Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          0B3cTlme88jhcTrosZ2EiOLWVgin4xIEloFF6b2VDJg=
Subject key identifier:   AE:70:C3:84:B4:5D:26:63:34:0D:3A:5B:33:B4:43:36:E4:FB:D9:EC
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1445
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          143B
Signing time:             Mon 22 Jun 2026 16:51:38 +0000
Manifest this update:     Mon 22 Jun 2026 16:51:38 +0000
Manifest next update:     Mon 29 Jun 2026 16:51:38 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: p34wCsdW9PBPWkJcuVQ90YtwDowqE0kpM3oFgQvQ7YA=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: MDlcdzXufvKhGOKFUxldUFZUq6m6mjYUqAENV0y3O3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
                          rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5189 (0x1445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
        Validity
            Not Before: Jun 22 16:51:38 2026 GMT
            Not After : Jun 29 16:51:38 2026 GMT
        Subject: CN=6a39681a-8119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:3e:3e:e6:3b:d8:b0:aa:d8:07:36:91:0e:
                    a1:0f:99:24:05:8c:fa:2d:92:a5:8c:7e:a9:93:a3:
                    1c:17:f7:fd:ad:77:a0:ad:60:a5:33:7f:61:7a:eb:
                    f5:43:75:82:76:d5:55:54:9c:e5:22:be:67:9e:fc:
                    80:2c:35:fb:12:38:d1:fd:c2:c2:dc:84:76:46:36:
                    b5:2d:0d:6a:9e:4d:9a:80:80:12:3b:84:1a:30:a9:
                    e3:54:49:2f:9f:a7:ad:c9:a6:7c:3b:67:e2:06:ad:
                    4e:46:33:43:70:93:12:f0:6b:0c:c9:94:d7:db:e4:
                    f4:b2:46:35:33:99:d1:7d:3d:0c:79:d8:34:8b:6d:
                    fb:52:8f:31:b4:22:b7:34:54:30:59:b2:7c:87:75:
                    45:32:c2:c3:84:ee:0f:5b:c9:77:0d:d3:cb:72:0a:
                    b2:9a:52:93:75:37:de:01:72:12:0a:1c:ea:bf:4e:
                    78:15:9c:cb:4e:e2:e1:3c:dd:ca:77:70:25:f5:39:
                    cc:85:0c:ff:8a:f6:a5:cf:76:01:04:79:bd:a1:64:
                    9f:4a:e1:7a:50:41:8a:5a:9c:6d:0d:32:73:b3:3b:
                    7b:f1:96:2a:49:f9:9c:06:a2:39:b3:4e:8f:76:0b:
                    32:ec:17:e6:4c:ee:35:5b:7b:05:6f:e6:91:bf:be:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:C3:84:B4:5D:26:63:34:0D:3A:5B:33:B4:43:36:E4:FB:D9:EC
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:a1:11:31:52:2d:42:8b:5a:72:10:87:04:23:8a:b8:6f:
         51:10:c3:d6:4a:af:29:a6:02:c1:cc:02:e6:eb:ae:aa:e0:bc:
         b3:56:58:3b:47:3d:b6:6d:0e:36:f6:c9:8a:e7:8a:e1:be:8f:
         88:c5:12:3e:f8:83:b8:10:ef:37:eb:31:06:7b:ab:81:44:15:
         a1:89:be:81:5e:e3:6a:e0:73:e2:1f:28:f7:b1:ea:1c:b7:60:
         95:e7:3f:a1:42:fd:35:63:38:97:71:e3:2a:33:de:8c:f2:cf:
         8b:78:bf:ef:b2:02:a0:99:78:c5:82:e1:fb:67:f6:7a:2b:84:
         a2:13:9e:6b:fc:94:03:be:b1:f6:7d:46:ec:93:b3:68:2c:8f:
         a3:7c:ac:f4:33:29:55:88:70:05:20:c4:f1:df:7c:f1:c8:25:
         82:62:9d:a7:79:0a:9a:f8:84:eb:cc:40:90:7f:0d:ba:3e:36:
         46:47:f6:36:a4:c2:e1:20:59:f1:ec:cf:7f:0f:41:7e:c2:42:
         8d:2b:08:20:de:fa:8f:32:c1:5a:46:c6:e7:a9:b5:9a:4f:cf:
         74:14:eb:2a:d5:7a:cb:f4:a0:f4:9d:ff:92:90:08:28:1e:06:
         64:8f:57:19:c5:19:a8:56:83:04:e8:08:37:c0:a5:f6:56:c9:
         fe:1b:fb:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx
NDZBNjMxM0EwHhcNMjYwNjIyMTY1MTM4WhcNMjYwNjI5MTY1MTM4WjAYMRYwFAYD
VQQDEw02YTM5NjgxYS04MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPg+PuY72LCq2Ac2kQ6hD5kkBYz6LZKljH6pk6McF/f9rXegrWClM39heuv1
Q3WCdtVVVJzlIr5nnvyALDX7EjjR/cLC3IR2Rja1LQ1qnk2agIASO4QaMKnjVEkv
n6etyaZ8O2fiBq1ORjNDcJMS8GsMyZTX2+T0skY1M5nRfT0Medg0i237Uo8xtCK3
NFQwWbJ8h3VFMsLDhO4PW8l3DdPLcgqymlKTdTfeAXISChzqv054FZzLTuLhPN3K
d3Al9TnMhQz/ivalz3YBBHm9oWSfSuF6UEGKWpxtDTJzszt78ZYqSfmcBqI5s06P
dgsy7BfmTO41W3sFb+aRv76tKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5ww4S0
XSZjNA06WzO0Qzbk+9nsMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC
MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf
UnZyNUgwNF84VFVVYW1NVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL62hETFSLUKLWnIQhwQjirhvURDD1kqvKaYCwcwC5uuuquC8s1ZYO0c9tm0O
NvbJiueK4b6PiMUSPviDuBDvN+sxBnurgUQVoYm+gV7jauBz4h8o97HqHLdglec/
oUL9NWM4l3HjKjPejPLPi3i/77ICoJl4xYLh+2f2eiuEohOea/yUA76x9n1G7JOz
aCyPo3ys9DMpVYhwBSDE8d988cglgmKdp3kKmviE68xAkH8Nuj42Rkf2NqTC4SBZ
8ezPfw9BfsJCjSsIIN76jzLBWkbG56m1mk/PdBTrKtV6y/Sg9J3/kpAIKB4GZI9X
GcUZqFaDBOgIN8Cl9lbJ/hv7XQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:16:14 2026 by rpki-client