Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File:                     nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier:          h2rM00hEcuZS5y6KNhtVuRlhtI6SYek2wcII4DtQ474=
Subject key identifier:   20:3B:3C:B6:8B:23:C2:99:6C:7B:41:89:2D:28:0B:17:2D:08:EF:45
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer:       /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number:          76
Signing time:             Sat 23 May 2026 07:49:10 +0000
Manifest this update:     Sat 23 May 2026 07:49:09 +0000
Manifest next update:     Sat 30 May 2026 07:49:09 +0000
Files and hashes:         1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: WEJaOyXDWniXAb2Q1MNZvovVpQi3Huy7imLxdp9WgKg=)
                          2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: V9p3VnVVXAQzSFcHBfkfDtu8sHJ32uFT2t4ErkB7q/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
                          rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
        Validity
            Not Before: May 23 07:49:09 2026 GMT
            Not After : May 30 07:49:09 2026 GMT
        Subject: CN=6a115bf6-d412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:b2:bf:01:37:bf:03:d8:88:80:97:8c:b6:
                    9b:d3:62:cd:0e:4d:0f:57:db:37:04:32:96:79:26:
                    6a:18:a0:a1:4b:ca:41:65:21:34:68:97:e4:7e:fb:
                    35:67:11:f6:b4:26:8e:31:8b:d6:ef:8f:93:da:de:
                    2a:d3:c2:92:12:16:41:29:2a:26:bf:d9:49:ca:9a:
                    9e:31:f1:c0:15:45:51:0b:99:47:fd:cb:51:08:7a:
                    29:17:cb:d8:b7:89:57:e7:ee:66:3e:b1:03:d0:e5:
                    c6:80:33:80:ff:32:db:b6:1a:24:c1:ed:5e:03:23:
                    ce:50:e7:a6:f3:21:31:8f:ed:2d:52:26:6b:55:97:
                    d6:0e:39:2c:5c:bd:27:95:ef:af:60:69:df:b8:d0:
                    91:f0:5b:ae:65:fc:1b:bb:a3:80:a6:a2:73:a6:42:
                    94:e2:51:41:91:82:0c:39:f6:8c:f0:95:37:c8:a0:
                    2c:8d:c8:ec:14:65:da:39:02:6e:9e:5c:9f:2c:2e:
                    58:9e:67:c3:39:23:22:57:b8:5b:88:43:72:e3:de:
                    fd:45:18:d0:2c:3f:ee:6c:df:c5:f8:67:b2:02:df:
                    71:1a:f6:4a:bd:4a:66:3d:99:72:43:09:54:7d:7f:
                    81:a1:55:35:8f:ec:16:60:37:0a:b6:10:29:d8:48:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3B:3C:B6:8B:23:C2:99:6C:7B:41:89:2D:28:0B:17:2D:08:EF:45
            X509v3 Authority Key Identifier:
                keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0e:5a:cd:05:e4:86:e6:86:d7:17:32:c5:b5:25:08:da:ba:
         6c:be:af:ab:08:d6:d8:a4:91:65:eb:c8:08:d2:4d:12:55:24:
         e1:ad:7d:eb:e4:98:1d:65:4f:a4:01:38:9f:3f:f8:3e:a7:e0:
         a9:fc:ec:8c:bb:85:ab:68:db:54:84:3a:39:22:2e:fb:a0:b9:
         d9:1f:d2:66:d7:8e:c1:96:2e:21:02:52:fd:ca:f3:13:01:7e:
         8a:82:17:0a:2e:c2:a7:ea:31:54:4e:75:94:df:b9:f9:4c:3f:
         b6:a6:4c:ef:f9:a2:30:ee:08:79:d8:35:0b:59:e2:f7:43:f9:
         23:b2:b8:5a:14:9a:f4:ce:69:a3:eb:1c:2b:f3:8e:76:ac:47:
         36:c9:32:10:80:aa:bd:76:95:ce:12:f6:69:2a:bc:f3:59:1f:
         98:72:8c:41:d0:87:dc:f4:36:7d:f5:75:d2:0d:0f:a8:55:a8:
         46:4f:cf:52:3f:32:2f:5a:a8:c5:87:52:33:db:87:ad:8c:03:
         a4:a2:9f:1f:3b:9d:62:a1:66:05:5d:47:7c:e3:f3:60:a0:46:
         50:60:b8:49:01:16:14:c7:d4:58:99:ef:93:be:f1:67:15:ea:
         ac:07:75:c1:f5:ae:0d:25:fc:e8:e8:ca:26:bc:ff:bb:0c:b9:
         45:b6:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:38:38 2026 by rpki-client