Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
File:                     NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json)
Hash identifier:          /oBOBkoxeywRieLOZguLm8ayHSYdQA2Hz+hrnAt1BHA=
Subject key identifier:   BE:92:A0:D8:71:0E:86:C9:47:64:4E:71:FB:6A:75:F9:4B:96:DC:FC
Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
Certificate issuer:       /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
Manifest number:          99
Signing time:             Wed 23 Sep 2026 07:08:38 +0000
Manifest this update:     Wed 23 Sep 2026 07:08:38 +0000
Manifest next update:     Wed 30 Sep 2026 07:08:38 +0000
Files and hashes:         1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: 288bh5vc+KQv42IkN6Dcwb5eeTcEwQzghhcTZdMMatA=)
                          2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: zPwsBxrk2TWYKMwX9feT4glmgUpbLrsFWyQ2jB0oPio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
        Validity
            Not Before: Sep 23 07:08:38 2026 GMT
            Not After : Sep 30 07:08:38 2026 GMT
        Subject: CN=6ab37af6-38ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:2e:f9:d1:11:77:00:06:c5:a9:15:a6:a3:
                    93:89:c2:8a:50:eb:66:a1:b0:c3:db:e5:4b:35:64:
                    74:97:63:cb:b2:40:d3:10:48:73:38:19:39:37:56:
                    91:0c:ec:33:55:cd:96:4d:47:62:58:a3:bd:01:e3:
                    dd:d0:6c:bd:9b:a1:a6:b3:72:d5:fe:29:78:69:43:
                    c2:de:61:6d:2f:4f:6c:61:72:bd:da:c6:df:46:11:
                    03:ed:ae:a4:30:5c:85:62:d3:bd:0b:2e:30:53:99:
                    ca:d0:f3:b4:af:d9:d8:d8:c2:b8:50:d8:b6:48:a7:
                    18:18:ea:72:46:e1:e0:c7:c2:94:3c:ab:75:9a:d4:
                    e6:d4:09:9b:4c:0a:5c:8d:97:60:e3:90:ad:c8:95:
                    4f:13:72:3f:db:5f:62:bf:9e:e1:85:6c:00:d9:ec:
                    19:8e:11:f8:04:e5:12:e2:90:bd:63:a3:9d:64:36:
                    d2:b9:09:08:40:b0:2b:3b:1a:cf:a3:c6:32:38:55:
                    71:95:94:ae:22:89:21:52:2f:85:5a:16:34:71:cc:
                    cd:32:5f:74:58:6c:3c:42:fe:fc:79:9f:6a:05:36:
                    f4:2a:84:2f:23:c4:11:a6:c8:51:37:cf:9a:9c:66:
                    5c:23:c7:43:9b:0b:3e:27:d4:51:eb:4e:45:3b:4d:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:92:A0:D8:71:0E:86:C9:47:64:4E:71:FB:6A:75:F9:4B:96:DC:FC
            X509v3 Authority Key Identifier:
                keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:58:7b:f8:14:22:bb:90:2d:7a:0a:a4:c8:b0:9a:ac:13:
         8f:1d:0b:4a:f0:4e:e9:36:78:bd:c7:7b:3b:e6:f9:22:a7:aa:
         ad:9e:6f:15:f2:3b:27:25:ef:f7:d7:fc:45:c6:5c:a3:4f:de:
         cd:72:b7:92:82:b4:38:7a:0c:02:a9:33:69:55:41:b5:15:3a:
         3d:c7:35:8e:99:4b:fe:5e:83:52:cb:01:98:02:09:43:d3:ce:
         f2:8c:77:e1:d1:db:b5:21:a8:80:c1:e5:1c:0f:cf:e3:97:e6:
         5c:67:05:ba:9d:f4:9b:4e:18:b5:0b:56:4a:8e:4a:a1:c7:ac:
         f8:ef:c1:51:ad:dc:31:d3:ae:78:94:95:5a:ab:79:11:35:e3:
         0c:6b:93:04:de:d9:fa:38:ce:d4:6c:b5:04:7b:9f:63:9f:3b:
         0a:a8:bc:3e:7d:14:1b:8e:50:aa:dd:7b:a8:34:40:90:7d:92:
         df:c1:3c:ce:33:05:08:b3:f2:1c:76:d7:93:27:19:40:09:2e:
         25:78:21:6e:73:7e:4a:ef:6d:bc:9a:b8:e2:a3:3d:e0:f6:6f:
         7d:7a:4b:8e:29:b8:23:33:20:6c:39:fe:a5:5d:1f:dd:e3:3b:
         ce:64:13:cc:b6:d7:a0:98:5a:a5:e0:e1:20:4f:30:70:11:60:
         72:8b:3f:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFMDExMTAvBgNVBAUTKDM0OEI1NENGRjc5OTY1RTIxQjJEQkFCOTlGMjEwMUUz
MUE1NjBFOUIwHhcNMjYwOTIzMDcwODM4WhcNMjYwOTMwMDcwODM4WjAYMRYwFAYD
VQQDEw02YWIzN2FmNi0zOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5Eu+dERdwAGxakVpqOTicKKUOtmobDD2+VLNWR0l2PLskDTEEhzOBk5N1aR
DOwzVc2WTUdiWKO9AePd0Gy9m6Gms3LV/il4aUPC3mFtL09sYXK92sbfRhED7a6k
MFyFYtO9Cy4wU5nK0PO0r9nY2MK4UNi2SKcYGOpyRuHgx8KUPKt1mtTm1AmbTApc
jZdg45CtyJVPE3I/219iv57hhWwA2ewZjhH4BOUS4pC9Y6OdZDbSuQkIQLArOxrP
o8YyOFVxlZSuIokhUi+FWhY0cczNMl90WGw8Qv78eZ9qBTb0KoQvI8QRpshRN8+a
nGZcI8dDmws+J9RR605FO00TiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6SoNhx
DobJR2ROcftqdflLltz8MB8GA1UdIwQYMBaAFDSLVM/3mWXiGy26uZ8hAeMaVg6b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwMS80NjkyN0YxNENG
NTkxMUYwODVCQkREMTFDNEY5QUUwMi9OSXRVel9lWlplSWJMYnE1bnlFQjR4cFdE
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05JdFV6X2VaWmVJYkxicTVueUVCNHhwV0Rwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUUwMS80NjkyN0YxNENGNTkxMUYwODVCQkREMTFDNEY5QUUwMi9OSXRVel9lWlpl
SWJMYnE1bnlFQjR4cFdEcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANrtYe/gUIruQLXoKpMiwmqwTjx0LSvBO6TZ4vcd7O+b5IqeqrZ5vFfI7JyXv
99f8RcZco0/ezXK3koK0OHoMAqkzaVVBtRU6Pcc1jplL/l6DUssBmAIJQ9PO8ox3
4dHbtSGogMHlHA/P45fmXGcFup30m04YtQtWSo5Koces+O/BUa3cMdOueJSVWqt5
ETXjDGuTBN7Z+jjO1Gy1BHufY587Cqi8Pn0UG45Qqt17qDRAkH2S38E8zjMFCLPy
HHbXkycZQAkuJXghbnN+Su9tvJq44qM94PZvfXpLjim4IzMgbDn+pV0f3eM7zmQT
zLbXoJhapeDhIE8wcBFgcos/YQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:14:10 2026 by rpki-client