Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
File:                     N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json)
Hash identifier:          wn+WvPVBDCPaSzUVaoRPklqrCB6XIea0QBbBZ86HVVU=
Subject key identifier:   55:3A:2F:65:35:FF:2F:8C:B4:50:98:EF:B5:7F:47:73:0D:79:FB:CE
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Certificate issuer:       /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial:       0D33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
Manifest number:          0D19
Signing time:             Tue 24 Mar 2026 17:56:58 +0000
Manifest this update:     Tue 24 Mar 2026 17:56:57 +0000
Manifest next update:     Tue 31 Mar 2026 17:56:57 +0000
Files and hashes:         1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: dShRNlCtz56WdiMSl3ZzxoWb4eiroSS9MvEkFDVrLWY=)
                          2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: Ra9KeGGoq4qKoY1lvMm4sJXsGfKv+RNnldeY/mU1RTs=)
                          3: B647F704090C11EFB666C967C4F9AE02.roa (hash: nMJlJs5RVl9hK1ao5B9tFWVbxrXwgcmPLTkIzplwg3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
                          rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
        Validity
            Not Before: Mar 24 17:56:57 2026 GMT
            Not After : Mar 31 17:56:57 2026 GMT
        Subject: CN=69c2d069-448b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:05:70:4b:71:3a:7c:3a:7f:53:2a:55:31:
                    ba:1a:a6:e4:3d:9d:7e:37:ae:90:a0:4d:e5:bc:34:
                    e8:45:2a:98:46:30:6c:86:1f:73:d6:9f:9e:98:c0:
                    89:c3:4a:dd:3e:66:9d:4a:d0:23:01:5c:40:e7:ff:
                    ed:c3:8a:e5:16:c3:fc:6a:f5:f9:f6:0a:9c:85:9d:
                    5f:d6:79:b5:15:d1:8e:00:35:5f:26:65:d1:52:b5:
                    60:cb:0d:b1:9f:d2:d7:65:07:0c:42:43:22:b8:7d:
                    76:9a:12:87:0a:b6:d6:e0:19:28:31:fc:5b:a4:51:
                    46:d0:62:96:95:f9:bb:bc:2a:6b:32:b5:78:9d:17:
                    92:89:a2:cc:9d:8c:be:16:cb:7b:a6:00:cb:e8:d6:
                    06:85:d9:3c:12:f9:0b:27:94:02:d9:eb:f8:16:82:
                    3f:5f:84:4f:1d:47:a7:fd:18:c7:b1:df:68:bf:d3:
                    af:ff:c0:d1:c5:d0:46:21:9b:fe:f6:da:a0:67:c0:
                    94:5e:89:07:48:80:66:e0:29:53:38:27:6e:5f:b8:
                    41:0f:b6:f3:fe:25:7b:1e:df:53:2c:d3:d9:31:61:
                    e2:2a:11:55:50:a8:65:10:35:f2:f3:f9:85:cd:51:
                    95:9d:1c:d8:cc:f7:d6:8c:c8:cb:b5:0d:7b:29:92:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3A:2F:65:35:FF:2F:8C:B4:50:98:EF:B5:7F:47:73:0D:79:FB:CE
            X509v3 Authority Key Identifier:
                keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:0f:57:94:ef:72:a9:97:db:51:66:77:88:1e:7e:98:1d:
         67:8c:66:75:bf:de:07:b4:70:f9:13:ae:a4:47:5b:f1:15:dd:
         7a:32:28:cd:37:af:34:71:75:6a:e4:5e:98:54:ff:9d:e9:92:
         82:47:e4:e3:3c:60:68:a6:57:0c:8a:51:b9:9e:0b:9a:0a:10:
         d3:b9:ac:35:97:57:01:ad:70:77:80:a7:fa:02:c2:56:0f:78:
         ba:8e:fe:f6:06:6b:ae:a7:f2:13:a1:93:c6:b4:09:76:b5:0c:
         ed:26:73:26:3e:81:2f:37:a6:58:c2:19:b1:99:7e:43:4e:6b:
         9d:36:aa:f1:08:5a:9f:50:2d:0b:87:9f:c4:16:e8:9a:53:f9:
         86:44:c4:f8:71:6e:50:24:f3:31:6b:d5:f0:f1:b1:c1:52:76:
         aa:f5:c8:61:0a:02:2c:f2:4f:fc:71:11:2b:66:0d:c3:92:22:
         43:65:ae:64:e9:fa:d0:f1:f0:d3:16:08:e9:8e:cd:74:d2:d9:
         8c:56:a9:00:29:4b:c7:4c:9b:b7:b6:a5:23:6a:c6:d9:c0:a7:
         9f:71:bc:0b:77:1d:8c:98:d0:7a:ea:8d:85:b6:1e:7f:d7:e6:
         6d:cb:e8:3f:14:bc:e8:34:45:f0:80:75:03:b5:aa:56:fc:a0:
         33:75:17:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0
MTFGQ0RCMjAwHhcNMjYwMzI0MTc1NjU3WhcNMjYwMzMxMTc1NjU3WjAYMRYwFAYD
VQQDEw02OWMyZDA2OS00NDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdYFcEtxOnw6f1MqVTG6GqbkPZ1+N66QoE3lvDToRSqYRjBshh9z1p+emMCJ
w0rdPmadStAjAVxA5//tw4rlFsP8avX59gqchZ1f1nm1FdGOADVfJmXRUrVgyw2x
n9LXZQcMQkMiuH12mhKHCrbW4BkoMfxbpFFG0GKWlfm7vCprMrV4nReSiaLMnYy+
Fst7pgDL6NYGhdk8EvkLJ5QC2ev4FoI/X4RPHUen/RjHsd9ov9Ov/8DRxdBGIZv+
9tqgZ8CUXokHSIBm4ClTOCduX7hBD7bz/iV7Ht9TLNPZMWHiKhFVUKhlEDXy8/mF
zVGVnRzYzPfWjMjLtQ17KZIrdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFU6L2U1
/y+MtFCY77V/R3MNefvOMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC
NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r
aFJQZl9TLW5HQVJCSDgyeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmoIPV5TvcqmX21Fmd4gefpgdZ4xmdb/eB7Rw+ROupEdb8RXdejIozTevNHF1
auRemFT/nemSgkfk4zxgaKZXDIpRuZ4LmgoQ07msNZdXAa1wd4Cn+gLCVg94uo7+
9gZrrqfyE6GTxrQJdrUM7SZzJj6BLzemWMIZsZl+Q05rnTaq8Qhan1AtC4efxBbo
mlP5hkTE+HFuUCTzMWvV8PGxwVJ2qvXIYQoCLPJP/HERK2YNw5IiQ2WuZOn60PHw
0xYI6Y7NdNLZjFapAClLx0ybt7alI2rG2cCnn3G8C3cdjJjQeuqNhbYef9fmbcvo
PxS86DRF8IB1A7WqVvygM3UXVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:18 2026 by rpki-client