Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File:                     nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier:          oLlhCkgQagr7Q5w25iHu3pCF8I2n6KEhCVGHgLFN2vI=
Subject key identifier:   7B:D9:09:FB:DB:56:3D:0A:D1:6C:7F:AF:A8:F2:C2:52:60:E8:7D:61
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number:          0653
Signing time:             Thu 12 Nov 2026 22:27:10 +0000
Manifest this update:     Thu 12 Nov 2026 22:27:09 +0000
Manifest next update:     Thu 19 Nov 2026 22:27:09 +0000
Files and hashes:         1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: OI9iqanZ966/V3pZsM+kOeqZZSMprsLPe41UCrfmPQM=)
                          2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: 0gpxn+LFfnOKpxuOSksfeYmDkEyohwtADQR3Mk8Jkrg=)
                          3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: ygP33q0RkY5m431TK8mMBj98/E5fJw5QVCf5+wBvW5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Nov 2026 22:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Nov 12 22:27:09 2026 GMT
            Not After : Nov 19 22:27:09 2026 GMT
        Subject: CN=6af63d3d-0f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:79:12:7d:ee:da:fd:44:8a:8e:0a:d0:cd:
                    08:10:f0:37:d1:96:87:c3:21:1d:c7:78:b5:3e:09:
                    49:01:e8:85:2a:6f:44:a3:41:d1:61:52:22:44:91:
                    65:a0:50:91:e2:21:f5:99:81:3b:e5:7d:f2:09:7b:
                    e6:89:aa:ea:12:fd:74:89:9b:c1:56:e5:44:ee:7c:
                    38:48:57:10:b4:ff:40:e6:ef:1c:b8:ea:17:68:c2:
                    38:78:7d:cf:fc:c3:33:96:f7:8b:5f:21:61:88:12:
                    3e:47:ff:cd:77:e8:35:c2:17:88:69:e6:d5:93:22:
                    b7:36:36:07:ff:12:63:38:31:78:46:35:6e:74:ca:
                    48:cc:23:dd:60:f4:91:76:15:d2:77:75:58:11:80:
                    97:ba:1f:7a:93:4f:55:b9:4c:2f:28:c8:1c:b2:8f:
                    1f:b9:9f:e7:5e:6e:d5:1d:34:48:0e:0c:03:98:02:
                    80:3a:57:e2:cf:25:a4:0a:c4:ee:76:9c:9b:49:0d:
                    fb:89:1d:ae:09:a3:d9:9c:40:97:c2:41:42:ec:29:
                    d7:6a:84:96:8e:8b:89:2b:37:9c:39:cc:ac:6e:87:
                    6a:f4:2a:05:35:63:bf:48:9f:e8:b2:49:9d:13:41:
                    3c:88:29:6b:de:5d:97:74:67:9f:40:d8:85:2b:b9:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:09:FB:DB:56:3D:0A:D1:6C:7F:AF:A8:F2:C2:52:60:E8:7D:61
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b5:d6:8f:75:9d:40:98:70:2a:b2:e9:04:5b:74:4d:cb:09:
         c2:36:a3:41:f4:31:6e:8d:08:a1:e1:07:8b:73:b9:5d:92:16:
         c2:3d:b6:35:80:d0:15:e5:12:b0:6d:9c:2a:b8:9b:23:01:8e:
         8e:4e:3e:19:cb:92:f8:4c:f1:04:9b:a4:15:66:1e:55:38:be:
         2c:bc:25:bf:b9:bb:7a:5f:40:fd:ad:f7:6e:df:9a:67:8b:19:
         8c:65:db:ce:ef:1f:59:39:2f:21:c5:45:ea:fa:af:a1:eb:f9:
         e0:0d:0c:ae:29:9e:fe:4f:46:f9:d9:f6:5e:7f:51:e0:df:28:
         b9:58:2d:62:2e:d3:c6:1d:5c:5a:aa:f4:e9:92:c0:88:fa:b3:
         5c:cf:df:ee:da:f3:ca:09:94:0e:3b:41:de:92:eb:b3:71:c2:
         76:7a:1e:3d:d8:ed:40:8c:94:23:f0:9f:a8:4b:54:12:8f:00:
         de:1a:53:fb:7a:5a:69:46:c7:db:d6:be:cd:1a:0e:66:0b:f5:
         f0:bf:21:e3:79:39:7f:42:e8:8c:10:ee:25:b3:2b:fb:bc:7f:
         71:45:bc:af:e5:f1:fa:58:ab:50:fd:ef:34:73:4e:1a:95:6b:
         4c:8b:e6:32:3a:03:d2:30:c1:af:4c:ed:69:14:45:0c:9a:02:
         93:d4:5c:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg5OUQxMTAvBgNVBAUTKDlDQjlGMDM0MkJBMzRFMjhFNDU0Q0Q5MjM4NDkzNDY2
MDVCMUM2MzIwHhcNMjYxMTEyMjIyNzA5WhcNMjYxMTE5MjIyNzA5WjAYMRYwFAYD
VQQDEw02YWY2M2QzZC0wZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5J5En3u2v1Eio4K0M0IEPA30ZaHwyEdx3i1PglJAeiFKm9Eo0HRYVIiRJFl
oFCR4iH1mYE75X3yCXvmiarqEv10iZvBVuVE7nw4SFcQtP9A5u8cuOoXaMI4eH3P
/MMzlveLXyFhiBI+R//Nd+g1wheIaebVkyK3NjYH/xJjODF4RjVudMpIzCPdYPSR
dhXSd3VYEYCXuh96k09VuUwvKMgcso8fuZ/nXm7VHTRIDgwDmAKAOlfizyWkCsTu
dpybSQ37iR2uCaPZnECXwkFC7CnXaoSWjouJKzecOcysbodq9CoFNWO/SJ/oskmd
E0E8iClr3l2XdGefQNiFK7n6FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvZCfvb
Vj0K0Wx/r6jywlJg6H1hMB8GA1UdIwQYMBaAFJy58DQro04o5FTNkjhJNGYFscYy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5RC9GMTU3ODdCNEY2
ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRpamtWTTJTT0VrMFpnV3h4
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MbndOQ3VqVGlqa1ZNMlNPRWswWmdXeHhqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODk5RC9GMTU3ODdCNEY2ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRp
amtWTTJTT0VrMFpnV3h4akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcLXWj3WdQJhwKrLpBFt0TcsJwjajQfQxbo0IoeEHi3O5XZIWwj22NYDQFeUS
sG2cKribIwGOjk4+GcuS+EzxBJukFWYeVTi+LLwlv7m7el9A/a33bt+aZ4sZjGXb
zu8fWTkvIcVF6vqvoev54A0Mrime/k9G+dn2Xn9R4N8ouVgtYi7Txh1cWqr06ZLA
iPqzXM/f7trzygmUDjtB3pLrs3HCdnoePdjtQIyUI/CfqEtUEo8A3hpT+3paaUbH
29a+zRoOZgv18L8h43k5f0LojBDuJbMr+7x/cUW8r+Xx+lirUP3vNHNOGpVrTIvm
MjoD0jDBr0ztaRRFDJoCk9RcTQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:36 2026 by rpki-client