Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File:                     nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier:          q6448180YosRTNbSrATemkKasYY4dymM9FhO5jBouoA=
Subject key identifier:   93:63:C9:BE:FD:E8:D3:B2:D9:38:E5:A1:24:37:24:5A:40:F8:B1:2C
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer:       /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number:          01CC
Signing time:             Wed 25 Mar 2026 03:03:23 +0000
Manifest this update:     Wed 25 Mar 2026 03:03:23 +0000
Manifest next update:     Wed 01 Apr 2026 03:03:23 +0000
Files and hashes:         1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: hmj3+mEBj+YIU7sPs6Ua+O608dF6cGG3QBkZJT9VQvU=)
                          2: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
                          3: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
        Validity
            Not Before: Mar 25 03:03:23 2026 GMT
            Not After : Apr  1 03:03:23 2026 GMT
        Subject: CN=69c3507b-bb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:ae:73:a9:e2:0f:46:89:22:5b:88:26:e8:
                    05:2e:4d:4d:ef:65:ff:ef:1b:c2:f5:b1:f7:05:32:
                    05:4f:c1:98:47:f6:e0:f2:d4:b4:47:73:76:3e:7e:
                    00:23:e9:84:fb:47:05:0b:1c:ec:06:8a:92:93:39:
                    03:be:38:ba:75:32:d0:4f:61:6c:f1:61:eb:98:e2:
                    94:99:bd:0f:d1:39:47:3d:e8:c2:a9:f7:3b:a4:5e:
                    32:6f:d1:e6:b1:ad:0b:1d:44:6b:cf:71:7e:24:d1:
                    8d:26:46:6c:8d:24:76:49:6e:6a:79:c0:f4:d6:96:
                    19:81:79:bf:07:26:72:a3:99:11:b8:90:4c:8b:e0:
                    1c:cc:ec:4f:52:cc:c5:c9:cf:8f:e1:c1:56:fd:1e:
                    b2:63:d4:6c:1d:b3:b6:08:be:49:88:d9:c2:ef:5f:
                    86:4a:c4:01:51:ad:07:4b:26:2f:97:b8:1e:b0:22:
                    26:a7:4a:48:b8:a6:f6:ae:2e:0d:24:79:76:7a:5d:
                    07:00:7c:38:12:21:0b:f5:b5:e8:aa:f8:f8:14:b8:
                    ce:ec:55:9a:79:ac:52:55:48:bc:f5:5d:a0:df:45:
                    75:d4:2b:d5:92:03:dc:7b:56:8f:61:12:b4:e0:21:
                    38:a0:52:b7:34:07:84:c4:53:8a:79:3a:d4:d2:44:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:63:C9:BE:FD:E8:D3:B2:D9:38:E5:A1:24:37:24:5A:40:F8:B1:2C
            X509v3 Authority Key Identifier:
                keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:ab:04:6d:dd:28:35:af:a2:86:5e:c3:db:76:cd:7c:5d:
         52:f2:45:34:65:3d:2d:f8:af:e6:d8:35:ba:2a:57:87:e1:c9:
         80:e5:82:ae:67:5e:6a:bb:78:c9:0c:d3:89:96:14:7f:c5:14:
         57:a9:11:03:9b:45:cf:74:6e:67:ff:00:4e:50:35:36:56:7b:
         ee:72:27:d1:65:6e:52:0e:02:65:81:02:7f:0a:b6:e5:a9:a6:
         26:df:7f:72:6d:58:ff:51:28:cf:ab:96:46:6c:5f:09:93:88:
         4f:f1:a0:a3:58:51:5e:2b:5e:b4:e8:03:af:e9:ca:86:36:a9:
         f1:c6:30:b7:b5:22:04:78:7c:03:77:9e:b9:f2:77:1b:c0:2f:
         11:70:5d:2b:22:9c:b3:a7:a2:d6:b4:01:45:93:ef:f5:95:ee:
         aa:a1:b3:fd:25:47:da:42:61:f6:57:dd:06:24:4f:a6:dc:b7:
         3c:29:ec:5c:9a:c7:b9:2a:07:a7:61:74:6f:7d:7b:e9:f7:68:
         a2:9c:f3:1d:76:47:31:d4:0f:76:9b:f1:76:eb:ce:3c:4a:89:
         82:cd:e8:c4:6c:8f:6b:09:d5:c9:a3:dc:0a:38:f3:bb:48:70:
         66:e2:e6:b2:98:b3:37:69:86:cc:a4:2b:07:42:12:9d:98:01:
         ec:f6:84:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3
NjhGMUU5OEYwHhcNMjYwMzI1MDMwMzIzWhcNMjYwNDAxMDMwMzIzWjAYMRYwFAYD
VQQDEw02OWMzNTA3Yi1iYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp6Kuc6niD0aJIluIJugFLk1N72X/7xvC9bH3BTIFT8GYR/bg8tS0R3N2Pn4A
I+mE+0cFCxzsBoqSkzkDvji6dTLQT2Fs8WHrmOKUmb0P0TlHPejCqfc7pF4yb9Hm
sa0LHURrz3F+JNGNJkZsjSR2SW5qecD01pYZgXm/ByZyo5kRuJBMi+AczOxPUszF
yc+P4cFW/R6yY9RsHbO2CL5JiNnC71+GSsQBUa0HSyYvl7gesCImp0pIuKb2ri4N
JHl2el0HAHw4EiEL9bXoqvj4FLjO7FWaeaxSVUi89V2g30V11CvVkgPce1aPYRK0
4CE4oFK3NAeExFOKeTrU0kSpZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNjyb79
6NOy2TjloSQ3JFpA+LEsMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx
N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2
WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr
WVdnaTN3UF8yQmQyang2WTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbT+rBG3dKDWvooZew9t2zXxdUvJFNGU9Lfiv5tg1uipXh+HJgOWCrmdeart4
yQzTiZYUf8UUV6kRA5tFz3RuZ/8ATlA1NlZ77nIn0WVuUg4CZYECfwq25ammJt9/
cm1Y/1Eoz6uWRmxfCZOIT/Ggo1hRXitetOgDr+nKhjap8cYwt7UiBHh8A3eeufJ3
G8AvEXBdKyKcs6ei1rQBRZPv9ZXuqqGz/SVH2kJh9lfdBiRPpty3PCnsXJrHuSoH
p2F0b3176fdoopzzHXZHMdQPdpvxduvOPEqJgs3oxGyPawnVyaPcCjjzu0hwZuLm
spizN2mGzKQrB0ISnZgB7PaE4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:30 2026 by rpki-client