Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
File:                     naybVs-kN1sQyJkjPVX2Bx7wgyE.mft (raw, json)
Hash identifier:          yfOXsiy12beSYNWw5KUuvec5z9Gc3Vmo2Rxp+uwGPK4=
Subject key identifier:   9F:BD:C6:DB:D2:6D:DD:80:BD:AC:01:A9:CC:25:42:F5:E3:9B:29:95
Authority key identifier: 9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
Certificate issuer:       /CN=A91A3C2B/serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
Manifest number:          2D
Signing time:             Thu 23 Jul 2026 10:47:34 +0000
Manifest this update:     Thu 23 Jul 2026 10:47:34 +0000
Manifest next update:     Thu 30 Jul 2026 10:47:34 +0000
Files and hashes:         1: naybVs-kN1sQyJkjPVX2Bx7wgyE.crl (hash: JPDuFd2rs9TET6vKh6J2JQCPWj4lIxxid0AshxvoaIo=)
                          2: D021169C44F611F1AD994B65CC833773.roa (hash: BzWsJODB8wb2BTymGqiakgMGysHOF2qAkOGM8uSKf0Q=)
                          3: D041C5C644F711F1A94CB46CCC833773.roa (hash: ujAUvex6eehN8/9sST01/gQAgORLT9YZQ+hSBO6s3PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl
                          rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3C2B, serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
        Validity
            Not Before: Jul 23 10:47:34 2026 GMT
            Not After : Jul 30 10:47:34 2026 GMT
        Subject: CN=6a61f146-c31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:c7:e4:e9:5b:c6:1b:16:df:78:07:55:93:
                    87:7a:a1:1f:c9:1c:0a:33:f1:4b:88:94:da:e0:f8:
                    4e:02:82:1d:b8:52:0d:1a:1b:03:fc:b7:d6:99:e1:
                    c6:b9:f7:8b:bc:82:84:32:18:35:7a:6e:2d:da:85:
                    cc:00:5f:4a:92:54:08:6f:cd:c7:1a:05:51:0d:2d:
                    c4:61:f8:d0:4e:1c:fc:2d:4e:a1:7f:e3:39:41:61:
                    a1:c5:ca:de:cd:83:6a:7b:77:66:07:92:e5:42:bc:
                    89:ec:6c:25:e8:9b:a6:2e:37:26:75:d2:53:fb:90:
                    14:1d:d2:ca:eb:c3:a9:c1:41:82:24:20:b7:c4:60:
                    1b:06:a0:18:a4:c5:50:a4:8b:b1:7b:95:22:9c:2d:
                    95:21:be:6e:85:cf:75:dd:af:5a:11:db:fd:6e:32:
                    4c:1b:0f:fd:9d:9e:64:56:ab:f5:d9:66:2b:4b:aa:
                    fa:80:7c:71:1f:39:d6:ba:43:c7:d0:b4:ea:26:cf:
                    e1:eb:e1:8b:eb:25:9b:92:ed:c2:0a:fd:c3:d3:8f:
                    58:a9:06:47:4d:47:c4:c9:6f:6e:19:55:42:2f:69:
                    ea:9d:97:cf:4a:2e:fa:df:29:55:6c:ea:6b:86:e7:
                    73:31:ac:81:ab:6f:37:17:bd:90:6d:64:13:a7:49:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BD:C6:DB:D2:6D:DD:80:BD:AC:01:A9:CC:25:42:F5:E3:9B:29:95
            X509v3 Authority Key Identifier:
                keyid:9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:9c:b3:06:79:df:e0:96:38:2c:9c:a6:54:d5:4c:45:23:
         24:a0:eb:8f:27:dc:da:73:a3:82:3a:ee:ce:d1:85:93:0b:8e:
         e7:e0:b4:c8:59:6f:93:5e:bd:93:a0:87:59:85:da:c9:bb:02:
         5e:c9:1f:5e:cc:1d:b8:eb:e9:e6:e5:e2:83:30:6d:77:1d:7d:
         44:f7:52:6d:10:bd:0e:70:1e:3d:42:59:f7:ad:c4:c0:d6:b0:
         08:c7:4b:83:f1:63:b8:e8:20:8a:7e:c2:f7:fa:44:07:c6:35:
         18:91:1d:19:4d:2d:42:26:57:f2:52:10:b4:89:72:de:8a:c5:
         54:89:0a:07:d1:50:15:86:bd:24:86:c7:27:b4:9b:39:e8:7d:
         34:18:e3:6a:03:dc:0b:39:f5:ea:76:b2:59:2d:10:52:6e:33:
         f0:d4:b0:05:21:37:e9:12:73:36:e0:a8:ad:46:e3:51:10:1a:
         2a:0d:5e:77:aa:3b:e9:37:fa:cc:fc:3a:31:a3:29:31:63:63:
         fb:7f:7b:9b:ab:35:21:97:82:ac:4f:8c:4d:59:88:47:33:21:
         30:3a:a0:1b:c2:92:6e:1e:7d:71:69:96:72:42:00:40:ea:44:
         0a:20:6b:d7:72:e1:66:1c:6d:df:15:21:97:50:f7:80:95:e2:
         bc:46:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:23 2026 by rpki-client