Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
File:                     NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json)
Hash identifier:          Y1bWRbTYfFlom/TLouFBbt4ayDgvGwkHPykrHjBAZZY=
Subject key identifier:   C5:11:3B:5A:39:5B:66:09:86:85:4E:9B:C5:3B:6B:39:4E:F9:10:85
Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
Certificate issuer:       /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Certificate serial:       1794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
Manifest number:          1787
Signing time:             Sun 26 Jul 2026 16:42:37 +0000
Manifest this update:     Sun 26 Jul 2026 16:42:36 +0000
Manifest next update:     Sun 02 Aug 2026 16:42:36 +0000
Files and hashes:         1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: DrMlgFw7CJbX98xt2Kw6xW8MtpzffXPPn6BoBmD91oE=)
                          2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: bWzOQvxadVIRVJggE+JLhWTu+F27vX2SLKSXFN99hpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
                          rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 16:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6036 (0x1794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
        Validity
            Not Before: Jul 26 16:42:36 2026 GMT
            Not After : Aug  2 16:42:36 2026 GMT
        Subject: CN=6a6638fd-6bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:1e:1c:30:9b:6a:e4:ef:d8:12:32:40:5e:
                    c1:00:0b:a7:8e:07:8c:82:99:f2:a0:81:32:f0:05:
                    4c:3d:58:2d:02:e9:fe:61:f2:07:35:4c:5b:55:1e:
                    f7:7d:3d:ee:5a:1d:e8:75:ae:24:91:7d:59:bf:0a:
                    40:07:6a:15:89:d9:dc:d2:11:4c:08:77:54:18:bf:
                    b7:c7:35:aa:6c:da:ae:22:f3:a2:99:16:8a:fa:f9:
                    3d:05:6f:f2:d5:e6:c1:e4:a5:a3:30:59:2f:56:67:
                    08:a8:b6:03:9e:54:d5:9e:6e:50:d4:3a:5c:b7:1b:
                    b0:9c:b0:cc:ed:75:1c:63:3b:94:e2:49:78:40:ee:
                    4d:ad:90:c2:99:b7:9f:df:90:37:c7:be:5d:49:bf:
                    66:8f:5f:36:2b:a7:19:c5:56:44:83:6f:6d:b5:71:
                    88:93:a4:4a:2d:3a:72:23:97:51:73:5c:a9:85:0a:
                    20:cd:30:3b:95:62:fe:3c:c7:99:89:17:55:ca:94:
                    86:14:c3:dc:4d:35:50:19:ff:d6:31:77:69:95:eb:
                    f6:86:d3:d4:53:0d:bc:b3:5a:3f:9d:96:12:ae:67:
                    a1:4a:40:89:6f:b4:f4:98:60:50:46:c5:4d:26:a7:
                    30:a0:02:24:d1:ce:5e:37:d5:57:24:b9:e8:59:b3:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:3B:5A:39:5B:66:09:86:85:4E:9B:C5:3B:6B:39:4E:F9:10:85
            X509v3 Authority Key Identifier:
                keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5c:dd:d9:25:d2:07:c3:63:a7:32:58:58:93:aa:67:50:b2:
         e5:de:56:3a:f4:e0:84:68:40:f9:af:90:d7:1c:dc:a1:f4:ee:
         24:89:fa:9b:78:ff:b7:5f:8b:ed:2c:8c:1c:46:59:d1:24:56:
         94:86:d3:e5:9e:57:3f:27:86:b0:5b:a3:e5:18:24:af:b6:ee:
         e2:e4:c1:6b:6d:18:f9:25:45:ee:b3:38:49:4a:f1:2f:b2:2c:
         cd:7b:ad:06:42:21:36:2d:2a:5c:b8:cd:2f:26:f5:39:16:4f:
         a4:ac:ed:34:f3:34:53:92:6f:03:ab:25:79:2c:be:e9:b8:16:
         bb:d1:ce:32:ae:df:67:e9:e3:8b:76:b5:73:fe:0f:4d:c9:91:
         18:cd:e2:f6:98:13:a5:7a:06:c9:dd:44:c6:66:0e:20:af:db:
         fe:ca:78:42:93:b5:69:e1:97:59:e5:f4:62:a2:e4:0a:05:ad:
         5e:c2:f8:8c:76:84:f7:be:f0:a1:37:3d:82:44:f4:62:3a:79:
         26:d3:b1:be:f9:1f:48:25:17:9e:5e:7d:d2:28:00:e9:ea:3c:
         41:b5:8c:94:ae:23:20:54:fd:80:79:28:2d:7f:0e:83:1e:98:
         9d:ae:f4:04:6e:47:41:11:d8:ee:1c:53:7e:25:47:3c:b6:cc:
         8a:c4:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:02:33 2026 by rpki-client