Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          4TMZzPwiywLsTlPVAvLAHrLgTc3xI0VtiRbgNPuyuJo=
Subject key identifier:   ED:1A:88:80:D8:60:09:F4:30:9A:7C:F2:0A:22:75:0F:51:6F:48:BF
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          234D
Signing time:             Thu 26 Mar 2026 15:55:19 +0000
Manifest this update:     Thu 26 Mar 2026 15:55:19 +0000
Manifest next update:     Thu 02 Apr 2026 15:55:19 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: ihC9OkfM36ZXSvN+O2h92FH1mPXpjZ5sUMLj/7M/ncA=)
                          2: DB8ED438DEFD11F0BBECA30E5A6F56BC.roa (hash: Td97IJTs5fi+L0xPELDn6EkZ7N7tszHykx+DVx2HMl4=)
                          3: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: xeXe0W9LGadlWUHbrq3B2ViS6+U7W91OTOihQY9/fWg=)
                          4: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: cIljgUX9u7LYo/eVcmfxQWxLdJQ7vsFk54U+nDFtBl4=)
                          5: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: gU89Q3UCcTfIuonWf4oM4J8bmG7V6fm6L0kNg0N/Yj8=)
                          6: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8ih8ohTFBlcOehmTFPg4QmBKSI75XqIdXYTzNP+mssw=)
                          7: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: dg5M28BM7Q9OSqEdMHsSLtI4cW3tbLsfo6oxRxnZkgU=)
                          8: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: THinSV3E5HHG0rxGiH9voTblutCDfr1lVuBD4GRI9cI=)
                          9: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: YhmFklQYNFuVzlZwVyl13/fVO2Rx5D3vIX4W/p/maYc=)
                          10: BA007060162D11EEB79F703CC4F9AE02.roa (hash: 2tT35KvgWT6eSD3SMEte/ai9jtMm9HHJLln3LtY/FIM=)
                          11: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: utZF48o+V1iqViyrul4ouJSJVWfTBOJgEF5i7OYCMAk=)
                          12: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: icqWlmP2zqUN+YwmSN6Rkge3B7PWW5GQPImLsSSVMmQ=)
                          13: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: +3uZuY7OlFyg2jsDB/Kz4JEWGg0yxvoM0a3nsJBXDX0=)
                          14: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: hrBe2Pa2BarjYurRPqX3BOavVRlDYYYGwxyR3VQWUl4=)
                          15: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: Tc0OP8h4p96K0lAWOjeLDMbCL1ZxKDKH+Zne0effYn4=)
                          16: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 0nUZjvvfEq+idlxORxZdIF54lHoOJDVXKimVebHznwY=)
                          17: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: NyTfYihU81GPEUaJYODhHs69mOq8Zj00EZITNDmiBc4=)
                          18: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: lcNCXN4ALK0VGFhT1zX6j/V2lOrX3RIWe+TEHrIIfGM=)
                          19: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: u5rpKj8Hh6LNPUmnAjTjSQjEw6FcWzoOU3Lk+UX8OeQ=)
                          20: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: s4JLvZfEEcVWrVTGXPW1vZiV5kDqzl4x/TrNjlyz8lg=)
                          21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Xj0L2cktFCj9AGPASACSNG1ar3gPj1CqHZie3Ff3N/Y=)
                          22: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: s40dhU8PVwSIJYyVny3a6mMwcd7oSGfD4g601KJOsFI=)
                          23: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: /zsZlwDj2pT6fAq7GkplNYrQROZ2c4fzOAUgQTDgsk4=)
