Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
File:                     NyCB99vi7xGkQRvU5q-G8yaYyvo.mft (raw, json)
Hash identifier:          KWS1CPGKhObpJEUUeaiM9aPlOVnfu4gmlcmz9qsgnPM=
Subject key identifier:   7D:3F:C4:7B:ED:55:52:2A:13:B9:27:7A:F0:DB:B9:05:6F:4D:DE:B4
Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
Certificate issuer:       /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
Manifest number:          0162
Signing time:             Wed 25 Mar 2026 04:12:29 +0000
Manifest this update:     Wed 25 Mar 2026 04:12:29 +0000
Manifest next update:     Wed 01 Apr 2026 04:12:29 +0000
Files and hashes:         1: NyCB99vi7xGkQRvU5q-G8yaYyvo.crl (hash: v5zV39jRjG6s2oQ42PiFry8KSE6qtt03WYfwTgFqyII=)
                          2: 82748D8A8D3A11F0833AB01AC4F9AE02.roa (hash: Vtl8KL5Go1ow8PZTf8Hy33WmoVT99sVBAqdfhxvXdk0=)
                          3: 4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa (hash: Ys6z3KTyTUcEA7nCCEeVfOAk4o97hw5MQktE+xzWfDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl
                          rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
        Validity
            Not Before: Mar 25 04:12:29 2026 GMT
            Not After : Apr  1 04:12:29 2026 GMT
        Subject: CN=69c360ad-9e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:21:50:4c:c2:26:1c:5f:ca:b0:de:cc:16:
                    93:b1:b3:dc:04:e3:b5:d0:41:7f:0a:46:11:f5:97:
                    d9:e7:06:68:23:2a:1e:23:f7:9f:36:e0:bb:99:0b:
                    3d:03:12:6a:3c:b6:86:a3:e8:4c:9e:76:97:93:48:
                    03:26:93:06:ab:68:02:1d:cd:52:ab:3e:c2:97:b1:
                    53:59:47:79:01:e5:6e:4f:1a:a8:63:c2:b7:c9:d2:
                    80:72:f3:69:b9:03:7a:27:62:b2:a3:85:0b:4c:71:
                    f4:fd:dd:70:a0:23:6d:c1:e0:a7:08:4c:90:97:17:
                    ab:b9:d9:6d:82:ac:54:78:75:47:98:61:8f:cd:df:
                    bd:c3:ee:f4:bf:53:50:87:4f:7d:a4:f3:91:35:ff:
                    09:21:a9:d8:1b:c9:ef:af:bf:c6:b1:04:60:43:1f:
                    fc:30:43:a7:16:b0:40:14:09:a9:68:c8:8b:f4:97:
                    e9:83:48:67:35:18:c3:19:ac:b7:1d:84:8c:22:ea:
                    74:24:4e:43:09:36:2a:e0:71:f1:e8:24:ef:b7:24:
                    af:75:4d:f0:8e:ae:28:6b:37:88:86:7a:39:d2:b4:
                    2f:21:d0:d0:0e:b2:b4:1e:57:c7:f5:49:73:4e:4c:
                    c6:dd:33:34:67:48:11:b3:07:98:27:d8:67:0a:e3:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3F:C4:7B:ED:55:52:2A:13:B9:27:7A:F0:DB:B9:05:6F:4D:DE:B4
            X509v3 Authority Key Identifier:
                keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:3a:7d:94:bb:ad:a9:e1:c2:c9:ac:94:4d:e0:8f:c1:b1:
         ea:c9:2b:de:63:35:93:8e:34:36:8f:2b:ad:49:f3:50:81:3f:
         f9:2b:e4:33:92:ad:93:31:d3:74:0f:ff:be:b7:bd:7a:0b:25:
         08:85:ba:9b:cb:4a:95:7c:f9:7f:f0:99:97:5e:ba:ee:02:4e:
         c5:61:77:ce:f1:36:a1:5a:e0:a4:0d:93:7c:63:db:0b:e5:34:
         12:3b:f4:e5:71:1b:97:0a:67:2f:84:7d:25:2a:09:89:e8:aa:
         55:b5:82:d8:f0:b7:ca:87:fb:5c:82:eb:5a:37:11:32:52:01:
         20:85:62:2e:d1:da:e5:50:e5:75:c8:1d:2d:69:65:c2:e4:97:
         f0:2b:13:98:42:c0:7e:a2:9d:0c:93:be:71:12:0b:bc:17:a9:
         f2:8b:bb:0e:ee:59:c6:eb:0e:b9:52:ec:65:5f:8e:c4:e7:fd:
         ca:d2:d6:fd:a1:16:e2:26:3d:b5:61:28:f2:86:52:ca:4f:26:
         31:41:70:57:13:24:15:06:7e:b5:8b:cc:51:43:be:7e:a2:69:
         64:2a:eb:31:66:e1:cf:78:1d:72:6d:58:bf:ef:c0:c0:40:64:
         06:19:11:62:e8:54:40:d5:06:8c:7d:fa:37:53:f9:28:52:4c:
         68:08:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:15 2026 by rpki-client