Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          yppvrq5izhjus+QpDcY47jSOEn/Eae5fWgkExU/U8fY=
Subject key identifier:   A3:45:44:FF:2F:83:E0:DD:5E:26:B9:37:69:4A:99:E0:57:A1:BA:FF
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          2396
Signing time:             Fri 24 Jul 2026 16:01:46 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:45 +0000
Manifest next update:     Fri 31 Jul 2026 16:01:45 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: QVkf+oas5DVnDpTEw+ObjyG7DwiYXMRH6APsfKEcD+Q=)
                          2: 94C16496222811EF99153155C4F9AE02.roa (hash: rblIsywW3HeGBV9SYXZ48ueArKjs04dIk6+AvNganu0=)
                          3: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=)
                          4: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak=)
                          5: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Ifg7lXJOQP+18o4CZaAo7GSgxBafrvA0XUWHav5Uo0c=)
                          6: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: kGjjVFLeftJ4iWIxg8Q1sbQUrd0A5MgOTgnq5zEqwbE=)
                          7: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=)
                          8: BA007060162D11EEB79F703CC4F9AE02.roa (hash: yhtnb/OOA/wXXD8maZO8n4AsJMc9HBQT2aQqAHCJfOQ=)
                          9: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: X8qoiiScFa9eVjABlsfQ/cyRc8nDS1tlAxe/2JVazO0=)
                          10: E1B38BC080C811F181550F2C98A30FBC.roa (hash: WRADBx/SaXJk7j6yqZeKGAjOAQr20gzsAPuwRVAsDf4=)
                          11: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=)
                          12: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=)
                          13: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: CjGoyKN0HrGuZB1eGY3YN8uhsmzlKryekK6FbSvP2zk=)
                          14: CE013B0E80C811F198040B2C98A30FBC.roa (hash: Ar17Y2pgM2IRJ1et+drWpyUgBGRbm+nUgjvhgOIWiGw=)
                          15: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: EedI26Sx2994grPUcSKFjJ1j0cv3YZqLAHCyNSdQVkI=)
                          16: E2174D9E525211F1980710C0B7833773.roa (hash: UXHBEi6kZUQ14KonHrPxrJtLjBz35nVjc3YNK54R6Qw=)
                          17: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: 9nyxv5vDqtD62E6UbjNswDwUiNqVOWE9KMQNkQhnhtU=)
                          18: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=)
                          19: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw=)
                          20: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q=)
                          21: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=)
                          22: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM=)
                          23: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: zQF+T1/pOLzDuzv2qEa0T9BdUI0ppH7RANttefdBlH0=)
                          24: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: avBOKsbWyKUECTQ8CZJG8sV4Ncdv4AJ8R93izTNrcYY=)
                          25: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: F/3d2MdmWAQWy2/KkyrR/TKf6kjUWhedoqi+Mnvoopg=)
                          26: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Ij+zJZ5CkWG7jXCiWRJZjJ77nuWw4Opj7SW89egSHU=)
                          27: 229B83C4685811F180A7311C9C47A888.roa (hash: ZDnamRNvi7dksMJwyc/mAFv1Y9uc7PCP3+Gsifgq/jo=)
                          28: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM=)
                          29: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: v07Pprp9lf3TRtO+9xznb1E1Na5Oj+IgXg/hHlg/17g=)
                          30: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9909 (0x26b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 24 16:01:45 2026 GMT
            Not After : Jul 31 16:01:45 2026 GMT
        Subject: CN=6a638c6a-7bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:39:57:61:07:eb:44:93:2d:a7:ca:cc:2d:
                    37:60:a9:df:54:6f:e5:0e:3e:d5:39:d6:d7:4c:1f:
                    32:a1:a8:fd:05:ab:dc:1e:68:cd:50:fa:3b:f6:89:
                    f4:3d:9c:a4:81:cc:b5:64:fc:e9:9c:fe:af:33:22:
                    ad:a1:3f:be:26:07:b4:56:8e:fa:ca:6f:d2:03:22:
                    33:d4:ad:69:33:22:45:d2:cd:61:9e:6c:e8:a9:e4:
                    e4:7d:95:5e:c3:0b:e1:38:92:34:b6:39:f4:1e:e6:
                    d0:1e:d9:97:06:2d:5d:0b:6a:f4:16:20:e1:9f:c1:
                    8e:44:60:63:ba:9b:84:ea:30:fa:4f:c1:9e:d0:cd:
                    c8:81:68:11:79:50:46:09:b0:db:74:f4:5b:4d:78:
                    d4:7c:d8:e0:20:4f:bd:f9:00:a0:9a:8f:69:99:10:
                    cf:fe:15:a0:8f:e0:d3:a0:a6:e2:4c:6d:be:65:79:
                    4a:0b:72:aa:4e:64:c3:86:ba:86:d7:1b:97:f6:44:
                    87:94:1e:49:4c:e2:9e:f6:29:25:85:6f:f3:78:a4:
                    a2:7a:dd:8f:5f:71:6e:5a:8c:94:40:7a:00:86:bc:
                    28:9d:66:51:9d:7f:40:4a:cb:22:a0:6a:37:ff:8b:
                    16:7a:f6:7d:ec:19:5e:bf:b8:6f:96:57:2e:e0:0c:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:45:44:FF:2F:83:E0:DD:5E:26:B9:37:69:4A:99:E0:57:A1:BA:FF
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:a9:af:b4:c8:6f:d6:d6:ed:6d:15:fc:db:c0:bc:58:1d:
         6e:e7:52:89:b3:46:e6:6f:8a:20:70:2d:1c:c5:37:cd:8c:b2:
         87:a8:e1:02:ed:15:90:a8:2c:7b:d9:b2:cf:dc:e8:6f:08:be:
         23:b3:da:7e:e1:a8:5c:e4:89:94:34:3e:1a:24:11:b3:89:47:
         2d:ea:bd:42:db:9a:d3:c2:39:9e:2f:97:dd:b3:f4:af:13:cd:
         ac:86:45:93:1e:95:a2:d9:95:69:32:1c:d1:c7:67:10:dd:df:
         5e:50:7f:f4:f7:ad:9e:30:a0:dd:21:8b:8f:7b:4a:3d:e0:55:
         0f:3b:a0:5c:2a:ab:4a:b3:94:63:dc:d5:6f:01:75:98:1f:2e:
         c5:50:55:a8:b5:25:cd:74:09:1f:7c:91:19:4e:46:91:09:ca:
         00:6f:58:96:22:ae:eb:da:92:83:22:f5:08:3b:80:18:ac:c2:
         b8:8f:03:ea:cc:1e:91:a4:56:ce:18:4c:4c:4f:32:c4:92:58:
         f8:4b:9a:6b:d1:36:5e:c6:6e:f4:ac:44:a2:cb:b6:f5:3b:d2:
         62:dd:af:dd:a5:c2:29:59:d6:78:d9:22:1f:bc:c0:7e:27:5f:
         e9:6d:86:19:45:49:3a:6c:6e:17:12:07:db:c7:99:44:e5:0c:
         38:e1:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:38 2026 by rpki-client