Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
File:                     nyv9fYAM-hPpBIrhALSFFDASb9M.mft (raw, json)
Hash identifier:          XS0+fsRV5DuVeJEzVXHyK12CIJkAIrnrGFeslo4Nxh8=
Subject key identifier:   1F:D1:BB:EC:6B:13:0C:21:3D:AA:6F:9B:D1:F0:8D:26:4D:FE:13:37
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       05F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
Manifest number:          05DC
Signing time:             Thu 16 Apr 2026 23:01:21 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:21 +0000
Manifest next update:     Thu 23 Apr 2026 23:01:21 +0000
Files and hashes:         1: nyv9fYAM-hPpBIrhALSFFDASb9M.crl (hash: jUEFHh1UVqkE2b5FP7EtENWRc90l9V19fRs/DR4L4rI=)
                          2: FC03153ADBDD11F0AA14A9C858641951.roa (hash: hhEPdGonTdrWrjaL1TLGv61UHHy3/oRP1xXxDMe2SY4=)
                          3: 061796780C2511F199949558073D8C67.roa (hash: CFhJ2j6PzNLKmMtQJY2IEbcroEpirGdBOfvLhPskhS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Apr 16 23:01:21 2026 GMT
            Not After : Apr 23 23:01:21 2026 GMT
        Subject: CN=69e16a41-1e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:bf:be:ac:40:3f:68:ad:b4:b7:1b:fd:2d:
                    b2:f1:03:35:ce:f0:65:6a:01:18:c6:6a:4c:a4:66:
                    92:d0:b4:95:55:37:6a:90:11:94:89:0b:50:97:85:
                    7f:07:79:33:ca:a1:71:84:ee:c1:45:5f:64:8c:18:
                    4d:da:c9:03:53:a7:c5:35:de:4e:7b:49:15:d3:78:
                    2c:49:32:ac:8d:e5:6e:fc:42:6c:9e:97:3b:2b:33:
                    e6:c0:63:f1:d1:66:d4:94:62:0e:7a:53:78:1e:39:
                    4e:f8:dc:c8:67:b0:ac:4e:2e:04:9a:11:0e:46:9d:
                    cb:f5:e9:98:88:c3:a8:11:b5:29:64:38:cf:55:a7:
                    34:fc:38:27:e9:77:ba:9a:c9:bf:a5:84:ea:63:b4:
                    cb:d6:7d:82:45:a2:52:d7:12:d0:b8:5b:87:05:81:
                    df:4f:d9:56:9f:51:b5:e0:45:89:87:38:4a:a9:ed:
                    a3:8e:b6:a9:43:99:b9:f7:7c:9c:83:bb:a2:81:6b:
                    cb:bd:33:29:1c:b1:f0:3f:fb:9a:3d:5a:ef:fd:77:
                    7f:a9:a6:ad:ad:b3:ab:fe:03:97:ec:87:e9:16:d6:
                    97:7b:3e:75:17:c1:2a:ba:6e:71:99:c6:36:71:fc:
                    5c:e8:8f:c4:d9:f9:75:8c:f2:b1:4f:ae:cc:ee:90:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:BB:EC:6B:13:0C:21:3D:AA:6F:9B:D1:F0:8D:26:4D:FE:13:37
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:9a:c2:cc:79:b3:3a:86:df:9a:b7:30:03:3b:ad:b5:2a:
         99:98:b2:e4:9f:8a:fc:ca:17:24:fe:c7:84:1f:1c:c4:1c:c9:
         e6:5e:52:cd:1d:dc:d4:e9:18:81:aa:a2:d6:0d:9f:6e:fd:61:
         00:2e:5e:89:8c:fe:ba:12:2e:3b:bd:f8:2a:fe:fe:4a:46:02:
         6f:d6:18:c4:9e:54:2d:6f:5f:af:d4:71:f1:d0:fb:5f:a5:ae:
         7f:50:f4:41:88:d5:b3:bc:73:00:80:b1:f2:b6:36:df:38:54:
         81:a3:5b:b3:be:5e:ff:3e:7b:cc:f8:3e:88:05:79:e6:8a:dd:
         99:4e:46:ba:21:6f:6c:b0:25:a9:84:68:00:6e:d0:c1:1d:1f:
         db:fc:1a:89:ca:4f:9c:b2:f9:ed:26:aa:14:58:c9:7a:30:f9:
         2a:f8:ef:d8:38:67:17:2b:6c:36:5c:b1:26:d3:2d:03:14:a2:
         51:70:18:cc:03:e8:34:d6:39:7c:11:f4:a0:50:18:c2:ff:f6:
         44:3d:18:7b:92:4a:44:09:b5:8a:0c:28:cf:ed:a2:f1:ee:1f:
         8b:af:12:7c:0e:9a:9d:33:e4:70:2a:c7:a2:f1:67:e8:0d:ee:
         f0:d2:84:8f:d9:15:e8:7e:57:2e:7f:6c:75:d0:ea:cf:ca:12:
         b3:fb:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:18 2026 by rpki-client