Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          ofA/C22/KFMtnZBY8Ud4h597pY8kcXYIbPIZBrdtMMY=
Subject key identifier:   85:25:FC:65:AC:19:13:08:9E:C8:CF:F7:1D:38:A3:29:C2:BF:1F:F3
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          017C
Signing time:             Sun 15 Nov 2026 04:59:05 +0000
Manifest this update:     Sun 15 Nov 2026 04:59:04 +0000
Manifest next update:     Sun 22 Nov 2026 04:59:04 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: cZNXQTJJWWgv2/SFsdw9e8bw4Af8Iu7mB2CRTdfFMd0=)
                          2: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: h4LCDm8eLlVEiqFicqOJdepajUq8XrtAqrJUCmPw8Tc=)
                          3: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: WJclA07E8Yw84fU/prF0lPCY1uLx7Ty+OtozsPqo0WA=)
                          4: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: qG5sE9k/IWP4LVSbtWk3Pj2vdC15/FI4cSG8ReQc4gE=)
                          5: 11A52E8285CF11F1AA606E4D69A30FBC.roa (hash: WfvciY6P/4Q8KHCmNBrZGnJd2jHqICUMUWQ6HmvHFFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Nov 15 04:59:04 2026 GMT
            Not After : Nov 22 04:59:04 2026 GMT
        Subject: CN=6af93c18-16e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:c2:64:28:66:66:a6:f4:98:bf:d1:69:e0:
                    85:10:df:ef:6c:52:46:3b:79:14:17:fa:14:a7:9e:
                    01:69:d3:c1:6e:86:8d:7b:e0:c6:f2:ab:32:16:70:
                    bf:e2:37:77:7d:3c:89:67:8f:f6:e7:7a:ea:d4:01:
                    26:04:44:c8:f3:31:70:4d:c3:b1:f3:0c:86:df:27:
                    5b:e6:e3:0e:91:9c:fb:25:b6:f0:52:6b:ec:27:f4:
                    b2:45:6e:7f:74:16:97:3a:c6:1c:44:65:b8:43:4c:
                    f1:cf:e8:1e:a3:6e:83:c6:1c:aa:92:49:f1:91:5b:
                    ca:a5:96:d8:0c:c9:9e:d0:25:2b:23:85:8b:38:d8:
                    50:7a:54:48:5e:5f:26:eb:19:c3:88:de:a6:17:b0:
                    fc:56:eb:81:d7:01:20:38:27:35:77:14:d0:ff:5f:
                    4e:37:61:2f:51:dd:b3:32:de:20:bb:45:13:2e:ce:
                    40:2f:37:b0:d9:fa:27:a9:a7:d4:30:b2:49:bb:eb:
                    ce:62:e9:f1:c0:53:b4:ac:7e:f4:95:89:c9:0c:81:
                    e3:9f:01:1e:cc:ed:1d:17:ed:b7:28:71:e2:78:d2:
                    27:74:c2:d4:60:4b:c4:5c:fc:b0:21:5c:7f:da:cc:
                    c2:bb:1f:89:3e:57:45:ef:7b:13:92:47:b7:ea:fd:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:25:FC:65:AC:19:13:08:9E:C8:CF:F7:1D:38:A3:29:C2:BF:1F:F3
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:4d:8d:20:27:0f:c8:50:4c:d8:b0:79:fb:9a:28:63:13:
         85:8b:97:9b:63:fb:2f:51:e6:59:6c:91:5d:75:e4:80:98:4a:
         42:5b:c7:46:fd:bc:86:85:40:94:94:9e:c9:12:51:f9:76:79:
         c2:3c:5c:d8:fb:90:2a:b8:f1:1e:9e:b3:34:75:5d:3e:6e:e6:
         aa:7c:6a:8d:61:74:df:ca:dc:d4:ab:12:b2:63:05:3e:99:45:
         8a:d9:79:26:96:e9:fa:6a:c6:f8:ab:d3:90:98:e7:32:7c:63:
         a1:b5:81:9f:1c:c8:f0:e8:90:ed:c6:ec:20:2e:21:da:ab:09:
         d2:e8:46:65:ae:d7:51:f9:2b:76:6c:33:20:c4:a2:0c:5f:ab:
         06:2b:17:74:58:12:3a:45:d0:8d:be:da:4d:2b:65:1f:d0:bf:
         3c:8c:a5:70:f7:52:08:94:94:bb:af:09:ad:aa:ef:53:32:c6:
         5a:e5:a3:7c:c6:e0:1b:99:0f:e0:22:73:47:74:b8:41:3e:b2:
         a2:4c:44:9f:93:5f:41:4a:68:ac:f3:7d:44:e2:83:60:5f:08:
         e4:9b:83:7c:ee:bc:77:fc:8c:63:01:44:d3:dc:19:65:c3:c5:
         c4:dd:3e:1f:34:00:ee:17:31:bf:f2:03:cc:3a:ad:9c:f0:21:
         24:bd:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:53:34 2026 by rpki-client