Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
File:                     NAYp5_yg0jJa2fswVWg0aO8t0MM.mft (raw, json)
Hash identifier:          8ICtpZaiG9f3Jnk7mR/XQ/KNYyr2cOJHfUujW7JSmW0=
Subject key identifier:   0E:E0:D1:6E:5F:EF:C2:BB:1B:18:E3:D9:D6:41:D2:CA:F0:D0:39:23
Authority key identifier: 34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
Certificate issuer:       /CN=A91B9477/serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
Manifest number:          33
Signing time:             Fri 17 Apr 2026 08:21:41 +0000
Manifest this update:     Fri 17 Apr 2026 08:21:40 +0000
Manifest next update:     Fri 24 Apr 2026 08:21:40 +0000
Files and hashes:         1: NAYp5_yg0jJa2fswVWg0aO8t0MM.crl (hash: jqECazDTGMRlU3fvD/tLWp200cdHFdf7b91M3m4A0xM=)
                          2: 6A1304F0F4DD11F09B4FF218486F56BC.roa (hash: MVWHTycXop2ncCPzUo2tw9R/cfqnpVaE5CQiK4/0/Wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9477, serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
        Validity
            Not Before: Apr 17 08:21:40 2026 GMT
            Not After : Apr 24 08:21:40 2026 GMT
        Subject: CN=69e1ed94-2cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:26:87:95:c3:d6:0a:7b:be:c7:80:d9:ef:
                    8d:d0:16:07:e1:c4:a4:1d:29:31:90:0d:56:11:19:
                    eb:a8:4c:bd:91:11:d2:fe:c6:03:ec:46:29:49:8a:
                    f6:9e:b3:bf:1c:1c:cd:96:a2:25:de:dd:76:6d:01:
                    5b:1f:52:97:10:06:29:4a:ba:4d:46:6d:14:1b:82:
                    46:71:3f:dd:66:db:c8:c9:52:62:ca:9b:21:d8:ac:
                    7c:8b:3b:c9:54:4d:0e:91:75:57:0e:72:13:64:d2:
                    44:d5:b8:b2:98:5a:d6:d9:d1:55:6c:84:7d:0a:b5:
                    c0:ff:a9:be:67:f8:00:9f:93:69:92:2c:b4:5a:a5:
                    61:c9:5a:d2:a9:62:ce:0c:c2:06:27:16:5f:e2:ef:
                    97:c3:a1:fc:7c:48:1d:4b:c4:39:03:ed:69:56:69:
                    8e:43:e1:5f:26:e1:ca:3f:b9:62:d6:ab:df:4e:f8:
                    5c:f0:72:82:59:ca:da:f0:6a:f9:a2:b9:bd:98:89:
                    a6:a2:1c:0a:02:d5:74:75:cd:93:84:a3:31:f5:87:
                    02:96:4a:d9:1c:10:c5:bd:9b:6b:b3:b8:78:22:85:
                    1e:bc:41:28:26:5d:d4:e7:1b:ca:f8:1f:2b:63:93:
                    a3:49:d7:96:67:69:3b:e8:1c:65:70:14:69:0a:5b:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:D1:6E:5F:EF:C2:BB:1B:18:E3:D9:D6:41:D2:CA:F0:D0:39:23
            X509v3 Authority Key Identifier:
                keyid:34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:22:5e:3c:39:85:45:8c:62:bd:5c:d1:ba:34:7e:0f:b6:f3:
         a3:0e:8d:05:3a:6e:0c:15:0d:af:85:a6:01:06:76:7e:f9:ed:
         c8:66:8c:d5:07:62:4a:c1:ac:58:7f:69:a0:3f:41:3b:8e:7a:
         52:dd:51:7e:4b:bc:8b:4e:da:8b:07:cd:3d:0b:40:2a:ed:b5:
         e9:18:f0:7c:e2:47:62:2c:0d:e6:a8:19:d2:b2:43:d2:5e:60:
         01:6c:ca:53:0a:64:14:50:62:27:ab:27:11:92:b9:8a:d3:05:
         da:c4:9d:ca:20:b9:8e:51:de:06:e3:36:c5:c2:29:67:fe:d1:
         84:39:9e:59:ae:1b:6e:8a:08:c8:ca:96:c3:50:b0:55:88:71:
         58:5c:9f:12:97:78:53:5f:7f:58:ab:2c:a7:78:55:5e:46:b4:
         d6:67:e1:d5:74:3a:9b:4f:3a:eb:3f:55:cb:f6:a1:13:95:ee:
         51:09:ad:d3:36:b0:84:66:1b:64:fc:90:02:7f:c0:5b:2b:3b:
         85:44:38:2e:e0:28:f7:eb:20:ac:a9:6e:69:f6:71:2e:72:9a:
         94:d5:1a:3c:09:d4:10:a1:cc:b8:ba:c4:11:c4:24:cd:cf:d5:
         fe:a7:85:7d:43:37:67:35:8f:0d:8d:31:1b:b0:58:ce:ce:bb:
         12:e4:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:58 2026 by rpki-client