Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File:                     NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier:          cZrCUyF+DN43O+s+NB9iTjA2DzLvbaojVOHO42bRrxY=
Subject key identifier:   81:48:B1:25:21:EE:BC:17:46:17:1F:35:63:46:9C:CB:07:46:12:13
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer:       /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number:          014B
Signing time:             Wed 25 Mar 2026 04:25:37 +0000
Manifest this update:     Wed 25 Mar 2026 04:25:37 +0000
Manifest next update:     Wed 01 Apr 2026 04:25:37 +0000
Files and hashes:         1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: 93n4a0bvkMD50nuR4gqAIOBqxuNjrs3n0h2ye3JC9tU=)
                          2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
                          rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
        Validity
            Not Before: Mar 25 04:25:37 2026 GMT
            Not After : Apr  1 04:25:37 2026 GMT
        Subject: CN=69c363c1-2613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:5b:af:36:9c:8c:2a:0b:52:6e:4e:4f:64:
                    08:fe:7b:aa:19:8b:40:dd:28:94:d9:15:0b:10:28:
                    29:a6:13:d6:03:ce:d4:78:c1:8c:29:77:55:e2:94:
                    75:d3:ff:99:c8:b2:c4:11:9b:6f:7e:b6:be:66:94:
                    42:87:37:13:32:58:c9:92:fc:42:0d:2c:17:81:21:
                    93:15:09:0c:cb:95:bc:3a:4f:33:04:3e:d6:43:43:
                    8a:97:e8:61:1e:f3:3b:4e:1b:c3:9f:71:bc:f5:e7:
                    13:a5:60:d7:0d:67:cb:07:ed:e0:a9:04:27:3a:08:
                    68:a2:12:c1:c7:ff:14:12:e8:6c:79:82:c9:d6:22:
                    99:ae:a5:0b:00:1e:02:fc:dc:e2:5e:57:fd:c5:c2:
                    f4:56:17:82:dc:cb:0d:d7:ba:27:f9:8c:73:26:68:
                    ea:18:5a:1c:6d:8b:bc:33:64:51:82:97:7f:58:33:
                    a3:42:9a:e0:5c:a1:01:79:8e:9a:bb:24:14:2e:51:
                    22:70:d8:22:85:3e:1c:37:a5:46:ee:b2:84:ed:2e:
                    36:12:28:8a:0a:6e:e2:2e:ce:40:8a:e2:42:fa:91:
                    d3:82:eb:03:fb:6f:70:80:33:89:ca:93:0c:61:f5:
                    52:24:f9:60:16:54:24:c5:d5:f5:4d:35:5f:7c:db:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:B1:25:21:EE:BC:17:46:17:1F:35:63:46:9C:CB:07:46:12:13
            X509v3 Authority Key Identifier:
                keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:60:94:e7:ca:f5:7f:ce:50:4e:61:38:84:36:09:3b:4e:
         b3:e5:91:ae:b9:93:48:e3:13:1d:e9:5f:49:6e:c9:d1:ce:de:
         c7:87:fe:ac:3f:aa:27:63:18:56:8a:4f:40:16:80:a2:1b:5a:
         12:41:32:96:b2:21:19:3b:1c:51:b4:9f:b4:ea:09:57:71:42:
         2d:eb:97:4a:56:f5:54:4b:72:0f:6e:8d:fa:c0:ed:61:17:b3:
         a1:23:6f:f5:00:28:92:59:65:b2:6c:b0:2b:bc:cd:f7:e0:0b:
         33:4c:50:96:13:b5:a0:a0:c6:b8:34:26:f3:b5:51:7d:a0:52:
         e3:3f:9f:48:0f:b0:8a:f8:f1:a1:d4:af:5b:b2:9d:05:10:82:
         61:8f:2f:e3:c2:9b:3d:94:d4:43:bc:71:eb:1c:a9:d9:5a:59:
         3a:19:25:3f:36:f8:e6:4f:af:e7:30:bd:3a:eb:9b:81:70:15:
         31:e3:6d:75:5e:4a:3d:84:75:22:c2:4a:32:7c:27:2b:bc:40:
         81:e7:f6:42:83:d3:74:57:12:05:0a:de:1d:0d:bb:9c:81:b4:
         eb:2e:2e:bc:93:f1:e5:dd:bb:b3:ab:9a:95:de:41:eb:f5:f4:
         e4:8e:66:0a:35:e8:ed:2f:1a:fc:a1:2f:c3:8d:49:b3:1e:46:
         49:b9:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:58 2026 by rpki-client