Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File:                     nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier:          6vE8XFoK5nVqtTM4N6zPoiOhQvXL7H2neB8h4vjiOTw=
Subject key identifier:   3F:ED:9B:F4:4D:88:94:16:5C:D5:CA:6A:B2:85:F8:82:2D:F7:CB:91
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer:       /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number:          4C
Signing time:             Sun 01 Mar 2026 09:41:54 +0000
Manifest this update:     Sun 01 Mar 2026 09:41:54 +0000
Manifest next update:     Sun 08 Mar 2026 09:41:54 +0000
Files and hashes:         1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: JnpVS3zn505ZYIpLOcK9k1BKYSZB5SyYfbvn9k6V7vU=)
                          2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: V9p3VnVVXAQzSFcHBfkfDtu8sHJ32uFT2t4ErkB7q/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
                          rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
        Validity
            Not Before: Mar  1 09:41:54 2026 GMT
            Not After : Mar  8 09:41:54 2026 GMT
        Subject: CN=69a409e2-6e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:38:a7:37:64:a2:5b:5b:ec:93:54:76:05:
                    fc:31:b7:e4:a5:67:f1:b3:48:2e:22:2f:96:29:4a:
                    ae:f6:27:f1:0c:fa:6b:9b:90:ed:9f:b4:18:0f:20:
                    26:02:dc:1e:34:8d:47:70:cd:2c:48:12:34:fa:b4:
                    bb:bf:07:94:cc:74:b4:4a:a0:e9:e6:8f:84:f1:b5:
                    a2:d6:77:80:68:bc:67:c2:cc:ff:1d:73:24:91:54:
                    7f:df:7e:87:6c:5b:e2:88:2e:87:f3:69:cb:97:51:
                    79:85:3c:49:93:e3:6d:94:58:98:e7:26:0f:fb:19:
                    f8:40:6d:cb:68:e6:4e:1b:67:3f:ac:c6:4a:f8:b5:
                    64:f0:69:b0:a5:c8:8d:95:45:7b:6a:4c:f1:57:73:
                    4e:eb:92:83:c0:0a:03:6b:16:ab:5d:c0:42:aa:29:
                    c5:d2:ec:aa:dd:18:99:35:e4:9d:63:f8:3b:16:9a:
                    d5:7b:04:5f:71:04:57:2f:39:95:61:ba:4b:25:79:
                    c4:f8:2a:7c:a1:45:75:d8:8c:d8:43:52:40:d4:4b:
                    ac:0f:10:bd:b0:4e:7b:6e:2a:68:d5:57:c2:1d:1c:
                    26:be:bd:19:f0:50:87:86:d1:4c:3a:03:b3:0f:c0:
                    a7:2c:9c:e3:31:64:61:75:08:4a:ea:98:7e:4b:52:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:ED:9B:F4:4D:88:94:16:5C:D5:CA:6A:B2:85:F8:82:2D:F7:CB:91
            X509v3 Authority Key Identifier:
                keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:af:dc:ea:38:46:75:0b:86:3f:26:ad:f2:34:c9:8c:c8:35:
         56:d4:45:c1:e9:b5:7e:3e:f6:49:e0:0b:a0:c8:aa:e8:52:3f:
         31:da:a5:f0:47:dd:0d:46:07:74:b2:f3:b2:d3:cb:59:73:6a:
         88:b6:ae:73:d7:8b:57:e1:06:fa:61:dc:21:01:52:21:42:e3:
         4a:3c:c4:d7:c2:92:c8:4f:94:5e:ba:98:29:3e:c0:3a:7a:0e:
         e4:ab:6f:aa:25:b5:bc:5d:ae:19:b3:4c:31:e3:3b:5f:95:4a:
         d8:5e:1a:2d:ca:41:b8:37:57:1b:ac:e8:2a:4c:f0:6e:43:b3:
         21:e8:19:14:3c:4d:1b:8a:00:85:8e:e2:26:d2:7c:90:46:e5:
         af:d5:f4:89:d6:31:d6:2a:05:21:fa:65:21:48:77:09:1f:9c:
         32:58:b2:29:9c:3a:88:30:4c:5c:6b:6e:f1:96:ed:db:54:e5:
         86:6a:49:01:0a:86:84:fc:cd:29:c5:d5:04:d1:fb:c0:91:4a:
         07:75:f3:1f:63:69:fd:d4:a1:44:4c:09:94:0b:34:bd:10:08:
         97:87:ec:1d:87:fe:43:b5:0d:15:97:66:96:3c:c6:b9:5b:05:
         61:b4:42:64:f3:7f:26:c7:3a:81:aa:81:62:23:98:e3:f5:47:
         ed:d3:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:44 2026 by rpki-client