Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json)
Hash identifier:          K8FIytxldGZnYjvRAvHxwYxN3Qtkvj11hzWQ0tlGmpM=
Subject key identifier:   52:90:C1:AB:0C:8B:02:AC:B5:7D:49:2D:6B:F7:0D:21:31:6E:0D:52
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
Manifest number:          01D5
Signing time:             Wed 19 Aug 2026 04:18:42 +0000
Manifest this update:     Wed 19 Aug 2026 04:18:41 +0000
Manifest next update:     Wed 26 Aug 2026 04:18:41 +0000
Files and hashes:         1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: jn7kYZ5hq5lSa6hUFLUJxD81pQ8fHyMrAFsd3UrtGKk=)
                          2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: 4R6KFekI1OlC4+faHbJqTsr4TpX4rVlr3fmpBllEC3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: Aug 19 04:18:41 2026 GMT
            Not After : Aug 26 04:18:41 2026 GMT
        Subject: CN=6a852ea2-6dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:fd:f9:a3:eb:03:cf:56:9c:e0:f7:1f:cb:
                    0b:7c:8f:16:7f:15:4a:51:1b:65:56:9d:a4:57:e3:
                    e0:47:98:15:d9:70:76:e7:9f:39:eb:c4:4a:16:0a:
                    06:ba:cc:ad:a2:b6:d8:b2:a0:20:3d:54:e2:66:57:
                    b3:a0:66:3f:54:c3:0d:2a:a5:61:c8:8b:1c:98:06:
                    20:80:f4:fe:09:66:04:69:1e:0f:dc:3f:93:99:aa:
                    05:69:e7:7a:fa:c8:03:d1:28:df:78:44:6e:e9:a1:
                    c2:70:e6:dc:65:ca:7a:f3:da:f9:d4:ad:2e:a1:d0:
                    eb:34:f2:3d:10:7e:d0:4b:0b:79:9b:a7:ea:7c:d3:
                    a7:ca:39:db:0b:41:24:0b:f6:9f:80:00:1e:b2:d5:
                    a0:b6:d8:4c:b8:65:83:50:77:4e:7a:7a:a9:da:0e:
                    53:b0:ba:94:a7:64:37:26:e5:4e:9f:c6:b6:82:86:
                    19:2d:8c:e0:f9:bd:2d:2f:7d:4a:1b:db:01:79:76:
                    1d:2f:82:bf:a9:ac:aa:09:fa:10:de:39:02:3a:4c:
                    70:4d:43:0f:8f:14:d9:05:56:9e:86:1a:15:72:1c:
                    10:92:fb:47:e2:ec:24:6b:e9:40:59:80:df:f8:86:
                    8d:71:d8:0b:5a:dc:2f:ec:f9:9b:6a:38:99:46:39:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:90:C1:AB:0C:8B:02:AC:B5:7D:49:2D:6B:F7:0D:21:31:6E:0D:52
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:db:26:8d:bf:a2:c5:f2:a5:c1:8b:7e:d1:bc:d7:2e:0e:5d:
         89:48:b1:ba:35:46:74:cd:94:c1:f5:19:5f:b1:6d:01:83:d5:
         ff:50:b1:59:b7:0d:39:8c:05:d9:40:f3:af:5e:b0:14:a4:13:
         d6:91:a9:a9:f7:3d:44:45:41:74:61:3e:d7:48:d8:5a:fc:48:
         6d:85:11:04:94:e0:f0:15:be:70:18:45:4d:dc:01:37:63:5c:
         ab:71:f4:16:1d:6e:1f:7a:64:c8:23:56:33:82:db:ea:44:fc:
         c2:86:53:c4:87:04:9c:68:b0:28:a0:a6:b6:a1:b6:00:3f:33:
         6b:71:ef:3f:c4:a1:e9:88:23:d7:72:12:a5:47:c6:0f:35:ae:
         fb:b3:1f:06:4a:67:81:fb:43:fb:63:f4:d7:6b:47:ed:6d:88:
         d3:e4:cf:95:9e:da:6c:a5:18:15:da:eb:9a:d7:f5:93:9e:79:
         2e:42:df:95:c4:35:5e:a0:e0:20:70:31:f1:1d:99:70:48:fd:
         65:87:4a:fc:d1:5f:5d:2a:a1:aa:0b:b4:76:e3:d1:8c:9d:d2:
         ff:10:cd:5f:37:cf:53:ae:b7:26:69:d1:5a:12:65:ba:dc:07:
         1b:b9:1c:fe:76:1d:cd:b9:3b:66:60:b4:6e:a0:29:70:fa:bc:
         c2:62:df:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4MjExMTAvBgNVBAUTKDlFQkNCMEMzNEU0Rjc3RjIyNzhEQjE1QzU5RTFFREFD
N0U1NTc1NkUwHhcNMjYwODE5MDQxODQxWhcNMjYwODI2MDQxODQxWjAYMRYwFAYD
VQQDEw02YTg1MmVhMi02ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnhf9+aPrA89WnOD3H8sLfI8WfxVKURtlVp2kV+PgR5gV2XB2558568RKFgoG
usytorbYsqAgPVTiZlezoGY/VMMNKqVhyIscmAYggPT+CWYEaR4P3D+TmaoFaed6
+sgD0SjfeERu6aHCcObcZcp689r51K0uodDrNPI9EH7QSwt5m6fqfNOnyjnbC0Ek
C/afgAAestWgtthMuGWDUHdOenqp2g5TsLqUp2Q3JuVOn8a2goYZLYzg+b0tL31K
G9sBeXYdL4K/qayqCfoQ3jkCOkxwTUMPjxTZBVaehhoVchwQkvtH4uwka+lAWYDf
+IaNcdgLWtwv7PmbajiZRjmorwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKQwasM
iwKstX1JLWv3DSExbg1SMB8GA1UdIwQYMBaAFJ68sMNOT3fyJ42xXFnh7ax+VXVu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgyMS9BQjIyRUFDNEQ1
NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRfSW5qYkZjV2VIdHJINVZk
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25yeXd3MDVQZF9JbmpiRmNXZUh0ckg1VmRXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTgyMS9BQjIyRUFDNEQ1NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRf
SW5qYkZjV2VIdHJINVZkVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUdsmjb+ixfKlwYt+0bzXLg5diUixujVGdM2UwfUZX7FtAYPV/1CxWbcNOYwF
2UDzr16wFKQT1pGpqfc9REVBdGE+10jYWvxIbYURBJTg8BW+cBhFTdwBN2Ncq3H0
Fh1uH3pkyCNWM4Lb6kT8woZTxIcEnGiwKKCmtqG2AD8za3HvP8Sh6Ygj13ISpUfG
DzWu+7MfBkpngftD+2P012tH7W2I0+TPlZ7abKUYFdrrmtf1k555LkLflcQ1XqDg
IHAx8R2ZcEj9ZYdK/NFfXSqhqgu0duPRjJ3S/xDNXzfPU663JmnRWhJlutwHG7kc
/nYdzbk7ZmC0bqApcPq8wmLf/g==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:44 2026 by rpki-client