Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
File:                     NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json)
Hash identifier:          MwjWGWPlqTHaJMb1ltfmHUP0bxMm69IgEGm5EqYfrMI=
Subject key identifier:   C8:96:E2:38:0A:A2:8D:90:91:1A:32:BF:63:3A:A0:1C:6C:DC:62:40
Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
Certificate issuer:       /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
Manifest number:          0121
Signing time:             Sat 13 Jun 2026 05:49:29 +0000
Manifest this update:     Sat 13 Jun 2026 05:49:28 +0000
Manifest next update:     Sat 20 Jun 2026 05:49:28 +0000
Files and hashes:         1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: h5KfU82CjaMKCDwgSQhsqueoARRiPR2daiuCp9qIirE=)
                          2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: 5VO9AYfUls793WW6aylahYoLQQVtZJJZe9EelPOo2yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
                          rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
        Validity
            Not Before: Jun 13 05:49:28 2026 GMT
            Not After : Jun 20 05:49:28 2026 GMT
        Subject: CN=6a2cef69-dba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:6d:e9:53:0f:31:1e:64:36:02:91:ba:75:
                    8b:3d:b8:43:ba:8a:f3:57:3f:dc:4f:33:b9:2e:e3:
                    0c:f2:ea:6b:f5:dd:04:b3:63:37:c4:e0:8b:45:d6:
                    02:e6:ea:3c:97:b3:5d:f9:96:4d:04:e4:3c:89:5b:
                    4d:a3:f4:72:db:e3:e0:c3:3b:4b:41:17:b6:70:95:
                    d3:68:a5:fd:5b:90:6f:b2:ac:9c:18:c2:e1:37:6c:
                    99:f5:95:e3:b5:77:35:64:c1:c9:85:c0:37:3f:ea:
                    e7:f5:07:2b:e2:28:98:7a:68:3e:ee:57:f1:41:ce:
                    1c:34:b7:94:57:74:bc:b0:45:52:cf:bb:5b:ae:6b:
                    36:5f:84:db:b7:dd:0f:81:49:e9:6f:7b:14:61:27:
                    11:c6:ea:38:c5:20:d1:ad:a4:3a:29:68:62:d4:d8:
                    7e:fe:22:d2:bb:70:d1:27:ce:52:b5:35:32:ab:6b:
                    35:d4:3f:b4:93:28:cc:c2:50:e3:3b:63:0d:12:54:
                    b5:dc:f3:73:5a:03:15:c8:1f:38:07:ef:a7:ce:82:
                    bc:f8:0c:05:60:b0:a4:d6:95:f4:9e:e2:e8:92:57:
                    af:88:bf:76:c5:7b:6b:b5:8d:c2:ba:8f:ea:62:85:
                    ec:b3:60:b3:c7:04:7b:b5:2e:7d:00:99:0d:39:5c:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:E2:38:0A:A2:8D:90:91:1A:32:BF:63:3A:A0:1C:6C:DC:62:40
            X509v3 Authority Key Identifier:
                keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:68:a1:3e:fb:35:10:44:89:5d:24:0f:ab:b2:3c:3f:62:0a:
         2b:64:cc:9e:be:c7:1c:1d:67:5a:1f:15:8a:33:f0:0e:44:9b:
         cc:f0:2d:84:db:6a:d6:ce:4e:c9:3e:f0:a6:bb:b2:ff:8d:ed:
         25:47:78:87:ba:d6:7f:1b:c4:bc:da:d9:75:03:a7:04:83:c0:
         4a:91:80:ce:c7:ea:24:22:45:28:cb:e7:63:79:91:46:c0:51:
         1d:3c:5d:1b:46:cc:7d:4b:ee:a6:36:51:c7:7a:07:1d:4f:60:
         27:51:84:64:f1:10:c9:73:3d:6b:5e:4e:a6:58:6f:77:18:88:
         1b:5e:e7:4f:78:88:d7:20:06:8a:ac:f2:46:48:e2:e5:7e:a1:
         9a:5f:d9:4c:13:5c:04:8a:fb:12:1a:06:c7:da:1e:14:5e:17:
         4a:b7:f0:37:2b:53:ff:45:c5:b1:56:50:31:29:e5:b2:ab:d1:
         4b:d0:41:6e:34:03:bf:f8:c5:35:26:d7:7b:10:42:99:50:74:
         1c:40:eb:0c:e9:3b:f5:9d:aa:a9:40:16:84:72:33:9a:44:4e:
         5e:2d:28:f4:a2:c9:ab:64:a8:b9:af:a5:d3:13:aa:ec:a2:29:
         c8:7b:fa:f6:fe:9a:68:d2:ea:04:1a:b6:28:77:9f:0e:54:9d:
         21:a6:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:55:28 2026 by rpki-client