Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier:          +DsQyoaslxzqoiO1zNIc2WL1f8x5IVPJh+MGa6eycKQ=
Subject key identifier:   F5:FE:32:55:A2:FB:9C:4D:53:D7:35:FA:00:67:AA:E0:C4:A7:45:9D
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0C95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number:          0C85
Signing time:             Sat 28 Feb 2026 18:45:10 +0000
Manifest this update:     Sat 28 Feb 2026 18:45:09 +0000
Manifest next update:     Sat 07 Mar 2026 18:45:09 +0000
Files and hashes:         1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: xejr4iyWxDYdrdkhSVz2er0lcyDyFJDCRmCLRDNfsmc=)
                          2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: EiyCu0vojKly9zo+I5SeQzaBIubHaZ4bVOiCN+YJMlU=)
                          3: 702B683202E911F097290F2EC4F9AE02.roa (hash: sacDAKMV0IlhxL+E1+gGomun+TIZdZwc4g1OZ/geqzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3221 (0xc95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Feb 28 18:45:09 2026 GMT
            Not After : Mar  7 18:45:09 2026 GMT
        Subject: CN=69a337b6-93e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:98:3e:b2:72:7a:78:16:68:58:81:04:44:
                    4b:ea:cf:47:91:2f:db:47:18:53:bb:c5:d6:fb:e1:
                    da:7a:56:4f:a0:84:4e:36:21:b6:b3:d3:9b:c6:3b:
                    d3:ce:a0:63:9d:65:9c:5c:62:0e:c2:5a:73:06:f0:
                    e8:bc:93:76:f8:71:72:cc:52:09:6e:98:de:cd:21:
                    ed:14:fc:dc:58:47:37:c8:b1:cd:3a:13:4f:36:71:
                    be:23:b9:7f:c9:14:ed:12:82:df:3b:21:56:a2:53:
                    d0:24:a6:25:14:05:bd:e6:f1:c9:17:20:4d:e5:07:
                    81:56:f7:4d:80:fc:61:92:29:d3:0e:6d:69:df:4d:
                    a9:75:2d:e9:4f:e6:df:83:a5:12:74:cd:6a:bb:d2:
                    d9:01:bf:91:f1:d3:46:00:6a:03:34:9c:20:6d:e9:
                    da:e3:75:ca:3b:5f:c0:84:69:79:90:5d:b6:f2:7a:
                    7a:44:20:7b:85:bf:9b:27:ba:8c:a2:17:0a:6d:5b:
                    b3:49:67:a1:04:25:12:f3:6d:da:66:7c:c6:f1:d5:
                    6b:59:c1:3b:20:27:85:9b:c7:37:b2:56:d1:50:e2:
                    00:3f:04:31:76:3b:96:34:d8:65:35:7f:1b:a5:8e:
                    5a:71:70:0b:33:1b:da:af:79:16:71:3b:80:a5:b9:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FE:32:55:A2:FB:9C:4D:53:D7:35:FA:00:67:AA:E0:C4:A7:45:9D
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:8d:01:17:31:23:70:f1:0a:c1:52:e6:90:28:11:89:f7:
         6f:7b:a5:13:96:6f:25:d4:65:c2:0b:6a:22:6f:12:bf:69:70:
         a8:1b:14:41:85:17:74:88:d1:12:49:e7:ac:69:1b:29:cd:c9:
         08:70:fa:72:0a:90:bc:5f:07:dd:af:cb:2b:92:c8:bd:f5:89:
         36:6d:68:23:2b:17:3c:e5:e9:2e:57:e9:43:18:c2:11:42:22:
         20:3f:75:de:21:3b:29:77:13:5d:8b:b7:1d:2d:15:17:17:f2:
         51:39:2c:fc:c5:11:47:f2:7b:50:2b:ee:67:0e:87:f6:13:bb:
         38:9e:ec:cd:7d:76:cb:54:a9:73:42:fa:a2:a4:65:86:4a:27:
         fe:7f:93:01:11:bc:71:94:44:bd:f7:00:cb:22:8c:f5:67:5a:
         36:28:69:b2:04:9b:e5:9f:53:4b:33:01:f8:e1:60:14:1b:a4:
         d6:63:28:74:53:44:df:66:25:eb:0d:41:07:a4:46:e8:82:ad:
         74:58:9e:05:72:ee:05:3a:51:e5:f2:d4:d9:0d:66:26:d0:ab:
         f6:53:eb:e9:35:b2:e9:44:a6:dd:c7:58:e1:c6:02:f0:33:53:
         04:12:a2:cc:ec:35:6d:fa:59:f8:55:5a:4b:12:77:0f:42:c9:
         14:65:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:09 2026 by rpki-client