Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File:                     NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier:          gfddzsOZXY5wOJJH6mou+yuyaeExV9JJwbpFgQfLcgs=
Subject key identifier:   BA:81:D8:83:05:F8:D2:46:DC:3E:D4:EB:42:2B:5E:7F:28:57:D6:3D
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer:       /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number:          0156
Signing time:             Fri 25 Sep 2026 05:16:05 +0000
Manifest this update:     Fri 25 Sep 2026 05:16:04 +0000
Manifest next update:     Fri 02 Oct 2026 05:16:04 +0000
Files and hashes:         1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: nIamb3qcI5OxoEwRZdLAqADlWWKmin/oYTVz9US0Ei8=)
                          2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
                          rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
        Validity
            Not Before: Sep 25 05:16:04 2026 GMT
            Not After : Oct  2 05:16:04 2026 GMT
        Subject: CN=6ab60394-ae2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:8c:9a:22:ff:7d:d5:ac:3a:d3:89:65:a0:
                    c8:7d:7b:eb:f6:b0:8b:25:70:ea:fb:24:f6:f5:c2:
                    69:a0:17:d9:a6:ce:5f:d3:09:58:01:61:0d:a5:92:
                    a0:4e:22:d0:43:9d:b1:1b:c2:e2:c5:2e:2f:a0:bc:
                    4f:5b:22:ac:3c:10:b0:00:1c:04:0e:e7:50:ae:bf:
                    99:5a:f0:e5:6c:ed:bf:da:31:18:52:4c:79:4c:dc:
                    13:53:7a:bd:66:e6:8f:3f:f5:d5:ab:36:5a:43:ec:
                    a4:51:b5:7f:40:59:bb:aa:3b:e9:af:4a:50:3d:ab:
                    16:a6:0c:41:29:01:5d:8a:56:6c:a1:c8:d0:28:d1:
                    b0:14:a2:f3:eb:ca:8a:47:a5:a2:a7:a7:ba:27:94:
                    5b:48:f5:a2:c8:fa:45:a9:cc:ea:86:ad:64:73:4b:
                    a4:da:c9:e6:3a:4a:09:f4:a7:01:2c:dc:88:1d:dd:
                    9c:c0:e3:9b:3d:f8:e5:be:dc:fb:3b:67:75:4d:95:
                    cb:95:56:2c:a3:86:a2:b9:2b:11:e5:8b:b4:9a:ba:
                    2b:64:13:53:f8:f9:b0:18:f7:f8:cc:47:ed:ca:ce:
                    37:76:55:08:5e:c3:8a:ef:ba:a6:01:c5:27:7f:14:
                    2b:51:f1:6a:5f:5a:31:0d:23:9c:1a:15:fe:3d:96:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:D8:83:05:F8:D2:46:DC:3E:D4:EB:42:2B:5E:7F:28:57:D6:3D
            X509v3 Authority Key Identifier:
                keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:70:90:d9:ee:94:85:74:56:a8:fe:cf:e2:6a:1d:1c:0d:a3:
         1c:98:75:9e:9f:4e:1b:59:71:ae:d1:e0:12:60:3e:f0:f1:fd:
         2e:8f:43:79:1d:37:eb:c6:7b:9d:33:bc:8a:69:96:a1:c9:8e:
         25:5b:0e:80:09:cd:2a:c6:5f:3a:63:0e:53:ae:91:f1:31:ad:
         df:46:da:12:d0:6e:88:d7:59:ad:f4:6c:43:44:74:53:2e:59:
         54:39:b2:66:d3:8f:78:cc:17:17:c3:b7:22:cd:a8:27:3e:a5:
         e2:89:b1:55:b2:e0:05:c6:7d:6f:26:bb:f0:39:22:98:3a:de:
         2c:3b:58:75:63:ac:56:e0:d6:84:2e:05:52:c6:c3:66:8d:7c:
         d2:c1:ef:56:b4:2a:e0:fc:17:fd:81:5a:62:77:c4:0e:6f:23:
         ec:02:ea:be:2c:17:e4:36:ac:1b:a3:31:75:b9:bf:36:bd:17:
         84:78:84:21:6b:6e:48:89:79:9e:76:0a:b7:6f:64:e2:5d:bd:
         81:62:c2:e5:bb:fb:56:97:11:8e:ca:ff:9a:45:0e:ab:0b:2b:
         ca:83:ca:0e:f8:62:06:99:21:be:0f:2d:5e:83:3e:1e:9c:92:
         19:63:a4:1c:82:35:1d:25:1b:d1:6b:5a:67:2e:40:b0:d5:58:
         fb:a8:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:51:00 2026 by rpki-client