Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
File:                     nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json)
Hash identifier:          JFz09tNuT0IPXhpVuQzIl21fctqhZPiosVqGhWAgjeA=
Subject key identifier:   33:21:94:D2:6D:C5:E4:C0:55:D7:51:2C:26:37:3F:F4:9B:08:FA:BA
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Certificate issuer:       /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial:       2017
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
Manifest number:          1F12
Signing time:             Mon 27 Jul 2026 07:14:23 +0000
Manifest this update:     Mon 27 Jul 2026 07:14:22 +0000
Manifest next update:     Mon 03 Aug 2026 07:14:22 +0000
Files and hashes:         1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: PS1QsFCS+2Barjc8RVGgV5g3wLUh92c8Gv3/tl8SXCY=)
                          2: F42FB236896C11F1ABDFBC266B11F970.roa (hash: UNVHBnU+2V0l5QwKE9egkbd36UrDelXFEfM3yAjE9ZQ=)
                          3: CC2D8BDE86EF11F19E006003A7EE528E.roa (hash: d4i+z1Mv2GtUqNC8gLCSYFchOfSALA1lnJbOM2UDKmA=)
                          4: C9E1BA1286EF11F19E006003A7EE528E.roa (hash: KeHkWNIoWYBYRdc3VPh8HjB66Rci2N2NvVGwtvQ9bgo=)
                          5: CB0B87D886EF11F19E006003A7EE528E.roa (hash: 01D0gNOrmeWfFnfKx9BZLWhsvfkWia8AUzDxIIpl65k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8215 (0x2017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
        Validity
            Not Before: Jul 27 07:14:22 2026 GMT
            Not After : Aug  3 07:14:22 2026 GMT
        Subject: CN=6a67054f-0858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:e4:36:b6:f2:b7:37:db:97:a2:19:dd:02:
                    59:2e:fa:e5:df:17:79:34:cc:55:37:9b:15:5b:06:
                    71:14:c6:31:54:66:8f:82:f7:d1:da:76:0d:f8:85:
                    6e:5f:6e:f7:1e:33:ff:6d:19:0d:36:65:03:19:dd:
                    90:a8:43:6f:b1:db:47:bb:11:e5:da:50:f4:2e:96:
                    ec:21:29:6f:07:3f:f2:5d:1c:60:f1:73:43:e7:7e:
                    d0:bc:3d:3c:7a:ed:cd:cd:bb:cb:cf:58:42:ac:0b:
                    df:69:ee:7a:f9:b9:8a:aa:9f:dc:16:f3:e5:bd:07:
                    f6:64:d4:57:db:07:25:a4:1b:74:bd:2d:a9:24:5a:
                    d6:14:78:56:e8:93:bb:67:a2:ac:25:43:59:88:fe:
                    5a:01:e2:93:06:9a:b5:50:98:27:67:c8:e9:c0:5d:
                    48:1a:63:88:41:72:bc:b0:fd:d3:3a:fc:4e:1e:af:
                    97:41:19:61:14:45:61:68:d7:8e:05:dc:0b:7f:21:
                    e8:b3:13:52:83:4b:66:3b:9d:81:4e:7a:88:1c:5f:
                    50:70:45:64:57:c4:54:0e:1c:5f:93:d3:de:69:0c:
                    f4:3f:2a:8a:49:88:f3:7e:0c:72:8c:c7:47:3f:51:
                    ea:76:64:0e:f7:05:7f:b1:47:31:24:db:93:37:73:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:21:94:D2:6D:C5:E4:C0:55:D7:51:2C:26:37:3F:F4:9B:08:FA:BA
            X509v3 Authority Key Identifier:
                keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:49:a3:22:63:14:ea:42:d7:1f:05:8f:c3:8c:13:4c:a9:
         d4:d7:6f:3b:81:85:85:3a:d5:0a:be:f2:b7:9f:9d:87:43:58:
         85:e8:fb:21:9b:04:aa:ec:c4:53:46:1e:b8:10:19:8e:f4:47:
         9f:ab:74:c9:59:54:60:e9:86:a0:59:9f:49:c8:5c:86:34:8b:
         43:fa:cb:5b:49:8f:43:74:27:ce:19:fb:c0:ff:20:10:76:ae:
         65:12:d9:48:65:c8:d5:c7:91:a0:1a:63:e2:cd:16:ff:71:bc:
         6f:b9:9c:7e:ee:1c:5e:08:1d:f0:93:55:39:d2:43:a8:b8:e6:
         03:66:29:de:70:3f:60:ef:43:99:a0:f3:a7:0c:43:57:d1:bb:
         70:ca:2d:3b:3e:ac:bd:6e:0a:27:27:a8:bb:62:7b:a1:54:b2:
         cf:b4:ab:71:3d:e6:bf:20:60:50:08:7a:2e:16:a7:e0:c8:6f:
         0d:d1:08:46:a7:4c:d7:a1:0f:ae:8f:b6:37:ad:41:37:71:77:
         5a:24:5d:2b:76:18:1c:0f:f5:76:cd:c6:66:18:3d:69:8e:a1:
         92:16:1f:2b:49:99:bf:59:ec:46:e0:e4:80:80:98:a5:d3:f0:
         87:43:9a:8c:d4:10:02:38:2a:c3:b4:74:19:42:69:1f:63:77:
         6f:c4:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:18:23 2026 by rpki-client