Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File:                     Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier:          zksVRCxaqoqK3M5oItCy3EBiXNO17dEuquoPWEc14BM=
Subject key identifier:   64:F6:BA:42:FE:82:A9:9E:AC:21:0F:18:6D:DD:63:C4:89:65:FC:D7
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer:       /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number:          0CBD
Signing time:             Sat 14 Mar 2026 18:06:17 +0000
Manifest this update:     Sat 14 Mar 2026 18:06:16 +0000
Manifest next update:     Sat 21 Mar 2026 18:06:16 +0000
Files and hashes:         1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: w/c2w+f6isntlZZh9Nvxmt4mKx1BDZiWBSWKFQJD6cE=)
                          2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 18:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
        Validity
            Not Before: Mar 14 18:06:16 2026 GMT
            Not After : Mar 21 18:06:16 2026 GMT
        Subject: CN=69b5a398-d249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:01:7e:b5:0a:05:32:90:ca:ea:e1:cd:6e:
                    0c:d2:bc:d3:84:be:fb:cf:08:f5:60:a2:47:26:5a:
                    05:84:98:5a:1f:c9:11:9a:75:80:e4:71:87:34:78:
                    12:34:38:5f:97:e8:25:db:25:ad:b4:f1:1e:3d:8b:
                    68:5c:ce:07:5e:a3:21:57:11:7b:ae:8c:10:2b:9f:
                    4f:e6:98:49:cd:fa:f2:d5:e2:78:9b:48:7f:77:30:
                    b8:58:7e:95:82:f9:a3:e2:aa:2e:ac:78:1e:b2:0c:
                    b0:7a:c0:4e:9e:91:a6:66:e8:fd:39:13:58:93:82:
                    74:f1:bc:18:3c:e0:e4:1f:34:04:6f:8d:2d:d9:06:
                    15:d2:70:b6:75:d7:c3:1f:d9:7c:2c:77:d3:3b:2e:
                    b4:3f:a0:e8:bb:0e:c8:8c:ea:8e:4a:14:86:27:fa:
                    39:66:ea:fe:e7:41:46:94:5a:e4:02:78:dd:b8:74:
                    8a:79:24:67:6c:5d:3a:47:5f:59:c0:da:dd:e6:e2:
                    66:bc:97:df:fb:57:8e:38:39:e8:99:7d:16:a9:20:
                    3e:01:18:07:dc:a9:be:d9:49:fc:60:e3:6e:bc:26:
                    4c:5d:08:6d:a7:f6:03:9b:38:72:b7:b4:86:46:42:
                    84:3c:70:4d:1a:81:af:59:7e:49:89:14:3d:c5:81:
                    3c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:BA:42:FE:82:A9:9E:AC:21:0F:18:6D:DD:63:C4:89:65:FC:D7
            X509v3 Authority Key Identifier:
                keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:d4:76:49:a3:cf:a9:37:8e:8f:30:af:3e:2c:6c:86:76:
         95:b1:9f:bf:4e:82:9c:19:81:b7:7c:1f:0e:fb:ee:1c:3f:92:
         11:73:fc:59:99:a2:ac:47:ea:14:eb:39:81:88:e4:66:e0:ae:
         39:29:92:ba:d3:7d:98:73:54:11:59:52:75:fe:11:5a:39:2d:
         47:e5:ff:cb:53:10:73:76:0b:01:f6:be:8d:30:6b:09:03:24:
         70:6a:2e:5c:27:95:da:66:14:0a:99:ea:dd:e8:88:07:82:3e:
         85:d4:b4:4b:5b:38:c0:60:c6:8f:db:91:4b:87:ba:b8:55:03:
         ae:76:ab:0c:2b:df:ea:6e:01:d9:f2:59:63:ce:87:e9:b7:85:
         14:e7:7e:52:f4:2c:1b:de:cc:15:ff:b2:13:09:81:5a:e4:63:
         d1:73:07:14:2e:79:65:05:ae:08:b8:e3:7e:74:d8:cd:04:72:
         85:bf:25:84:ec:c2:c9:a4:18:b3:d9:8a:67:51:0c:df:ba:49:
         2c:e8:8c:b3:e1:4f:49:c0:7c:ef:33:1e:d2:49:5b:4b:d8:fd:
         d9:d1:71:dc:de:70:82:7e:27:3e:e0:50:23:fd:a8:53:75:2b:
         b2:f6:e2:84:fb:a0:31:ef:06:70:a4:e6:b9:75:26:02:54:bd:
         b7:2d:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:21:25 2026 by rpki-client