                          24: AE6990E4113711F18890BBBD1E3D8C67.roa (hash: a2AxOHkbgl20ZHN2XKba/Ra2y+MObHNRcBGOU0PNrU0=)
                          25: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: 5aSuYQAxBrg4hpOCVUyocxVAo2M2ZMhQd9eXn7fmUUM=)
                          26: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: rI2XTb2R2MdCZIREOxF9HZq/Z6L/AhVI3hF8SVkg8es=)
                          27: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: 5zBpGvGX5c+RGNoV+CNfoI4jKn3SVtOSoGuIjJJwB/4=)
                          28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: ohZ0rNcC4o/lvqqhJ5dRQl2sFSNT+9W0ZljDeoeU/f8=)
                          29: 94C16496222811EF99153155C4F9AE02.roa (hash: IhQ1zSbXXf4rr1X3pECpva9uGFFRgEG7ArayUjxk3XY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9795 (0x2643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Mar 26 15:55:19 2026 GMT
            Not After : Apr  2 15:55:19 2026 GMT
        Subject: CN=69c556e7-d2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:97:00:2c:b2:8d:17:5c:90:f1:e9:d6:01:
                    b8:3c:76:a9:51:37:38:10:74:70:a0:e7:16:e6:f3:
                    79:00:97:ab:76:6f:13:fa:12:2f:c8:69:40:1f:51:
                    cf:47:cb:63:29:46:a5:7e:22:90:7e:6e:78:12:70:
                    f4:d7:58:ca:e7:e8:5d:ac:4c:6b:b0:e2:0f:2e:bf:
                    22:47:ee:db:68:41:ae:7d:ab:87:6d:80:57:6c:87:
                    1b:f6:10:86:83:0e:ed:cf:80:32:d9:83:bc:57:e1:
                    76:0d:77:40:90:42:90:cb:f2:5b:8f:20:00:b3:4a:
                    15:5b:93:18:2d:cd:b9:4a:1c:68:c2:a6:4b:4b:74:
                    53:a1:9d:49:e4:5f:73:9e:74:43:0b:b6:b2:32:f0:
                    13:1b:5e:ea:99:e4:cb:25:2f:0c:31:a6:18:ed:86:
                    30:38:9b:f0:81:1f:c1:53:2b:e1:26:a5:15:49:b3:
                    d9:0b:3e:13:de:15:80:af:19:2f:9f:60:05:86:33:
                    67:35:09:8a:63:28:6b:b6:5d:0b:40:55:de:9c:41:
                    5d:d3:39:16:d3:e2:f8:dd:95:e5:e0:32:c7:98:ed:
                    10:24:ba:a4:18:48:71:d5:d9:65:fa:57:ec:d8:90:
                    8f:1e:3f:c6:a0:9e:a3:be:28:f6:e9:df:0e:6c:bf:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1A:88:80:D8:60:09:F4:30:9A:7C:F2:0A:22:75:0F:51:6F:48:BF
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:ef:42:12:3e:c9:99:a7:c8:d5:f6:c9:75:2f:41:6c:50:
         b0:9a:1a:f9:32:2e:11:99:72:a0:1e:6d:c3:02:d9:e5:ad:c0:
         e1:f0:30:6a:b6:23:c5:04:4c:7b:d4:e1:c1:04:2f:7c:d1:ac:
         33:6c:db:01:e6:ac:ac:c0:1b:4c:7d:04:d2:78:58:c2:c0:79:
         3f:b4:58:18:f5:be:48:1d:b8:57:89:12:af:f3:87:21:6a:67:
         b3:e4:04:67:d0:dc:03:a1:cc:d9:4b:bc:49:bd:30:7f:8a:1d:
         6f:c1:05:c0:c2:58:31:8d:3e:96:dd:83:9d:79:69:1c:d0:73:
         1e:41:4a:ca:f4:00:85:2f:22:ea:10:61:37:10:d9:e3:05:73:
         2a:58:6a:eb:50:93:eb:84:1e:c6:50:d2:9f:fc:56:6d:4b:bf:
         0e:ad:92:67:38:a5:a2:84:bb:69:92:d4:24:df:55:e6:2c:47:
         1f:4f:c1:93:86:8e:6d:c8:95:60:a8:af:5e:e3:24:73:56:c0:
         40:ee:e0:32:da:63:1a:bf:06:cc:86:28:47:2c:59:2c:74:21:
         84:c2:97:11:a1:50:04:88:16:da:be:92:66:62:e7:4b:8b:29:
         a5:62:53:42:25:5d:f3:53:ea:0a:07:29:fb:59:cf:e6:64:fe:
         95:87:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:13 2026 by rpki-client