Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File:                     NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier:          IYMzGpOGtyx4v4MlfFACdkgx74GCyzWub/K5OtIakyo=
Subject key identifier:   6E:F9:53:B1:E8:8F:02:96:60:93:FB:5B:46:26:B0:3E:96:DC:C0:D2
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number:          7C
Signing time:             Fri 13 Nov 2026 05:52:56 +0000
Manifest this update:     Fri 13 Nov 2026 05:52:55 +0000
Manifest next update:     Fri 20 Nov 2026 05:52:55 +0000
Files and hashes:         1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: 8QgwX0qtzaf+ZW7BCFA7guaiT1UuUqyLVPFUngMAuG4=)
                          2: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=)
                          3: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 05:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: Nov 13 05:52:55 2026 GMT
            Not After : Nov 20 05:52:55 2026 GMT
        Subject: CN=6af6a5b7-7ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:ee:ec:d3:28:a7:56:34:9a:1c:f8:06:be:
                    b8:d5:f0:fa:d6:47:fa:72:52:25:b0:b5:ab:df:65:
                    fd:89:c5:32:09:78:3f:a0:b7:4d:30:18:ef:bc:65:
                    c4:d1:d0:1c:da:1d:fb:a0:d4:8e:0b:bf:c0:a1:d5:
                    10:ae:f9:2c:da:66:4a:82:91:f2:4f:26:16:61:9e:
                    ca:f9:d2:3b:0d:7d:9d:1b:0b:dc:74:81:72:17:8f:
                    23:da:31:af:05:e8:a2:20:be:67:96:02:b7:50:7e:
                    46:3b:4e:e6:5b:71:a2:2c:cf:e1:10:7a:56:dc:c6:
                    a9:9f:8e:88:29:0a:9e:9f:c1:37:1c:26:f4:78:69:
                    52:13:52:72:54:d7:37:51:f5:f7:57:b5:4a:75:52:
                    7c:1f:c3:8d:cb:3e:3e:59:fe:14:7c:2f:3c:2d:f9:
                    6b:b7:da:e2:c7:56:76:85:b3:ca:8b:6d:8f:4b:7d:
                    39:b3:c5:a5:8b:4f:10:61:ae:51:c0:a7:8f:88:48:
                    02:20:e0:e7:f8:f3:ae:b9:8e:2d:8a:f8:34:7d:6c:
                    9b:4e:a4:d4:ed:91:6c:47:cb:27:da:28:72:c6:b4:
                    f6:b4:d9:7a:5f:67:63:59:8f:25:db:6b:23:9b:2f:
                    80:6e:5c:99:7c:45:c8:92:71:f9:bb:d1:20:81:da:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:53:B1:E8:8F:02:96:60:93:FB:5B:46:26:B0:3E:96:DC:C0:D2
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:fc:c4:28:f0:ba:a0:9b:ce:c0:e7:1e:42:82:3a:48:78:
         3f:67:a2:c0:3f:51:08:bb:dc:2d:a9:7f:01:94:2b:fe:8f:44:
         34:2e:2d:8d:c6:e5:ff:a0:0d:83:07:51:89:d4:83:f3:51:c5:
         17:bd:1c:db:a9:5f:f8:8b:80:ff:ce:ee:ef:9d:4c:d9:a9:84:
         9e:b8:00:b3:5d:a4:66:14:5d:1a:34:b4:c5:b8:1b:e2:2f:ea:
         80:47:b9:f0:14:8a:9a:2f:d4:78:d7:5b:66:13:71:d6:c2:a5:
         77:51:9b:70:10:4e:81:f7:54:ea:fc:80:e7:4b:72:1b:51:b0:
         77:d2:0d:3e:06:ac:b7:85:52:ba:63:02:56:10:75:96:b1:59:
         68:96:35:0b:86:9b:a9:ff:d0:cf:b6:02:da:d9:c2:26:d9:98:
         97:94:3d:aa:b7:fe:21:9a:c9:b3:50:28:a4:ec:39:11:c6:d6:
         5c:01:8a:81:a3:25:e7:7e:54:12:fa:34:ab:14:1f:64:ab:4f:
         d2:ed:f5:e2:dc:40:a9:b9:7a:a0:65:ff:e0:86:d4:d7:29:62:
         29:85:9f:7c:41:4c:60:73:f0:64:1d:8b:8a:dc:50:d9:bb:8b:
         05:4a:64:5b:f7:94:4c:39:a2:7b:f2:97:db:34:32:2e:cc:6a:
         9f:6f:b5:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2NjMxMTAvBgNVBAUTKDM2NzNCNjhDOTRGQzIxRkYzRkNERTZBMzkzRUVDNjNC
MTZDMDE0RkUwHhcNMjYxMTEzMDU1MjU1WhcNMjYxMTIwMDU1MjU1WjAYMRYwFAYD
VQQDEw02YWY2YTViNy03ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApOvu7NMop1Y0mhz4Br641fD61kf6clIlsLWr32X9icUyCXg/oLdNMBjvvGXE
0dAc2h37oNSOC7/AodUQrvks2mZKgpHyTyYWYZ7K+dI7DX2dGwvcdIFyF48j2jGv
BeiiIL5nlgK3UH5GO07mW3GiLM/hEHpW3Mapn46IKQqen8E3HCb0eGlSE1JyVNc3
UfX3V7VKdVJ8H8ONyz4+Wf4UfC88Lflrt9rix1Z2hbPKi22PS305s8Wli08QYa5R
wKePiEgCIODn+POuuY4tivg0fWybTqTU7ZFsR8sn2ihyxrT2tNl6X2djWY8l22sj
my+AblyZfEXIknH5u9EggdrLSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG75U7Ho
jwKWYJP7W0YmsD6W3MDSMB8GA1UdIwQYMBaAFDZztoyU/CH/P83mo5PuxjsWwBT+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY2My9DRDQ3MENBRTI0
RUIxMUYxOTA4NjkwMkVCMUVFNTI4RS9Obk8yakpUOElmOF96ZWFqay03R094YkFG
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL05uTzJqSlQ4SWY4X3plYWprLTdHT3hiQUZQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDY2My9DRDQ3MENBRTI0RUIxMUYxOTA4NjkwMkVCMUVFNTI4RS9Obk8yakpUOElm
OF96ZWFqay03R094YkFGUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj1L8xCjwuqCbzsDnHkKCOkh4P2eiwD9RCLvcLal/AZQr/o9ENC4tjcbl/6AN
gwdRidSD81HFF70c26lf+IuA/87u751M2amEnrgAs12kZhRdGjS0xbgb4i/qgEe5
8BSKmi/UeNdbZhNx1sKld1GbcBBOgfdU6vyA50tyG1Gwd9INPgast4VSumMCVhB1
lrFZaJY1C4abqf/Qz7YC2tnCJtmYl5Q9qrf+IZrJs1AopOw5EcbWXAGKgaMl535U
Evo0qxQfZKtP0u314txAqbl6oGX/4IbU1yliKYWffEFMYHPwZB2LitxQ2buLBUpk
W/eUTDmie/KX2zQyLsxqn2+1Jw==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:42:02 2026 by rpki-client