Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          4Pl8ul240n7fKwSvJC7+C2x3NqWX5IcqlFaQettFOpU=
Subject key identifier:   F3:3E:65:F5:17:4C:BA:51:08:B9:C1:92:37:12:AD:75:88:B4:A8:65
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1423
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          1419
Signing time:             Thu 16 Apr 2026 16:50:34 +0000
Manifest this update:     Thu 16 Apr 2026 16:50:33 +0000
Manifest next update:     Thu 23 Apr 2026 16:50:33 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: 6MBEDzwmG6oDdBpHEstAB6h4PM3jmVExRlRCtMU/vXo=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: MDlcdzXufvKhGOKFUxldUFZUq6m6mjYUqAENV0y3O3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5155 (0x1423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Apr 16 16:50:33 2026 GMT
            Not After : Apr 23 16:50:33 2026 GMT
        Subject: CN=69e11359-1108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:2b:47:e0:68:9a:c7:3a:92:23:b0:36:7f:
                    fc:9f:a7:b9:6d:24:ca:5a:47:ff:15:1e:fe:96:a2:
                    6b:bd:28:f5:ad:17:3c:79:d2:b0:c2:57:ed:ed:0a:
                    be:98:65:b6:71:e0:8d:38:f5:2d:5d:80:94:2a:eb:
                    dc:d4:ae:aa:df:e1:95:e1:ca:71:8b:85:b1:15:8d:
                    17:99:15:11:fe:30:19:d9:94:81:ef:ca:dc:b1:c2:
                    88:a2:18:58:f7:59:23:ea:a8:ef:4c:06:41:11:8b:
                    d9:36:a6:ce:22:e3:c5:e1:e5:19:dd:76:0c:24:db:
                    b7:df:84:22:ca:04:1b:d0:be:c8:2f:eb:4a:d3:6d:
                    ec:e3:21:62:c3:53:fb:bb:b1:98:17:65:03:eb:1d:
                    6d:46:1f:16:06:aa:03:e9:81:3f:46:67:89:5b:8d:
                    10:41:8c:20:8d:78:db:af:61:ba:68:ab:aa:b5:74:
                    88:9d:ba:8c:e2:54:b5:aa:a9:09:88:d5:7f:40:00:
                    14:42:b7:cc:e2:c7:dc:bd:8c:9d:90:e7:63:31:fd:
                    59:92:4f:e0:a5:1c:78:4f:ef:f1:e6:ec:0c:25:c5:
                    c2:0d:55:75:43:10:f6:c8:d2:f5:6e:af:da:d1:09:
                    2d:21:9e:40:34:ca:71:be:86:ba:dd:55:03:c2:c4:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3E:65:F5:17:4C:BA:51:08:B9:C1:92:37:12:AD:75:88:B4:A8:65
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:45:b4:ef:c9:d1:b9:0f:90:56:48:0a:7d:a6:cd:76:c1:
         f1:d4:bb:ba:0a:3c:9f:5a:9a:08:f3:6e:55:98:3e:dd:85:cb:
         a3:c7:a9:44:e2:80:7c:4b:e1:a7:d1:03:f6:92:ea:dc:5d:e0:
         ce:e3:41:8a:3f:3c:06:88:b5:9c:4c:e3:f7:bd:bb:11:d0:22:
         99:fd:bc:71:3d:24:82:14:35:7e:a2:e0:de:41:d9:fc:5a:f6:
         da:be:b5:e2:0d:35:67:38:b4:45:ce:08:a0:fe:6a:7a:ad:87:
         25:aa:15:5f:d3:9e:ae:01:1f:6d:22:70:d7:0d:1e:b0:3c:65:
         6e:ac:1e:d2:10:92:db:d3:94:ef:74:c7:ab:e4:97:99:86:dc:
         ba:1e:c9:28:18:7b:14:4e:e6:ea:3d:63:44:45:c7:b0:a0:50:
         6a:b1:e0:7c:fb:53:c2:c0:a3:a3:b1:0a:fe:d3:d1:71:e2:ec:
         96:48:e4:b5:e0:66:60:1f:e3:47:6e:30:9a:cc:fa:d9:99:97:
         9d:3e:d4:da:76:15:6c:e3:14:e6:bb:a0:a1:84:41:a0:90:2f:
         11:7c:69:48:fa:83:31:f8:d3:a1:e9:69:22:a0:65:7f:85:9b:
         e6:c1:91:29:0e:88:4d:15:5f:bc:a8:aa:5d:5f:e3:b3:3a:28:
         ba:6a:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:40 2026 by rpki-client