Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          u5+EK3n5DetfPYC3Cz50GLCTU9YP4fw4mOWeFdotjYw=
Subject key identifier:   E3:FA:68:1D:24:7B:84:EF:A3:22:DA:61:20:D7:B6:2A:7A:C3:B8:61
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1476
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          146B
Signing time:             Sun 20 Sep 2026 16:49:44 +0000
Manifest this update:     Sun 20 Sep 2026 16:49:44 +0000
Manifest next update:     Sun 27 Sep 2026 16:49:44 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: Vva73b65fG5vdBUwl9JMHQUmnB5XndzYp/2oDSVc/nU=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +OFCUfBG0g6h4uqeaVuC5IJPXEJlIylKej+6WLVlEu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5238 (0x1476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Sep 20 16:49:44 2026 GMT
            Not After : Sep 27 16:49:44 2026 GMT
        Subject: CN=6ab00ea8-3e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d1:7e:d0:6c:72:d5:73:4b:e7:a5:72:24:86:
                    75:a5:8c:0f:0a:7f:0f:af:b7:7b:fe:12:e3:9d:3f:
                    6e:b0:59:36:82:9b:5e:75:59:f0:9a:5e:09:26:b0:
                    81:30:c2:db:16:35:d7:32:4e:9f:f5:4a:8b:17:c5:
                    ef:f7:fa:6f:0b:db:c9:d1:47:0d:23:48:87:17:72:
                    fa:d5:05:c5:15:d8:78:8a:3c:b5:3e:c3:e6:cb:a9:
                    eb:cc:8f:8b:43:a5:c6:9e:da:7e:0d:53:8c:a4:8c:
                    3c:18:e8:bf:95:78:be:c7:19:2c:7f:46:6c:41:6e:
                    88:9b:3c:53:84:e7:2e:59:0e:82:50:fb:8c:85:fa:
                    b4:7e:82:63:17:e3:25:24:97:59:53:80:bc:e3:35:
                    7a:b7:4d:8f:a1:69:08:40:da:d7:28:71:c8:03:9b:
                    80:83:e5:c7:dd:72:c2:60:c5:98:19:ab:73:15:44:
                    69:52:5c:08:18:0c:23:6c:1f:46:3f:af:3a:c3:1b:
                    e3:5d:79:48:86:f3:2e:04:a8:59:e1:5f:ef:95:a5:
                    9c:fb:06:84:a0:87:47:02:9d:03:1f:81:33:74:6d:
                    bd:9e:0f:6c:82:77:65:23:98:b0:3b:f4:b4:55:8d:
                    ae:8e:14:c5:c8:30:0b:a7:26:56:bf:be:b7:08:b3:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FA:68:1D:24:7B:84:EF:A3:22:DA:61:20:D7:B6:2A:7A:C3:B8:61
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:37:7c:e3:ab:ea:f9:31:81:0d:ed:6d:a9:11:d9:1c:f4:3a:
         6b:f4:50:27:e1:8a:73:7e:df:0c:59:db:aa:b3:79:25:ff:c1:
         3c:a6:94:25:32:d4:67:47:6f:d7:97:1f:fb:17:07:fe:d9:b8:
         6c:a3:81:2b:b2:7c:b7:ff:e2:ed:c2:08:46:31:f3:04:b8:07:
         d1:dc:64:02:47:48:87:cd:5d:ca:42:66:d4:18:b3:22:cc:9e:
         82:91:02:3d:da:63:af:04:2a:ae:5d:2a:9f:8b:38:e1:8f:23:
         8a:60:04:cf:38:14:b8:bb:e7:c4:ec:72:e3:3e:c2:39:fb:63:
         57:9c:17:a1:0e:58:65:40:09:9e:ad:60:b2:8c:40:88:99:a3:
         fe:5b:f8:c5:52:30:c9:17:2d:d7:5d:72:e2:1b:af:dd:e3:b7:
         cc:ca:91:ee:65:df:62:08:59:8f:c5:51:b5:d8:d6:e3:31:8c:
         54:83:93:71:ab:17:60:85:c1:de:57:fb:39:bf:38:52:a9:a1:
         a2:6c:bd:0a:c9:7e:31:e0:cf:27:6a:d5:e3:68:60:60:27:e7:
         74:04:a5:60:a7:df:f0:8d:7c:48:0d:1a:43:54:d4:1e:c4:8b:
         3b:d4:ab:3f:bd:77:a8:fd:e3:68:1c:71:a8:d2:6e:22:5a:0a:
         de:6e:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:40 2026 by rpki-client