Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
File:                     nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json)
Hash identifier:          3+aUs2fFHogp3fcK0YjqEStekxzx6jp1knngt3Rr0v0=
Subject key identifier:   31:19:73:2D:20:4A:B4:77:41:BE:82:70:5A:90:87:43:20:44:76:26
Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Certificate issuer:       /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Certificate serial:       0CF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
Manifest number:          0CF0
Signing time:             Tue 12 May 2026 18:19:46 +0000
Manifest this update:     Tue 12 May 2026 18:19:45 +0000
Manifest next update:     Tue 19 May 2026 18:19:45 +0000
Files and hashes:         1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: 2FoUyOjxpbWuncZti6P1jAHAjTgKlGluKH8CDPqmcbs=)
                          2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: isdogO69KQFGu46kiXPUMXjezpBNqbUl3557H/EGWLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
                          rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3321 (0xcf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
        Validity
            Not Before: May 12 18:19:45 2026 GMT
            Not After : May 19 18:19:45 2026 GMT
        Subject: CN=6a036f41-393b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:95:c7:b1:f0:bb:77:8c:e0:43:87:02:c2:
                    a7:a8:cf:4f:e8:94:80:5b:21:d4:a9:18:b9:8a:f1:
                    38:4c:e6:dd:a0:23:5e:d4:e6:37:39:a6:14:21:d2:
                    8e:68:3f:df:97:d9:82:0f:73:32:f7:e6:96:50:a1:
                    ea:5f:0d:58:b3:44:32:72:bf:7a:b0:46:eb:9d:cd:
                    4e:e7:7a:74:6f:fb:06:ca:51:cb:e9:56:5b:89:67:
                    cc:55:e7:82:73:70:9c:c6:f6:98:c6:e3:74:a9:05:
                    8a:79:25:fb:0d:ec:23:8b:16:ad:11:c6:44:14:7f:
                    d0:69:0e:01:3b:68:a1:ad:13:9d:f7:00:d3:19:81:
                    17:dc:bc:b3:d3:f3:e6:a7:1f:9f:d6:4c:a7:c1:8a:
                    e4:8e:44:c4:ea:ed:ce:15:2c:0a:53:f8:65:8a:c6:
                    2f:05:12:9f:7d:d6:65:0e:54:79:6f:1f:68:78:68:
                    eb:f6:4c:2b:ae:d3:58:11:0f:35:ff:9c:e6:b2:c7:
                    b7:08:24:b7:10:69:df:e7:37:7a:6a:dc:30:9b:1a:
                    c2:60:2e:44:36:0d:fb:08:2d:bf:06:c4:2f:ea:4f:
                    ba:91:bc:32:68:ea:2e:b3:6f:d0:92:c9:3a:4d:d3:
                    49:77:64:b7:86:e4:9a:09:b5:3b:1a:5a:5c:58:ca:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:19:73:2D:20:4A:B4:77:41:BE:82:70:5A:90:87:43:20:44:76:26
            X509v3 Authority Key Identifier:
                keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:66:ed:a2:ea:fe:e3:3e:2d:2c:ee:1f:e2:1a:35:2a:6e:e3:
         6e:b0:1d:9f:13:9b:d9:22:de:5f:da:94:ae:4a:cb:ca:a6:c7:
         2b:73:b5:ec:f6:24:2e:1f:36:77:e6:fd:4a:2c:de:ce:d1:31:
         6d:68:dd:e9:96:31:a0:3f:9c:76:b5:67:ed:5c:f1:5e:6b:7f:
         f0:6d:89:ed:70:6b:94:cb:71:0f:0b:61:4a:b6:ad:62:24:b8:
         5d:53:30:4a:f9:a3:cf:be:fa:27:ab:ca:61:64:57:f7:83:99:
         05:53:cd:fc:af:ae:c5:30:d6:51:89:02:29:ef:00:57:87:88:
         c9:1a:63:0c:dd:dd:9a:63:70:0b:b3:05:69:92:7e:07:e6:2d:
         07:ff:b0:0e:06:52:88:93:e5:b9:53:47:d1:1d:2b:34:c1:0c:
         ad:40:b9:38:51:41:4f:94:54:83:d7:f2:1f:7f:00:e2:ab:67:
         bd:e9:81:bb:f5:4b:6d:81:ae:2b:22:06:07:d4:42:c8:a3:f7:
         38:a6:67:1d:73:6c:9c:d0:ce:6c:30:2c:c9:96:fb:23:2d:0f:
         61:9a:02:4a:8c:79:d5:f3:8a:2d:47:a1:1e:2d:80:31:8e:36:
         c6:22:db:fa:eb:13:97:4c:70:39:18:ca:e3:d1:1a:d5:33:52:
         f2:1d:47:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx
NUJEMjc0REYwHhcNMjYwNTEyMTgxOTQ1WhcNMjYwNTE5MTgxOTQ1WjAYMRYwFAYD
VQQDEw02YTAzNmY0MS0zOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwSVx7Hwu3eM4EOHAsKnqM9P6JSAWyHUqRi5ivE4TObdoCNe1OY3OaYUIdKO
aD/fl9mCD3My9+aWUKHqXw1Ys0Qycr96sEbrnc1O53p0b/sGylHL6VZbiWfMVeeC
c3CcxvaYxuN0qQWKeSX7DewjixatEcZEFH/QaQ4BO2ihrROd9wDTGYEX3Lyz0/Pm
px+f1kynwYrkjkTE6u3OFSwKU/hlisYvBRKffdZlDlR5bx9oeGjr9kwrrtNYEQ81
/5zmsse3CCS3EGnf5zd6atwwmxrCYC5ENg37CC2/BsQv6k+6kbwyaOous2/Qksk6
TdNJd2S3huSaCbU7GlpcWMpNPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEZcy0g
SrR3Qb6CcFqQh0MgRHYmMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2
Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w
ZXR3YklkdlRlWTBWdlNkTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA22btour+4z4tLO4f4ho1Km7jbrAdnxOb2SLeX9qUrkrLyqbHK3O17PYkLh82
d+b9SizeztExbWjd6ZYxoD+cdrVn7VzxXmt/8G2J7XBrlMtxDwthSratYiS4XVMw
Svmjz776J6vKYWRX94OZBVPN/K+uxTDWUYkCKe8AV4eIyRpjDN3dmmNwC7MFaZJ+
B+YtB/+wDgZSiJPluVNH0R0rNMEMrUC5OFFBT5RUg9fyH38A4qtnvemBu/VLbYGu
KyIGB9RCyKP3OKZnHXNsnNDObDAsyZb7Iy0PYZoCSox51fOKLUehHi2AMY42xiLb
+usTl0xwORjK49Ea1TNS8h1Hkw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:27:55 2026 by rpki-client