Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          bo/kVzpg9EhTWTvEq4peWV+gqrJGGhRXjE+2SbDkq7I=
Subject key identifier:   EA:03:C4:ED:3A:6A:0B:45:0D:08:73:78:2A:90:AD:02:A3:A0:E9:CE
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       098D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          095D
Signing time:             Thu 16 Apr 2026 20:02:53 +0000
Manifest this update:     Thu 16 Apr 2026 20:02:53 +0000
Manifest next update:     Thu 23 Apr 2026 20:02:53 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: +D+OO4L5vlZjqZ4uOoE8Luzcp6kiH2335xqwLPv+79w=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: 7BcXlcd3LJPGSVAJ0cpsMaAQmbsNPhOb+ijpOwrVFzQ=)
                          3: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: mdaUyLNP5ILBUXwjj5qxgg+9hrAAfPyxuDqIwoe7rWU=)
                          5: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: jmiRcmGtCSPQ80tETmfEOVJ+GurX16ZfdMdpnSOQ5WA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Apr 16 20:02:53 2026 GMT
            Not After : Apr 23 20:02:53 2026 GMT
        Subject: CN=69e1406d-3ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:9b:2e:51:6c:f5:fe:3b:95:18:79:36:a6:
                    a5:8d:9e:39:2c:5e:60:16:b1:d7:0a:47:ea:9c:cb:
                    ad:20:a0:ba:48:9a:73:1c:0f:9e:70:0b:d4:b3:01:
                    0b:0e:57:34:f4:14:65:97:ba:76:6a:b8:dc:7c:f2:
                    bf:dd:ad:87:49:7c:90:4e:ad:de:fa:00:ac:a0:83:
                    ee:ae:b2:52:c3:23:e2:ea:e3:d1:a2:43:52:18:4c:
                    e0:57:0c:d0:25:81:9e:09:b0:01:9b:ec:4d:cd:01:
                    9e:9a:78:17:e1:56:c6:e6:43:57:d0:fc:41:1a:0a:
                    6e:3b:84:13:30:76:92:4e:97:c8:ee:9e:bf:fd:0d:
                    fc:f3:92:ae:f5:e9:70:ec:3a:e7:9b:2e:78:c0:51:
                    e4:fd:f0:91:0a:93:f8:5d:63:8a:38:fc:ff:20:b3:
                    25:06:5b:ea:66:7a:07:bd:58:fa:62:21:fa:f4:b8:
                    a1:5b:79:f4:a6:a4:22:a7:4f:eb:cc:e0:e7:19:23:
                    b1:33:f6:f8:97:f9:20:f1:3a:c0:1d:17:1a:2a:63:
                    ee:c7:ad:0c:c3:c3:81:02:5e:d6:33:6f:4d:d5:75:
                    3b:ad:30:80:fa:d9:3c:ed:1b:cc:66:0b:da:5d:97:
                    1c:d8:94:a5:5c:ae:26:e1:4f:ee:eb:18:f0:a5:e7:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:C4:ED:3A:6A:0B:45:0D:08:73:78:2A:90:AD:02:A3:A0:E9:CE
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:32:b3:1c:6a:bc:d6:42:a2:8d:3d:ba:2c:bc:4c:86:90:21:
         8b:79:76:cb:fa:3f:f0:d3:9b:1d:7f:41:23:e2:c0:f4:f7:77:
         11:77:d4:d7:19:13:99:20:9c:9f:ee:5e:6d:27:a0:e0:06:17:
         ea:85:e7:e1:be:7f:2e:23:e6:af:1c:54:93:d9:09:01:2e:2b:
         6a:73:de:db:72:d7:60:9c:69:dd:e0:cd:a5:04:c7:d9:40:ae:
         08:13:cd:55:fb:29:b3:ef:91:3d:1c:67:e8:93:42:10:8c:88:
         6c:ea:c9:66:86:ba:e7:87:e0:2a:42:30:76:05:ec:f2:9f:d0:
         41:86:1f:46:c7:d8:25:04:10:5e:db:d4:02:9f:3c:4b:12:a8:
         b9:e7:ae:7b:73:65:0d:ed:c7:5e:56:0c:2a:4b:e2:ce:8d:1d:
         65:b3:8d:ea:37:7e:da:34:21:d1:96:aa:3b:4b:6f:8d:ec:82:
         8b:4e:85:83:8a:33:3c:cf:3c:95:07:ce:0d:f9:fd:d6:29:f0:
         8e:89:a7:e5:4b:1e:88:f7:bb:7a:a8:0e:04:c8:33:8d:5f:89:
         04:9a:f9:50:96:eb:99:10:6c:16:11:77:3d:ed:13:cd:1b:a3:
         8c:cc:c6:7f:7f:0c:a6:bd:0e:39:1e:c9:e6:69:4d:a5:b8:c9:
         42:56:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:22 2026 by rpki-client