Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
File:                     nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft (raw, json)
Hash identifier:          y6G8cRYH79AHy1Lh0r+yXXaQ3EmhfwhXO0Pki6N5V6c=
Subject key identifier:   1D:9B:38:E3:93:2C:15:EE:DF:D1:93:D1:7C:74:FA:C0:AA:26:B7:E5
Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86
Certificate issuer:       /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686
Certificate serial:       0485
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
Manifest number:          047C
Signing time:             Sat 04 Apr 2026 23:51:12 +0000
Manifest this update:     Sat 04 Apr 2026 23:51:11 +0000
Manifest next update:     Sat 11 Apr 2026 23:51:11 +0000
Files and hashes:         1: nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl (hash: UlTGl9dSFAD37YrHvoROeq9vIhPTWfuV+oiU0bU9JZo=)
                          2: 27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (hash: gmYF5YvGZ2u/e0r1UgH6fcHdtkq4icNsHiM+jSaE8Mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl
                          rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175906, serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686
        Validity
            Not Before: Apr  4 23:51:11 2026 GMT
            Not After : Apr 11 23:51:11 2026 GMT
        Subject: CN=69d1a3ef-d55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:ec:ce:29:57:54:12:c0:2a:0c:12:b3:32:
                    71:f7:2d:c9:f8:9c:03:4c:9b:e3:0d:c8:d0:27:b2:
                    86:98:ea:20:cc:e6:de:b7:17:71:7a:c8:90:6a:1c:
                    be:47:21:b8:9c:9a:3b:34:2c:49:c7:24:30:7f:30:
                    29:cb:b0:96:33:4b:5f:7e:e8:d8:e5:ed:81:58:49:
                    c3:b3:9f:40:13:96:3d:fc:4d:bc:6d:1d:6a:02:8a:
                    3c:95:2a:4d:9f:7f:35:cf:cf:bc:c8:1a:e9:5d:fd:
                    47:6a:c6:1d:0e:9b:67:33:28:42:c3:12:37:71:ac:
                    0e:85:bf:c4:72:89:8c:ca:33:83:99:ea:4c:e0:e3:
                    52:ff:ff:40:0d:73:ee:06:5e:7a:51:07:86:4b:e2:
                    1a:48:8c:9d:13:6a:86:c4:d0:77:be:16:f1:ea:b0:
                    da:d7:88:e3:0a:18:34:8b:49:f8:e7:51:c6:61:b9:
                    66:4f:f8:24:f0:55:e6:8f:5e:5f:fe:ec:33:c7:da:
                    1b:62:f2:f1:11:2a:9f:73:ba:8b:9e:d3:b9:3e:29:
                    0b:6f:59:74:89:7b:04:5c:4e:fd:24:bc:02:c7:3d:
                    fb:65:fa:f1:8d:76:ce:6d:aa:a6:db:96:c0:30:c3:
                    14:f8:1c:f7:99:96:02:c1:1e:57:60:d4:58:0f:3c:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9B:38:E3:93:2C:15:EE:DF:D1:93:D1:7C:74:FA:C0:AA:26:B7:E5
            X509v3 Authority Key Identifier:
                keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:cd:5d:84:cc:50:ba:8f:a8:79:95:7f:af:7e:a4:47:ce:
         79:ea:25:39:db:78:65:c8:16:ba:a2:56:1d:26:59:78:27:1d:
         57:0e:58:c3:fd:82:24:4f:f4:42:53:e2:03:e7:b1:55:63:e3:
         8c:ec:5e:c9:08:ca:cd:a8:99:9f:4a:b0:24:e3:4a:64:5f:bb:
         2d:07:52:cf:33:44:c2:f7:eb:4c:71:79:f3:f6:51:d7:b4:1b:
         82:24:a1:6c:df:a1:52:67:3c:29:b3:9e:4f:63:8d:ac:2c:98:
         8a:de:03:65:f4:c7:4e:a6:b3:71:aa:a8:10:86:44:cd:12:67:
         d9:fc:cd:db:30:56:4e:b3:76:bf:8e:38:49:ca:0a:15:18:9c:
         fb:e4:48:c5:40:4f:2d:34:90:42:11:67:bd:45:12:f7:17:0e:
         f3:f7:cf:62:5d:b4:f3:bb:8d:84:b0:26:20:09:9b:6a:ff:2a:
         a7:d8:1f:7a:fa:5c:0a:14:43:c9:89:01:7d:30:e7:c5:c7:12:
         cc:e9:d9:be:21:f9:62:53:e6:46:72:ac:0a:af:1f:ca:f8:6f:
         78:63:0b:9f:dd:89:79:c3:6b:3a:f0:fe:36:dd:ba:f3:bf:52:
         da:12:39:4f:5b:5d:fd:20:39:91:16:ee:7b:fe:72:b5:cb:d6:
         f2:1e:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:53 2026 by rpki-client