Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
File:                     NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json)
Hash identifier:          2jy2kzsikoBISFQMwWw9axyvZn7KpFQf08tVRQNWIA0=
Subject key identifier:   F8:29:71:BA:1E:27:03:6C:A4:9D:5F:46:84:11:DF:67:18:3B:88:F3
Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
Certificate issuer:       /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Certificate serial:       35B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
Manifest number:          359B
Signing time:             Fri 02 Oct 2026 15:02:25 +0000
Manifest this update:     Fri 02 Oct 2026 15:02:25 +0000
Manifest next update:     Fri 09 Oct 2026 15:02:25 +0000
Files and hashes:         1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: DO8Or77uSqlCCzrlgNUFkQ1z4gtBnRh+iApILf3lSsI=)
                          2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: uaBZ8rrkBWuiO8vvVUgSMMRL47cpkYF6IyC6kK7kqtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
                          rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13744 (0x35b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
        Validity
            Not Before: Oct  2 15:02:25 2026 GMT
            Not After : Oct  9 15:02:25 2026 GMT
        Subject: CN=6abfc781-1e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:49:c0:a6:44:59:75:57:b7:4e:74:6b:34:
                    85:cc:db:00:02:3a:f4:e8:5d:4a:7f:59:28:ff:d0:
                    4f:88:c9:c1:3e:93:3f:7f:89:f4:89:93:ec:5b:34:
                    96:48:4e:b4:78:2a:dc:11:a0:ff:d1:0e:57:a1:52:
                    c7:22:3a:97:a1:99:5b:74:a1:b3:99:ff:28:24:d9:
                    dd:0f:77:ec:7d:da:db:5c:7f:28:b8:04:f5:4a:0a:
                    e5:56:5c:ec:d7:94:72:5e:9d:ce:dc:c1:29:0e:29:
                    b8:a1:1b:8f:74:e4:74:f9:6a:40:30:0f:bd:05:93:
                    b7:ca:68:04:ab:be:9d:0f:68:cc:53:02:c1:b3:72:
                    68:71:e0:f1:12:52:2f:31:ac:4c:04:f9:4a:ed:36:
                    42:d1:0b:c2:8a:6a:07:81:fd:34:f1:d0:36:aa:5e:
                    83:f2:49:6e:e7:c4:37:60:d0:a2:8d:d2:e4:a5:53:
                    d8:f8:f7:af:30:b3:22:d1:73:90:8c:d9:c8:81:48:
                    0d:7b:40:61:34:fa:da:5e:17:1a:29:a0:b1:b8:28:
                    e5:6d:71:44:28:79:f3:98:14:65:56:00:d5:dc:05:
                    11:41:db:a6:81:7b:0e:b9:ec:8e:73:e5:43:e6:83:
                    bb:55:b3:56:55:80:91:91:91:17:10:7c:ae:96:a4:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:29:71:BA:1E:27:03:6C:A4:9D:5F:46:84:11:DF:67:18:3B:88:F3
            X509v3 Authority Key Identifier:
                keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:2c:7e:27:5c:a9:5f:9f:20:6e:07:12:08:52:19:30:04:
         dd:1d:e5:da:18:89:38:05:58:0e:cd:72:3d:0f:1b:ea:75:14:
         25:50:4c:9b:e6:31:d9:7b:c0:1b:8e:65:76:48:0f:bb:b2:3f:
         1a:99:9d:20:88:c7:26:09:af:34:5e:c4:95:c7:58:25:74:b1:
         ba:c0:18:60:cd:eb:6b:3b:64:83:4b:fb:11:1c:36:31:f2:94:
         56:77:eb:5b:b2:ad:ee:bd:67:db:b7:d8:13:ad:c2:f1:41:81:
         cd:e9:b3:64:87:51:09:6a:e1:76:fc:37:0c:ba:85:b4:e5:17:
         3f:63:2f:2f:62:24:eb:78:e2:c0:86:e4:d6:55:d0:91:a9:f1:
         f6:e8:06:98:cd:3b:7f:b8:2b:42:10:ed:c8:97:c2:69:be:da:
         24:57:1a:02:3c:6e:72:38:f9:b9:83:3b:f6:d2:60:10:af:9e:
         7b:7a:38:a5:5e:7f:fc:9d:31:db:1e:7a:53:ac:6f:d2:1c:db:
         a1:54:e6:5d:a6:d5:5a:da:4d:e8:a5:51:58:7b:bd:93:56:a7:
         d2:72:f3:a2:4b:35:76:20:0f:89:61:6d:9c:1c:d8:85:e1:9e:
         4f:f7:0d:96:11:f4:6d:07:e0:63:cd:6a:f5:62:55:71:52:25:
         dc:97:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:17 2026 by rpki-client