Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
File:                     nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json)
Hash identifier:          y5bhDIE9S4+bVKk84zyLTxxwMJbQkKxckQPJPXQFn8Y=
Subject key identifier:   30:25:97:00:A1:35:75:5E:D2:D7:C0:02:69:AD:79:57:EB:8F:32:AB
Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
Certificate issuer:       /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
Manifest number:          0355
Signing time:             Mon 27 Jul 2026 02:09:53 +0000
Manifest this update:     Mon 27 Jul 2026 02:09:53 +0000
Manifest next update:     Mon 03 Aug 2026 02:09:53 +0000
Files and hashes:         1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: Ln391QEcT2RO/0C29Pkj1e6ssNq9HKle4VCzhQ/wwJs=)
                          2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: xthRLc90/XgHlCkTtB+0e16k0vdMx1eiJQ9NbjS1xYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
                          rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
        Validity
            Not Before: Jul 27 02:09:53 2026 GMT
            Not After : Aug  3 02:09:53 2026 GMT
        Subject: CN=6a66bdf1-c61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:49:ff:ef:cf:67:15:a4:73:8d:6d:8e:b5:
                    59:7e:88:91:36:86:76:d8:68:c6:d1:50:74:b8:38:
                    cd:87:8a:8e:02:3f:0e:8e:af:ac:08:9b:2e:04:5f:
                    a7:13:d2:1b:95:29:45:d5:61:f9:ef:f1:7d:80:ba:
                    73:31:3d:f3:bd:92:4f:10:6e:b6:3f:89:8e:b3:11:
                    8a:cc:4c:30:09:31:d1:ab:c7:68:cd:0b:3c:ea:00:
                    6d:35:59:df:ed:a5:34:69:7a:5a:59:f7:15:32:e8:
                    ac:7e:7f:e1:fd:29:77:43:33:f9:74:4e:33:2c:a2:
                    47:60:b1:bb:8b:2c:17:43:1d:46:04:63:4f:5d:a6:
                    e0:5a:ac:cf:46:81:5d:d3:ff:a2:65:45:e3:52:4e:
                    21:0b:d7:3e:3b:e9:c9:4b:23:62:88:7a:b8:34:28:
                    70:11:5e:2f:31:9a:27:34:93:87:f3:fc:13:34:e9:
                    4f:82:2c:81:dc:3e:b7:27:cf:98:22:8a:78:cd:94:
                    3a:43:f8:f0:b3:20:b6:36:0c:66:56:9c:33:40:e6:
                    3a:bc:4e:83:50:7c:03:7a:6a:a2:97:12:18:64:4b:
                    18:94:3e:47:38:bd:bf:bb:5e:0c:55:d5:85:d8:9f:
                    1d:26:f8:ef:95:41:6e:61:6f:58:b5:41:07:18:67:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:25:97:00:A1:35:75:5E:D2:D7:C0:02:69:AD:79:57:EB:8F:32:AB
            X509v3 Authority Key Identifier:
                keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:44:84:5d:6d:65:0d:5a:fd:4a:38:0a:29:22:79:c2:33:
         93:1d:37:07:f6:c4:c1:53:d3:60:22:d0:35:33:c3:d0:ee:87:
         4b:6c:1e:c5:e8:25:74:ea:c1:50:3d:f2:22:ed:68:e8:c7:a4:
         bf:2e:50:f9:d1:03:64:63:67:51:9f:c6:79:37:55:1e:b1:14:
         06:40:2e:f9:da:b0:a0:ef:8f:79:34:97:fd:2b:6e:89:fc:88:
         35:9b:54:53:e4:a3:f8:9d:58:e8:d8:bd:b0:20:f0:5c:5a:dd:
         46:90:0c:04:3a:af:d4:d0:0c:99:b6:16:a7:c4:24:65:f2:8b:
         91:35:67:31:28:63:23:34:53:d3:f3:19:21:40:07:d8:ac:82:
         84:d8:41:4f:2b:bb:4f:42:e1:98:26:e7:28:89:e6:5a:cc:88:
         54:ca:c4:23:68:68:7d:ca:d6:12:69:ab:25:19:c9:e7:40:6f:
         c5:51:99:40:50:6f:06:5a:19:a7:40:13:de:23:ee:3c:4e:5d:
         db:01:94:43:47:04:48:a1:f8:23:96:32:48:1b:9c:b2:f2:7a:
         51:1a:ae:9c:20:69:7d:d3:a2:67:e3:48:99:f6:94:88:7d:16:
         d6:48:2e:96:1e:d8:42:ef:57:38:02:62:d4:f0:96:7a:a7:e9:
         94:14:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:47:49 2026 by rpki-client