Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          wgknChFqSGXU4JokZ1fVNc3jKYqIVFkha2J4k/z7yPA=
Subject key identifier:   22:76:81:7F:45:50:52:0E:20:6D:92:DD:7B:C9:87:1C:AC:61:75:9C
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          1436
Signing time:             Fri 12 Jun 2026 16:51:18 +0000
Manifest this update:     Fri 12 Jun 2026 16:51:17 +0000
Manifest next update:     Fri 19 Jun 2026 16:51:17 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: eOk4stAkDLrax5cJpzUoCy/XDQ30SuuvSg+NvRZLYt8=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: MDlcdzXufvKhGOKFUxldUFZUq6m6mjYUqAENV0y3O3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5184 (0x1440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Jun 12 16:51:17 2026 GMT
            Not After : Jun 19 16:51:17 2026 GMT
        Subject: CN=6a2c3906-0d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:00:3a:c9:84:84:97:97:28:c3:3c:31:3d:
                    3c:01:50:07:41:91:d6:6e:a7:f0:b0:3d:cd:06:2d:
                    51:59:a3:12:46:3b:ab:f6:40:cd:42:6b:89:01:56:
                    7c:70:d2:32:9f:f8:4f:34:64:e1:b3:a4:f3:32:40:
                    ca:e8:c0:dc:de:6b:13:8b:7c:07:c9:ea:9f:f6:b6:
                    cb:ca:96:e6:8a:c3:c8:38:3d:8f:d3:cd:40:e2:1d:
                    75:9f:f8:da:99:e3:f9:f9:03:7f:8f:ed:45:b6:64:
                    f3:1a:60:0f:a7:b8:b6:2e:3b:05:2e:30:df:f8:a2:
                    df:8b:be:ae:ba:61:2e:0d:4c:73:bc:a4:65:af:99:
                    cd:17:0c:b0:b6:fa:c9:f9:17:9b:62:20:d3:29:91:
                    76:36:7d:fb:b0:0c:8b:0d:fa:c7:f9:92:5e:df:60:
                    3a:53:ca:4b:99:d0:b5:d8:b1:b1:43:5d:c0:30:6c:
                    f2:73:9e:2f:4f:ec:48:a9:9f:be:cd:bc:92:82:b7:
                    58:ff:34:89:e2:6a:79:23:c7:25:f0:13:8f:d7:52:
                    ce:ac:5e:54:cf:42:cd:89:69:4f:ac:85:12:1f:c3:
                    80:24:93:96:a0:90:01:ca:1b:43:fe:45:16:fb:41:
                    6b:40:f6:4d:2f:57:65:87:ac:13:08:52:b9:52:6f:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:81:7F:45:50:52:0E:20:6D:92:DD:7B:C9:87:1C:AC:61:75:9C
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:7b:58:71:3f:29:4c:af:1c:a9:37:70:5a:84:f7:ff:6e:
         e8:e6:09:d9:f7:d9:55:22:e4:b7:4e:4c:7a:1c:51:6e:72:75:
         04:a7:9a:e7:01:71:d0:e3:9d:c9:0b:db:cb:56:a0:60:12:f1:
         1c:65:be:b6:a0:77:43:60:7a:87:5d:84:46:d6:61:b0:b1:cd:
         77:ff:0f:b4:0e:3a:0d:37:1c:33:d1:fb:06:7a:7e:66:88:1d:
         73:48:e0:c1:6c:88:54:44:da:00:0b:8b:fa:21:47:a4:5e:aa:
         28:11:37:58:a0:3a:a5:17:be:a5:4c:2d:e1:f0:19:c8:c4:1f:
         4d:e9:0a:cb:72:c7:7b:65:e7:87:e1:22:5a:e7:67:6f:14:ff:
         61:35:97:a4:e0:fc:9f:4b:4f:96:fd:e6:7c:d9:a0:42:c6:b8:
         4a:e2:c4:41:fa:4d:6c:f1:7e:27:50:a7:ff:49:d0:fc:46:2b:
         8f:1b:d9:56:ed:f3:60:fc:a6:e7:2b:79:10:32:aa:af:1e:e5:
         ee:27:01:15:1f:b7:00:32:c9:c4:42:f0:17:7f:9a:0b:4f:9c:
         25:a9:fd:b4:c7:a8:e8:c7:5c:b6:72:73:0b:7e:b2:a3:e1:ca:
         6b:29:9e:38:6d:69:a0:58:26:98:93:45:cd:92:2c:94:6f:cf:
         d6:a2:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:14 2026 by rpki-client