Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File:                     nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier:          fPxljcMZvG0bxAnjfBld+NWwGBpbiNpfq4OkSGf5ojQ=
Subject key identifier:   38:76:1D:FC:B5:19:1C:14:CB:AC:D5:E9:29:16:D1:0D:1C:28:EE:12
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer:       /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number:          C7
Signing time:             Tue 27 Oct 2026 07:04:51 +0000
Manifest this update:     Tue 27 Oct 2026 07:04:51 +0000
Manifest next update:     Tue 03 Nov 2026 07:04:51 +0000
Files and hashes:         1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: RxCgXbegc8U+zHGtgM8j4bcvWEJ1TiSNdsxBefvFv/k=)
                          2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: Yna++zDeE89ulMcZkL3ygCODxHhvZWE/Q4kRPAKzwQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
                          rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
        Validity
            Not Before: Oct 27 07:04:51 2026 GMT
            Not After : Nov  3 07:04:51 2026 GMT
        Subject: CN=6ae04d13-26cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:fd:4a:50:54:f0:72:04:d3:1a:46:d8:b8:
                    c5:f2:81:e9:5c:4a:ae:71:3c:19:95:95:89:a0:20:
                    11:c8:07:b6:2f:92:da:8c:83:2b:3d:9f:cc:ac:d6:
                    81:f6:d5:7e:40:f1:f8:bb:27:70:c4:3a:21:1d:aa:
                    f9:4e:09:21:e4:2e:ec:7d:ea:2e:17:2a:1c:a0:d0:
                    52:27:89:bb:44:3d:66:e9:db:92:c0:53:80:af:e4:
                    0f:83:a5:7e:d3:99:df:69:c5:47:b9:3e:72:3c:d6:
                    09:c1:d9:8e:d9:3f:de:6e:0d:b0:cc:7e:55:5c:63:
                    38:31:00:bd:6c:72:d7:72:ad:1d:2b:b2:05:70:5b:
                    1b:d8:a8:d2:c5:8e:27:aa:e0:0f:da:d5:4c:92:a1:
                    40:93:8c:e4:b2:0b:ea:47:ef:f0:7c:ee:45:61:31:
                    0e:eb:7b:31:66:2e:43:6b:d0:22:b7:40:24:87:a7:
                    33:eb:ad:81:b3:e3:6c:a4:d7:d9:6a:7f:96:ca:7f:
                    f9:20:cd:c0:ed:df:00:db:4f:ff:58:93:f8:d8:d6:
                    da:ba:0d:83:5a:0f:4d:77:ce:30:0c:55:12:a8:31:
                    1d:04:c0:d4:96:d4:bc:72:d3:06:35:04:4a:9e:bc:
                    24:d9:22:16:d4:8b:51:9a:53:5c:d3:83:5d:d0:8b:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:76:1D:FC:B5:19:1C:14:CB:AC:D5:E9:29:16:D1:0D:1C:28:EE:12
            X509v3 Authority Key Identifier:
                keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:27:8d:de:62:34:c9:4e:21:5b:88:07:64:73:59:e4:33:
         8f:bd:0b:ab:6c:d1:16:83:0a:fa:b1:81:a2:de:82:c6:29:af:
         67:70:a5:ce:f5:83:cd:cc:fe:af:5f:28:ba:bc:0a:2a:39:e5:
         64:cd:4e:c6:d4:b1:fb:5c:a6:79:da:af:22:96:10:31:4f:86:
         3c:c7:6c:95:d3:ae:73:2f:64:39:15:64:dc:64:82:a9:cf:c2:
         65:7b:12:26:31:fc:d7:43:cb:d2:0f:41:4e:14:7b:8d:21:2d:
         9a:a3:d4:ed:80:ea:98:38:71:2c:df:af:40:c8:0f:a9:98:7e:
         56:c5:c0:73:90:68:07:3f:f1:2f:7c:ae:c8:fb:e8:6c:67:1a:
         18:e7:1e:a1:b3:67:0c:fe:ae:99:b2:56:2e:0a:bc:5f:86:bb:
         8d:dd:2a:23:d1:aa:ae:8f:e0:2d:d4:50:e9:26:c7:d5:3e:03:
         0f:87:8e:37:9b:be:e0:68:b2:d9:35:36:0f:25:67:6a:99:52:
         ab:d8:59:13:6f:5f:15:c0:11:19:06:08:b5:79:f7:f5:3c:c3:
         54:3d:da:54:9e:36:2f:99:2e:f7:24:fd:4b:f8:5e:53:16:bf:
         91:9f:ca:c1:31:94:34:68:6e:a9:f8:00:2e:06:f3:d8:9f:0b:
         91:4b:13:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4MDExMTAvBgNVBAUTKDlEMjYzMjlBQjdBOTVCOEZBOTU5NjM3NURBMzcwODlF
NEQ3QzIyQ0IwHhcNMjYxMDI3MDcwNDUxWhcNMjYxMTAzMDcwNDUxWjAYMRYwFAYD
VQQDEw02YWUwNGQxMy0yNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xj9SlBU8HIE0xpG2LjF8oHpXEqucTwZlZWJoCARyAe2L5LajIMrPZ/MrNaB
9tV+QPH4uydwxDohHar5Tgkh5C7sfeouFyocoNBSJ4m7RD1m6duSwFOAr+QPg6V+
05nfacVHuT5yPNYJwdmO2T/ebg2wzH5VXGM4MQC9bHLXcq0dK7IFcFsb2KjSxY4n
quAP2tVMkqFAk4zksgvqR+/wfO5FYTEO63sxZi5Da9Ait0Akh6cz662Bs+NspNfZ
an+Wyn/5IM3A7d8A20//WJP42Nbaug2DWg9Nd84wDFUSqDEdBMDUltS8ctMGNQRK
nrwk2SIW1ItRmlNc04Nd0ItrTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDh2Hfy1
GRwUy6zV6SkW0Q0cKO4SMB8GA1UdIwQYMBaAFJ0mMpq3qVuPqVljddo3CJ5NfCLL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjgwMS8yQjkxNzcyQ0E1
OEExMUYwQjAxNzBCNTBDNEY5QUUwMi9uU1l5bXJlcFc0LXBXV04xMmpjSW5rMThJ
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25TWXltcmVwVzQtcFdXTjEyamNJbmsxOElzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjgwMS8yQjkxNzcyQ0E1OEExMUYwQjAxNzBCNTBDNEY5QUUwMi9uU1l5bXJlcFc0
LXBXV04xMmpjSW5rMThJc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj/wnjd5iNMlOIVuIB2RzWeQzj70Lq2zRFoMK+rGBot6CximvZ3ClzvWDzcz+
r18ourwKKjnlZM1OxtSx+1ymedqvIpYQMU+GPMdsldOucy9kORVk3GSCqc/CZXsS
JjH810PL0g9BThR7jSEtmqPU7YDqmDhxLN+vQMgPqZh+VsXAc5BoBz/xL3yuyPvo
bGcaGOceobNnDP6umbJWLgq8X4a7jd0qI9Gqro/gLdRQ6SbH1T4DD4eON5u+4Giy
2TU2DyVnaplSq9hZE29fFcARGQYItXn39TzDVD3aVJ42L5ku9yT9S/heUxa/kZ/K
wTGUNGhuqfgALgbz2J8LkUsTaQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 23:46:04 2026 by rpki-client