Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json)
Hash identifier:          klUpxa9g0JhU/dLXFNmwSb1LC+H26gFhzWNWCsM0Um4=
Subject key identifier:   CC:61:BD:F1:6D:9A:79:07:78:23:7C:29:65:89:7D:63:EA:A1:13:B0
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
Manifest number:          018F
Signing time:             Sun 05 Apr 2026 03:55:01 +0000
Manifest this update:     Sun 05 Apr 2026 03:55:00 +0000
Manifest next update:     Sun 12 Apr 2026 03:55:00 +0000
Files and hashes:         1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: 4j6E0ldBEfBKhSTNsyg3mjIPD1tnEU18/0wXbvRYlvo=)
                          2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: JE9wCEYRgZTB7W117V26aasRFjnZsaxHqS2MVup4Q8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: Apr  5 03:55:00 2026 GMT
            Not After : Apr 12 03:55:00 2026 GMT
        Subject: CN=69d1dd14-fc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:22:3f:89:ab:80:86:e2:f6:27:40:76:09:
                    ce:1a:e4:ad:ae:85:bc:4c:46:af:4f:26:d5:9c:3d:
                    4b:64:7e:e8:8b:ec:c8:1e:38:bd:ea:61:1d:a9:6c:
                    05:1f:e0:e4:9b:0b:e2:fc:9f:49:8f:69:29:be:39:
                    9d:d5:f2:4f:4a:28:bf:1b:b1:a8:d9:57:a0:65:2e:
                    8d:18:4a:bd:4f:01:ce:7e:70:40:32:f2:20:33:72:
                    eb:c1:27:a3:e8:7e:e6:d2:cc:b3:b5:7b:b9:fb:08:
                    dd:df:8f:5e:fb:d1:6e:d5:fe:7e:59:0f:d0:ad:ef:
                    19:0c:36:69:a4:a8:0b:7d:f5:cc:1b:d4:8d:ae:f2:
                    b3:be:e4:48:6f:b9:f7:cf:b8:07:7a:22:3c:84:00:
                    7b:3c:b9:a4:38:b7:30:f9:db:10:a1:03:88:3d:d7:
                    dd:54:5d:65:60:e4:a8:33:67:9b:2e:7b:4b:7b:48:
                    79:9c:ef:e7:35:f8:a9:2c:92:c9:ad:3e:ec:b7:b8:
                    7d:92:a3:02:56:6b:bb:3c:e1:13:73:1f:22:cb:ae:
                    f9:08:7d:e1:ab:f2:e6:f9:92:77:dc:71:b0:58:29:
                    c2:fa:f3:5b:56:b5:98:74:91:af:fc:e2:5e:c3:03:
                    bd:4b:5c:7d:af:d3:ed:ef:22:c6:a6:35:b7:56:79:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:BD:F1:6D:9A:79:07:78:23:7C:29:65:89:7D:63:EA:A1:13:B0
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:c3:b2:a2:26:a6:43:05:d0:74:81:cc:7a:93:3e:f0:87:
         20:01:b7:35:c6:0d:53:d3:3c:5b:2b:e1:a5:da:d1:af:64:a8:
         04:b2:d5:b4:c1:5a:51:53:68:cd:1f:64:f9:aa:fb:fb:ca:d3:
         d0:5e:a0:82:06:9d:cc:d9:98:c5:fe:7e:1a:ac:4d:4b:17:9f:
         3d:68:26:c9:87:ff:92:7c:c6:ee:9c:4c:21:bc:d1:19:19:76:
         52:bd:fa:4a:0d:8a:af:6f:f2:83:63:9e:fd:6e:ac:d1:74:d3:
         a0:a3:47:eb:f7:86:22:ec:6d:65:11:e2:50:3f:41:91:62:b1:
         9b:c2:51:03:cc:bb:1e:d6:0c:c3:7c:29:e2:75:f5:d8:58:56:
         4c:dc:e2:92:eb:a2:12:c4:ca:89:14:70:42:b0:67:eb:79:15:
         91:96:78:6b:45:c2:d1:e0:8b:0f:e0:36:5b:3a:c2:47:48:67:
         84:39:92:73:b5:c4:be:7e:08:fa:e1:42:60:9d:54:c3:2b:87:
         5d:4f:bc:3c:fa:52:aa:a3:46:ec:57:92:95:7d:16:10:a9:ac:
         d3:b7:7a:55:4f:84:9e:05:14:80:90:f3:5c:36:9b:96:48:7a:
         57:b4:fa:ed:b1:dd:d2:d8:84:a9:c0:08:1e:4b:91:f2:15:bc:
         63:08:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:06 2026 by rpki-client