Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File:                     nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier:          ka2QwZr5XMTKkl8iKZVEyY8fBILc0He3svDATPgrZdU=
Subject key identifier:   07:70:A4:AB:BB:AB:CD:B6:38:18:0A:47:A4:90:9F:95:E8:78:4F:45
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number:          0185
Signing time:             Wed 25 Mar 2026 04:05:52 +0000
Manifest this update:     Wed 25 Mar 2026 04:05:51 +0000
Manifest next update:     Wed 01 Apr 2026 04:05:51 +0000
Files and hashes:         1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: 7sdHrhgu0wYYyp4J5Mr72KoJ3oKVk5f99SIpl0Q7gvw=)
                          2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: MJlaqnS82QfPaFkBVwwonnR90ewDUtA1xti42OYwzFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: Mar 25 04:05:51 2026 GMT
            Not After : Apr  1 04:05:51 2026 GMT
        Subject: CN=69c35f20-cf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:f0:12:af:50:30:f6:71:17:0a:d7:4a:25:
                    d1:79:78:ce:6d:57:1d:e7:73:2b:6b:82:a7:a7:fb:
                    cf:94:37:74:10:a2:18:8a:07:cb:f4:05:96:0a:25:
                    59:4e:a7:ad:b4:73:e5:ef:c3:26:ad:71:7b:31:e2:
                    4e:44:82:1c:50:75:ac:ec:f9:a3:e8:09:69:1a:fe:
                    f5:f9:06:f6:b1:60:88:6b:7e:ac:de:57:32:90:b5:
                    c8:66:7f:05:f5:49:c8:12:71:78:5a:c4:6a:01:06:
                    53:31:e5:ea:4f:00:a8:4c:ff:20:d2:28:0c:af:de:
                    31:ea:d2:39:0c:c7:31:df:90:99:7a:0c:59:0f:e5:
                    f1:42:b2:7f:99:55:dc:b8:0d:eb:dc:9f:36:e4:56:
                    a5:48:5c:fa:59:01:82:de:06:80:e1:c1:ec:3d:76:
                    3f:4b:ea:86:d6:4f:62:fa:d1:04:40:64:7a:bc:c9:
                    15:e2:3e:b6:c8:03:57:71:6c:f3:49:8d:dc:1e:ca:
                    fd:39:35:a6:91:8a:22:16:7c:15:25:72:f0:88:07:
                    fa:5f:3d:1d:78:97:6b:d2:19:fc:d5:89:15:2a:51:
                    1c:08:72:e7:0e:1e:31:f6:ea:66:24:6d:61:4c:43:
                    0e:79:ee:5f:dd:e5:eb:92:7e:e3:ad:76:a1:e3:94:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:A4:AB:BB:AB:CD:B6:38:18:0A:47:A4:90:9F:95:E8:78:4F:45
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:17:0f:73:1b:7d:94:a2:4f:f9:34:9a:6d:b1:95:91:99:
         49:18:d5:b2:f5:37:0b:51:6d:82:5f:20:97:3c:1b:06:cf:22:
         6a:29:89:a9:38:f2:0a:c1:53:ca:bf:55:f4:dc:ee:52:86:c8:
         18:ca:c0:f1:f8:52:4f:c3:9a:42:b7:99:fa:07:04:0a:73:9f:
         ba:98:00:17:7e:05:0f:ae:56:04:e1:2f:d9:48:74:22:2d:64:
         df:d0:e6:11:bc:57:9d:1a:f6:49:30:8a:30:a0:6c:31:91:93:
         68:a0:b8:cb:04:b7:2c:0b:d0:a9:50:b3:e7:c3:87:94:0d:f1:
         d2:72:e0:da:e3:dd:76:49:46:7d:25:87:c2:fb:77:87:e2:d4:
         1e:25:28:0f:61:be:bf:88:77:fc:a9:90:58:ca:69:56:a6:df:
         cb:53:19:6f:e4:c7:26:ff:50:ee:13:24:8e:22:93:57:eb:c2:
         47:91:b0:78:03:dc:04:32:0c:5e:a1:3f:22:39:0d:1e:21:e0:
         e7:66:ff:97:de:49:e6:ea:ee:ce:3f:3d:0b:81:dd:c5:d3:24:
         a3:9d:3a:a6:2e:15:25:f1:f3:c1:ce:68:b9:12:2e:63:f8:cc:
         81:0e:9a:bf:ae:72:82:13:ae:af:3d:22:d1:3c:ab:42:90:27:
         fd:ee:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:21 2026 by rpki-client