Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
File:                     NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json)
Hash identifier:          WrNqwhEQk7yvmXmgfXsz5dtAe9TwIJJfBkIdqV3MGlQ=
Subject key identifier:   36:47:8F:0D:B5:79:00:97:70:09:46:A1:16:BA:2B:B4:73:7F:7C:13
Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
Certificate issuer:       /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Certificate serial:       1792
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
Manifest number:          1785
Signing time:             Wed 22 Jul 2026 16:41:00 +0000
Manifest this update:     Wed 22 Jul 2026 16:40:59 +0000
Manifest next update:     Wed 29 Jul 2026 16:40:59 +0000
Files and hashes:         1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: uIJgYmuaMvDHuLV26aNVB9LimFzFLUDKAl3/ZWxtSoo=)
                          2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: bWzOQvxadVIRVJggE+JLhWTu+F27vX2SLKSXFN99hpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
                          rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6034 (0x1792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
        Validity
            Not Before: Jul 22 16:40:59 2026 GMT
            Not After : Jul 29 16:40:59 2026 GMT
        Subject: CN=6a60f29b-c3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5e:35:e7:46:8b:38:b7:5d:06:30:92:0f:4e:
                    5e:1f:83:a6:5e:de:af:c6:5c:11:1a:06:ce:7d:85:
                    5c:b9:a6:e0:87:cf:cd:56:e0:74:4e:2e:1c:b5:6a:
                    0b:4f:b7:19:31:c6:cb:fd:b9:99:f1:30:8c:48:1c:
                    13:b5:3d:e6:69:44:6c:6c:1f:e0:7d:9a:f5:b4:33:
                    ce:2d:27:7c:c5:ca:ae:b0:d4:a2:4c:0d:90:21:db:
                    b3:5a:08:40:7e:8f:b2:2c:b2:91:4d:2b:88:96:c2:
                    c2:87:b7:40:0a:aa:e3:3a:af:17:33:8e:4f:ae:87:
                    e1:46:81:56:d2:04:14:ee:82:82:d9:ca:8a:a5:59:
                    d7:29:54:72:d3:70:d3:17:9e:3e:b6:ed:8e:bc:85:
                    20:a5:3b:94:aa:d3:ba:0e:01:b5:0d:9f:26:05:2b:
                    5c:02:2f:8a:69:8a:0c:29:1a:4b:4d:c1:2a:dc:b5:
                    87:58:e5:ce:d9:c3:21:4f:aa:9c:75:7b:61:a7:77:
                    c0:02:00:42:bc:94:ea:76:d5:91:d9:64:99:d1:4c:
                    a4:04:c1:f6:d3:08:e9:92:6d:da:92:97:d6:a3:67:
                    99:89:c6:fa:c6:01:37:b9:15:08:a2:5e:07:84:c4:
                    d1:de:6b:d0:12:b2:ea:62:ea:f3:6c:8f:80:bb:5c:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:8F:0D:B5:79:00:97:70:09:46:A1:16:BA:2B:B4:73:7F:7C:13
            X509v3 Authority Key Identifier:
                keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:04:18:bf:e3:51:94:71:d2:4d:18:88:c3:d4:fe:ff:2c:
         3e:17:21:5e:0b:ba:76:84:74:79:6f:01:08:22:f9:9b:a6:7e:
         01:e5:9d:6f:fd:c3:29:90:96:09:14:97:48:69:78:d6:05:4c:
         d2:d4:f0:77:40:f7:ff:71:aa:05:21:bf:85:4f:2d:42:40:b2:
         4e:c3:59:a7:39:46:24:e2:4c:b6:b9:9e:bb:29:a9:d1:3d:45:
         00:17:ef:e6:02:4f:04:31:f7:95:39:7e:8d:55:ca:cb:d6:60:
         12:49:81:f0:4c:e7:f0:72:ee:f9:05:0d:f9:66:df:15:61:b5:
         a0:21:11:2f:a9:2f:8e:0c:34:ad:70:25:21:42:ff:26:61:ec:
         5a:e3:b0:a2:3d:53:15:6b:94:9b:69:4a:81:c8:a6:2b:0d:d8:
         33:53:65:18:64:d2:98:3b:9e:01:b4:0c:1f:e9:70:ca:2b:d5:
         b7:2b:1a:3f:ea:13:ed:31:76:3b:c2:20:9d:a1:24:64:9b:57:
         5b:02:bf:4f:4e:ab:88:b6:6c:74:4e:aa:cd:65:c8:b4:08:17:
         4b:61:fd:4c:f4:92:1f:a0:5f:b4:7d:3a:21:fe:21:58:1e:b1:
         cb:e4:fe:d5:f4:9d:41:ef:1c:e8:11:df:e7:b4:3d:a3:ec:24:
         46:55:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:20 2026 by rpki-client