Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          AmTWRPdIpiBkkoGpmonkGX6iR4d3M+SB1XxbgyN8o4Y=
Subject key identifier:   BF:C1:7F:DF:00:0F:05:1A:91:1C:98:42:2F:8B:5E:72:E7:D8:3E:73
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          146D
Signing time:             Thu 24 Sep 2026 16:50:12 +0000
Manifest this update:     Thu 24 Sep 2026 16:50:11 +0000
Manifest next update:     Thu 01 Oct 2026 16:50:11 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: fXcL3lnRLArzjjKt/SdqzJLxC16ctwEIdfz5gNJylqA=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +OFCUfBG0g6h4uqeaVuC5IJPXEJlIylKej+6WLVlEu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5240 (0x1478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Sep 24 16:50:11 2026 GMT
            Not After : Oct  1 16:50:11 2026 GMT
        Subject: CN=6ab554c4-4f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:16:9c:51:9b:f7:c7:dd:3f:72:c6:11:a8:
                    60:86:e2:6f:6e:6c:9f:a9:0f:40:91:1c:91:91:37:
                    b9:39:c8:8c:54:0e:cf:37:c7:ee:b6:44:39:bd:55:
                    c0:86:01:f7:42:b0:21:b2:7e:66:32:81:87:13:9e:
                    cb:ee:81:2f:10:a9:ce:e3:1d:7c:d2:2a:e2:c6:cb:
                    d4:fe:e5:4a:9d:77:bb:78:7d:17:4e:42:ef:20:6d:
                    c2:b7:6e:90:46:8e:0a:18:00:ae:b9:a6:27:bb:98:
                    98:61:b2:3e:45:56:20:54:80:ba:6b:bd:f8:f7:80:
                    0a:8c:9f:04:30:cf:43:47:e2:26:16:4e:50:ec:80:
                    df:86:cc:ae:3c:58:46:02:34:c0:6e:18:6d:70:42:
                    3c:e8:47:80:7c:c5:34:e3:ec:17:05:5e:f6:9a:03:
                    5a:b7:e3:b5:1b:0f:6e:e8:ad:0c:55:e7:d6:13:2c:
                    87:07:36:df:30:0e:b5:6a:08:26:fc:b1:5c:cf:88:
                    4c:8f:68:69:91:7b:1a:7d:75:3d:31:9d:06:cf:0f:
                    3d:40:fb:4d:65:fa:e4:4c:35:73:79:b7:c2:ee:88:
                    5c:37:f6:c9:99:d5:3e:50:44:4f:e3:c7:17:95:fd:
                    09:5b:55:cf:cf:4c:33:24:cb:1d:f5:ed:19:84:dc:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C1:7F:DF:00:0F:05:1A:91:1C:98:42:2F:8B:5E:72:E7:D8:3E:73
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:0e:f6:ff:45:ec:7e:76:7a:80:9b:65:f6:02:16:ef:57:
         32:1f:37:52:1b:63:8c:5b:fa:40:60:0c:54:a7:d3:06:4d:18:
         58:da:fe:4f:9c:ab:a9:4c:a7:5c:97:d9:7b:64:cc:57:aa:e4:
         97:08:f1:c0:df:53:f9:60:60:17:72:7a:54:17:9f:f6:ed:b2:
         2e:34:20:77:71:49:c7:bf:78:b1:e9:fe:6f:8a:c7:65:cd:a8:
         07:67:e9:d2:c5:6a:80:20:7b:6b:5a:73:1f:ae:ea:b9:03:4a:
         2b:4f:11:59:b2:f3:22:0e:af:11:c8:64:39:52:97:8d:37:12:
         65:6b:22:7c:76:c8:c8:b4:8f:a7:bf:71:eb:8a:d5:39:8e:4d:
         93:af:d8:a6:47:bd:50:88:2a:0d:44:9d:61:a9:47:9a:65:0d:
         e2:97:0a:85:de:b4:1c:3e:6a:19:d5:bd:55:c7:1f:9c:b3:3c:
         ba:69:d4:64:a3:8b:e5:b3:af:4d:a1:3e:af:56:92:78:4a:2a:
         19:69:b6:a3:2f:16:b9:89:04:33:e1:a2:33:58:f0:58:c7:24:
         16:2f:b3:09:cf:c0:79:95:60:1c:1e:d3:8b:9d:d6:4c:51:95:
         e3:c1:d2:9c:8b:8b:a1:1d:28:17:b9:b4:7c:b7:d1:1e:f4:06:
         c2:11:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:49:01 2026 by rpki-client