Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
File:                     nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json)
Hash identifier:          cDixvueGqrijfaI1kqnxQ3QqIDuikyvMZfJZxMdGEKM=
Subject key identifier:   BA:0D:85:6E:87:11:23:C8:2C:FA:EE:29:FC:02:52:F9:FF:AE:F5:2C
Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8
Certificate issuer:       /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
Certificate serial:       0C4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
Manifest number:          0C33
Signing time:             Sat 04 Jul 2026 18:50:53 +0000
Manifest this update:     Sat 04 Jul 2026 18:50:52 +0000
Manifest next update:     Sat 11 Jul 2026 18:50:52 +0000
Files and hashes:         1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: wMc1DV4C4qRGUOVVS2BqxQbaULj6p85GaCAVXjIPOAY=)
                          2: E5675F48336E11EA94623E18C4F9AE02.roa (hash: 2xiNwjYW2pyIkz7eTV4qaxFN/iMW7ShcypRgqsGtO2A=)
                          3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: pnBE91n4MbWlPAPg/bpDpFdbvV8uWC8bNNguZIXX26E=)
                          4: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: N2Nuak7OaRSEZDR308+upPNTawYHUgYAli3HOQeBT88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3150 (0xc4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
        Validity
            Not Before: Jul  4 18:50:52 2026 GMT
            Not After : Jul 11 18:50:52 2026 GMT
        Subject: CN=6a49560d-578f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:f9:31:bf:8c:71:e8:56:bc:3e:85:99:34:
                    de:ca:08:4f:bd:25:f4:47:32:a5:95:67:bf:a6:a4:
                    e3:f7:18:1d:04:8a:fb:ba:e8:88:3a:c9:b0:fd:cd:
                    d4:93:f3:36:b3:ee:80:d7:cb:52:84:1d:fc:63:90:
                    e3:73:d0:97:a9:a5:8b:15:26:ef:43:51:09:d8:97:
                    50:4c:88:af:91:6f:20:25:e9:68:7f:c1:96:2a:f4:
                    70:76:60:de:e4:c9:d4:4c:6a:44:9b:9b:2b:85:6d:
                    00:ea:01:7a:08:c8:c9:92:28:0f:67:31:4f:fe:70:
                    f3:c8:f7:7c:ee:72:85:1d:a3:6b:de:80:a7:61:d5:
                    57:75:a5:c1:21:3a:62:db:9e:35:c4:b1:36:14:8d:
                    6e:ac:85:4a:e6:0e:0d:cd:24:90:ae:d7:23:79:ba:
                    c9:e3:f7:4b:1e:be:11:32:d4:7c:49:6f:64:2f:4b:
                    7a:eb:cf:d5:af:da:1b:d8:a1:01:53:46:89:b2:b0:
                    68:42:c3:08:cc:1f:7e:b9:dc:ab:aa:19:66:c2:fe:
                    e3:d2:67:7b:ea:f0:cc:da:48:ca:67:59:ac:bd:56:
                    a5:e4:39:b5:10:61:f6:6f:69:50:a5:5d:6a:8a:87:
                    17:e9:3a:03:14:1a:2d:47:b4:e2:10:16:10:0f:cc:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:85:6E:87:11:23:C8:2C:FA:EE:29:FC:02:52:F9:FF:AE:F5:2C
            X509v3 Authority Key Identifier:
                keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:12:6f:7f:e5:37:f5:0a:2e:bd:5a:8f:57:11:d6:24:16:
         52:09:2d:b2:7f:5e:75:6b:7b:5b:ae:cc:e1:a7:26:ac:45:ea:
         fa:62:2c:6a:f2:f6:0d:e4:28:ab:1f:c1:b1:0c:92:50:5e:a5:
         d0:c3:fa:c4:ec:f0:b7:fd:01:4b:c9:da:a6:eb:4f:b4:3c:fa:
         b6:cf:c5:20:60:dd:28:3c:f6:6d:11:f5:be:38:de:9f:ff:a5:
         a1:dd:ee:d0:9f:45:a4:2b:d6:26:5b:ba:b7:0f:ac:6f:20:b4:
         b9:5a:c2:7f:d0:42:ec:c7:a3:41:3a:0c:bd:36:2a:30:4b:88:
         f8:a5:ca:ce:72:77:ff:86:43:8b:bb:1a:fa:2d:ba:c6:7a:cd:
         c0:aa:85:b6:91:3e:af:aa:ad:c7:48:dc:ea:57:ba:ac:4b:45:
         f8:ec:91:e6:b2:51:6e:81:46:4c:5e:4b:8f:b6:9a:ba:0f:2c:
         4a:0d:5d:f8:6f:79:08:3f:53:a6:00:f1:8d:38:61:13:63:a2:
         7e:9d:59:f8:52:04:61:60:61:69:dc:48:c3:2d:3f:c4:3a:35:
         06:9b:ea:86:79:67:d3:a1:84:fd:68:5a:ac:e9:6f:41:27:15:
         dd:46:c7:7d:27:0f:1d:b1:da:f1:a5:83:c8:a6:8c:d8:b9:51:
         09:af:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:29:57 2026 by rpki-client