Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
File:                     NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json)
Hash identifier:          /of/up21CSka0a7PK7J/vPy5APz6MWVmyNPEJba2Uk0=
Subject key identifier:   7F:9E:C4:B5:C3:24:A0:5A:F6:AB:C3:31:DD:FE:5B:C4:3A:87:07:7A
Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
Certificate issuer:       /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Certificate serial:       353F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
Manifest number:          352B
Signing time:             Mon 02 Mar 2026 02:32:13 +0000
Manifest this update:     Mon 02 Mar 2026 02:32:11 +0000
Manifest next update:     Mon 09 Mar 2026 02:32:11 +0000
Files and hashes:         1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: +ZvVY9Rr2FAuRfPbxwSvOhU9wafZiMtqpageLTiem1s=)
                          2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: dP7HegAV/LhvECEqPV+CQ2+cXKrDHT/4AjooyHNCYaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
                          rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13631 (0x353f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
        Validity
            Not Before: Mar  2 02:32:11 2026 GMT
            Not After : Mar  9 02:32:11 2026 GMT
        Subject: CN=69a4f6ad-a31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:37:53:1a:5a:70:cd:84:d1:b4:74:c8:77:
                    94:b8:4c:f6:cb:fd:f4:ee:ca:37:54:6e:65:98:ec:
                    51:a2:54:70:d9:5e:c9:dd:cd:9c:85:0e:0b:3b:e8:
                    ed:75:83:b5:b9:5f:1e:67:63:95:67:23:97:59:e9:
                    d5:48:0c:b8:12:d2:e2:75:2c:c8:01:e6:9d:5f:af:
                    c1:64:59:e2:06:28:58:96:3c:70:f9:cc:6d:c0:a4:
                    58:f4:12:6b:58:65:79:f6:a2:bd:c1:a3:71:c4:32:
                    00:f7:d9:50:8c:01:92:81:b6:ff:bd:d0:f7:7f:b4:
                    ed:c8:86:10:91:5c:b1:28:98:ff:25:16:84:7c:20:
                    d7:25:36:7b:64:2d:30:c3:c7:8d:84:09:34:c8:9a:
                    d4:1a:03:e9:fc:fa:25:6d:4e:61:64:cc:db:8d:17:
                    d2:28:c8:6b:0d:e6:eb:df:60:94:e5:f5:d1:c1:ce:
                    bb:e3:25:5b:c3:97:6c:94:c8:26:47:80:ab:f4:c7:
                    ce:2d:cb:25:f5:07:71:f6:6e:b3:df:3f:db:87:c1:
                    51:63:2b:7a:f1:f4:57:88:a3:8f:c4:0b:d2:ac:35:
                    82:fe:18:e0:e2:57:a2:a0:fd:6b:13:b8:93:9e:37:
                    9f:e4:08:c9:03:4d:23:2e:08:1c:fc:a5:6a:0a:fb:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:C4:B5:C3:24:A0:5A:F6:AB:C3:31:DD:FE:5B:C4:3A:87:07:7A
            X509v3 Authority Key Identifier:
                keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:65:49:fe:f8:49:41:47:68:de:6b:4a:12:48:4f:97:22:d9:
         69:10:c7:e6:87:a1:a4:fc:cd:45:c7:ba:dd:a3:13:44:1b:71:
         66:7a:fa:6e:be:df:b1:3b:48:50:4a:93:7a:1b:89:fa:5a:21:
         f2:45:7b:01:52:f0:97:62:ca:22:23:10:88:eb:c6:71:d1:e5:
         a5:07:36:43:7a:84:39:58:f7:b0:cc:1b:8f:68:32:e0:5d:54:
         fb:21:8e:f9:03:6d:1c:1d:60:35:ae:eb:f9:e9:8a:94:56:00:
         88:23:aa:aa:59:20:c8:af:63:4f:4c:4b:4a:93:0a:03:cf:d4:
         90:7e:08:ea:f7:54:6a:0f:bc:b2:d3:d7:01:fb:eb:a5:34:c5:
         6c:7a:76:64:d7:44:ea:a0:a9:2a:8c:dc:4f:e2:92:8e:48:cf:
         7b:a0:bb:59:01:20:22:14:e3:60:05:95:5a:e2:8d:f2:f7:2c:
         06:bd:04:c4:58:8d:3c:90:ae:96:3c:f1:6f:b5:74:71:d1:4a:
         73:45:73:96:51:33:d2:d5:79:56:a2:59:61:6a:3c:1d:5c:ce:
         8a:39:73:d5:e5:df:34:df:93:0e:53:b2:9f:00:a4:f6:b8:b2:
         08:bb:e3:91:0f:bd:54:60:e7:e4:f4:f0:a5:ef:1c:55:89:ed:
         03:5c:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:35 2026 by rpki-client