next update:     Sat 17 Oct 2026 22:01:12 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: YWL5AVQANWfEI+XppQZMmD5jZwlN7qHLoMsMVsjJoFc=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Oct 10 22:01:12 2026 GMT
            Not After : Oct 17 22:01:12 2026 GMT
        Subject: CN=6acab5a9-7e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:3d:14:6c:52:49:4b:78:54:f0:f7:c6:a4:
                    81:9b:b8:7a:01:28:62:42:00:47:b4:de:f6:c5:87:
                    c4:a3:f3:43:5e:e9:13:53:29:01:f7:b2:da:91:5e:
                    50:c9:7e:06:a4:64:71:a6:8e:2d:63:f1:9b:9a:08:
                    46:56:9f:f2:c7:ab:ac:cd:2c:77:54:f7:a7:eb:10:
                    46:a8:c6:76:d4:aa:bb:94:ec:7c:df:c2:d4:7b:cb:
                    14:51:47:31:89:fe:d2:b5:44:5f:f8:39:b9:b7:57:
                    b1:87:a0:a5:1d:bf:22:ac:36:b6:a2:ca:ec:88:5e:
                    6c:e8:d8:c0:d5:0a:59:0e:ff:de:c9:1f:10:51:c5:
                    7e:c1:1a:41:59:b9:96:af:5d:5b:5c:52:51:4a:70:
                    78:47:29:db:07:1b:f8:4f:0c:fb:ac:36:0f:8d:af:
                    5d:08:73:4b:61:ea:83:28:40:4c:c3:40:e1:f8:31:
                    c6:5d:2d:b5:97:fa:12:87:7f:76:ea:6a:1e:87:57:
                    55:a4:48:dc:c3:e8:61:d7:78:91:6a:fb:f4:0a:a4:
                    92:d1:71:93:3c:98:d7:65:5c:90:c7:d5:1b:ca:7e:
                    a4:47:24:a2:ee:ea:a2:33:01:62:d7:87:06:76:58:
                    05:32:3b:9f:46:0f:98:ca:b0:fd:2c:66:5b:08:fd:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:DD:CC:50:AF:3C:AF:D8:5A:7C:56:81:D6:51:2E:70:CD:3D:CA
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:86:ef:d2:64:34:ba:90:cf:98:0f:1d:b8:a2:69:0c:0a:
         85:4d:cc:82:57:e4:37:32:f1:13:10:82:42:20:41:53:73:60:
         6d:e0:c6:e8:2a:d2:e1:25:35:88:96:da:a6:3b:f1:8e:8b:1a:
         f5:85:33:ae:8e:88:52:d3:93:c4:d4:94:d4:39:a5:ce:09:90:
         2e:f0:88:fe:63:86:ed:d2:6c:e1:c8:83:59:3c:2b:2c:f9:75:
         80:39:f5:50:80:99:05:83:56:fa:bc:2c:3a:65:1d:dd:89:05:
         9c:22:e4:88:81:e7:90:18:bb:f5:f0:72:56:f9:15:11:a7:08:
         8b:9e:bc:1b:ee:c8:bb:4e:a5:93:2e:ab:b4:c1:57:55:09:04:
         ee:71:a9:3b:ff:db:7e:5c:9d:0b:89:5f:62:27:fe:43:32:1d:
         0c:76:c0:f4:91:6c:f2:45:c4:4a:ff:40:f5:04:39:77:8c:dc:
         dc:a5:4b:1c:02:ff:9a:76:90:ee:e4:80:e9:29:46:a1:38:50:
         23:71:f8:ff:d2:f5:e3:96:e6:35:68:1b:ac:40:38:4f:8a:d5:
         91:2e:e5:22:c4:c6:fa:d1:7a:19:5f:83:32:77:cb:30:0c:50:
         b8:d7:a0:79:85:e5:f1:b7:0a:25:19:c1:5b:6b:77:23:db:c0:
         e1:9c:9f:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG
OUQ2MDFFMEUwHhcNMjYxMDEwMjIwMTEyWhcNMjYxMDE3MjIwMTEyWjAYMRYwFAYD
VQQDEw02YWNhYjVhOS03ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpM9FGxSSUt4VPD3xqSBm7h6AShiQgBHtN72xYfEo/NDXukTUykB97LakV5Q
yX4GpGRxpo4tY/GbmghGVp/yx6uszSx3VPen6xBGqMZ21Kq7lOx838LUe8sUUUcx
if7StURf+Dm5t1exh6ClHb8irDa2osrsiF5s6NjA1QpZDv/eyR8QUcV+wRpBWbmW
r11bXFJRSnB4RynbBxv4Twz7rDYPja9dCHNLYeqDKEBMw0Dh+DHGXS21l/oSh392
6moeh1dVpEjcw+hh13iRavv0CqSS0XGTPJjXZVyQx9Ubyn6kRySi7uqiMwFi14cG
dlgFMjufRg+YyrD9LGZbCP1p2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuK3cxQ
rzyv2Fp8VoHWUS5wzT3KMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky
ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy
VWktdHZ4bFU3bF81MWdIZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFM6G79JkNLqQz5gPHbiiaQwKhU3MglfkNzLxExCCQiBBU3NgbeDG6CrS4SU1
iJbapjvxjosa9YUzro6IUtOTxNSU1DmlzgmQLvCI/mOG7dJs4ciDWTwrLPl1gDn1
UICZBYNW+rwsOmUd3YkFnCLkiIHnkBi79fByVvkVEacIi568G+7Iu06lky6rtMFX
VQkE7nGpO//bflydC4lfYif+QzIdDHbA9JFs8kXESv9A9QQ5d4zc3KVLHAL/mnaQ
7uSA6SlGoThQI3H4/9L145bmNWgbrEA4T4rVkS7lIsTG+tF6GV+DMnfLMAxQuNeg
eYXl8bcKJRnBW2t3I9vA4ZyfoA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:27:10 2026 by rpki-client