Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File:                     ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier:          HDuy/AIRW9D2Kmyyv87FHHdCEEU2SEzOLmBnHxshjJY=
Subject key identifier:   4C:95:0E:AA:57:54:1C:B5:C3:C5:50:B5:29:71:F6:DB:71:3F:80:F8
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer:       /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial:       0AC0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number:          0AB6
Signing time:             Thu 16 Apr 2026 19:23:07 +0000
Manifest this update:     Thu 16 Apr 2026 19:23:06 +0000
Manifest next update:     Thu 23 Apr 2026 19:23:06 +0000
Files and hashes:         1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: 1GARfmMjUJizo0uCi6CIQT96JWsdnd4WsSNvO5YPM9I=)
                          2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
        Validity
            Not Before: Apr 16 19:23:06 2026 GMT
            Not After : Apr 23 19:23:06 2026 GMT
        Subject: CN=69e1371b-97d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:5f:d7:e6:98:62:6f:2c:2d:86:e1:31:29:
                    f4:69:85:1e:1d:13:ab:36:33:1b:55:45:04:58:16:
                    4e:45:d1:ed:7a:99:5b:82:d7:61:6a:a0:a1:42:b4:
                    83:f4:e5:79:70:c5:2c:cb:b1:e5:07:2c:76:c5:d6:
                    c8:ed:2a:e1:3b:a1:af:c1:88:1c:1b:79:cf:f6:aa:
                    80:22:2b:26:d0:0a:0d:1e:e8:be:95:18:dd:c8:a6:
                    f7:1a:48:41:20:e5:f9:71:f3:75:eb:41:49:f3:6f:
                    54:35:4e:d1:e2:9a:ec:84:46:c3:47:83:56:f8:63:
                    c3:9a:38:1d:c8:f1:48:05:22:27:4a:87:80:9f:a3:
                    b8:ba:97:3e:cb:5a:db:b1:11:1e:20:35:26:70:19:
                    c7:ef:cf:00:29:e6:c6:b0:ea:30:e7:76:72:2d:6c:
                    5a:d0:f3:ac:4e:4e:cb:5f:78:26:1c:3a:bf:69:7b:
                    07:a1:02:03:7c:72:ef:53:6c:8f:a4:a4:5d:9f:61:
                    b6:1c:45:8a:04:b4:01:b0:79:10:f4:00:59:be:98:
                    22:ca:13:8c:10:39:6a:4e:ef:ed:b7:33:7c:a7:7e:
                    70:8d:cf:7f:a5:f6:b3:1f:e9:79:57:17:55:fb:ba:
                    4e:05:94:c9:fb:1e:61:81:4e:f9:81:89:22:49:b8:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:95:0E:AA:57:54:1C:B5:C3:C5:50:B5:29:71:F6:DB:71:3F:80:F8
            X509v3 Authority Key Identifier:
                keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:88:fc:d5:2a:00:19:f5:1d:62:8a:3c:58:92:f4:51:28:09:
         ae:08:e7:88:6e:a9:db:2b:7b:c5:9f:db:60:34:14:d6:1b:04:
         e6:6e:fe:e9:dc:ea:7b:36:38:98:33:70:d7:1e:95:0c:32:26:
         51:79:c9:24:95:ea:76:42:7d:d1:97:c6:30:25:e9:50:12:ec:
         9f:20:e3:c2:dd:87:54:d2:8f:34:95:e1:9e:c7:63:08:f4:29:
         e7:d2:4d:9f:b2:84:3b:d5:a0:fe:7c:c5:f9:d2:28:d0:87:4f:
         d0:32:dc:0e:59:9a:06:9f:06:df:e9:fc:cd:17:b9:17:ff:30:
         50:bf:de:22:da:2d:53:ff:f5:7b:a4:cf:53:c9:b5:fa:2d:c0:
         f6:a5:12:84:e2:36:d5:fc:61:c7:bb:ac:01:e3:23:07:69:18:
         56:cc:ed:ce:e1:bb:bf:93:39:80:14:9f:a2:46:34:6b:a6:fd:
         c8:1e:22:a1:18:14:06:a3:4e:c9:b0:46:1d:50:fa:44:8b:53:
         f7:10:7c:e6:7b:76:d9:40:1b:eb:db:aa:62:ac:d2:1a:a8:be:
         27:ae:68:d7:0b:9e:fd:93:3f:0d:b1:20:82:3f:f0:4d:bb:17:
         d6:73:5b:d1:0a:c3:41:08:db:6f:c9:3a:80:31:f8:fb:32:14:
         c2:39:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:55 2026 by rpki-client