Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          40VkZFr+rMLpDfbzEdPytUGymEBjdp5xil4fL/FtNY8=
Subject key identifier:   67:AA:ED:88:A4:10:00:3C:F4:A9:AE:B0:1F:6A:65:A0:7E:12:76:66
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1407
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          13FF
Signing time:             Sat 28 Feb 2026 16:58:55 +0000
Manifest this update:     Sat 28 Feb 2026 16:58:55 +0000
Manifest next update:     Sat 07 Mar 2026 16:58:55 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: KkWzZHzbvUpH+h15lZlwWYoCptGmE2zrc6GO1r5HTKI=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: WNdbUIrq72HztcMiWEgIIxA2+CqivH5XP6V6egY23qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Feb 28 16:58:55 2026 GMT
            Not After : Mar  7 16:58:55 2026 GMT
        Subject: CN=69a31ecf-f013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:94:8f:18:ea:21:22:bd:c7:cc:28:b9:14:05:
                    ba:cd:1b:7c:e6:15:ef:8b:b4:5a:57:d4:3d:65:cb:
                    cf:51:44:2c:2e:b8:53:9d:8e:b1:51:05:1c:a9:07:
                    51:0f:29:0f:2b:d2:bc:03:bb:a7:3b:f3:1d:6f:cd:
                    13:bc:24:f5:6f:82:94:1f:f7:c8:0c:28:6a:1f:63:
                    09:08:32:43:d0:47:67:90:71:8b:c0:cf:b1:b1:96:
                    8a:3f:ce:91:d1:39:76:7d:e0:d1:6d:51:0b:c9:23:
                    27:7d:6a:5b:d2:04:da:2e:a1:f8:84:33:6c:48:42:
                    d4:29:c8:03:c6:66:21:5a:b7:f9:1f:20:a9:47:93:
                    aa:32:98:66:a9:32:72:ff:1e:38:b6:44:26:79:c2:
                    86:1c:3b:20:bf:61:6f:f0:2a:2a:67:c3:6d:b3:bd:
                    ac:11:41:57:d9:97:5c:7a:a6:13:4c:75:92:20:d6:
                    42:e2:bd:e5:ac:5a:52:53:89:fc:ac:66:74:ff:98:
                    a5:b2:86:ae:d7:20:73:3f:cf:67:9b:c4:f2:4c:f8:
                    bb:e9:b1:10:e7:64:d7:13:17:bb:25:61:be:45:dc:
                    cd:02:66:47:d0:ea:04:f1:02:d2:d1:5a:bb:1c:57:
                    1b:67:24:04:4e:ec:4f:ad:84:c1:c7:55:34:7f:dd:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AA:ED:88:A4:10:00:3C:F4:A9:AE:B0:1F:6A:65:A0:7E:12:76:66
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:83:d0:10:2a:79:2a:bb:ee:29:1f:05:88:8d:0b:c8:8f:59:
         94:3b:a5:88:c5:7c:85:6d:c7:d3:09:bd:2c:d6:94:d4:a4:e3:
         be:14:55:fe:f8:79:d2:ae:d9:a3:d1:a9:7b:ef:28:87:90:e1:
         54:7b:5d:28:b0:74:78:db:e8:35:74:c7:48:fe:bb:2a:f1:49:
         af:0b:d0:2e:f9:41:9f:a5:ec:81:1f:09:96:07:7c:ae:52:87:
         28:d5:01:a6:f2:c7:9d:01:3b:2b:54:67:c2:b2:d4:98:b8:89:
         ac:60:8a:18:09:b6:d7:35:e9:01:8f:74:bf:ad:c8:bd:56:36:
         c7:21:bf:4c:18:56:70:d9:5b:31:a7:62:1a:67:42:a6:98:02:
         b7:65:a7:38:13:99:8d:d5:a4:78:b6:b1:fc:1d:31:34:f0:f0:
         f4:69:2d:9a:32:ea:c6:af:21:5f:b2:76:7c:ed:18:52:b3:4a:
         2e:97:6c:da:ad:e1:52:65:66:73:99:cc:92:a3:6d:49:29:8d:
         cb:1d:44:14:83:55:b5:24:6c:0a:d5:0f:f2:ed:a3:ff:21:3a:
         44:76:75:b2:91:b1:68:52:ac:2d:e9:15:1b:83:16:84:02:98:
         2c:c7:95:5b:e0:5c:2e:04:cd:b8:e1:e5:09:4a:11:ba:a5:67:
         09:52:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:35 2026 by rpki-client