Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          zH8y/3ngRO7Xd+gLFsnKnFwkRVzDRRwjSbZW792ufUs=
Subject key identifier:   6D:16:35:B0:74:15:F5:57:68:1C:B9:0E:57:83:0A:F4:2E:65:08:D3
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          0102
Signing time:             Wed 25 Mar 2026 05:20:27 +0000
Manifest this update:     Wed 25 Mar 2026 05:20:27 +0000
Manifest next update:     Wed 01 Apr 2026 05:20:27 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: L1WzIWYlDPfORxuk4EIlI47rNIOJypXTHueomoesXew=)
                          2: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
                          3: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
                          4: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Mar 25 05:20:27 2026 GMT
            Not After : Apr  1 05:20:27 2026 GMT
        Subject: CN=69c3709b-b8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:48:4c:50:7a:c3:3e:13:19:6c:e1:08:d4:
                    1e:52:76:79:90:81:7d:68:cf:30:53:71:d2:d1:19:
                    b5:1a:ac:e9:0a:b7:78:01:02:cf:83:2c:84:ec:0d:
                    9f:fd:89:45:96:c8:73:36:2b:be:03:c7:35:7b:96:
                    b2:c9:da:3a:37:a9:1d:f9:b3:3d:40:89:74:78:7e:
                    1a:b3:4e:49:ab:b4:69:86:33:5c:e1:e2:b4:73:1a:
                    f9:23:86:20:39:49:f1:bb:e3:8a:68:ad:71:c5:00:
                    5d:ed:b1:67:3c:5f:d4:5e:24:c3:4b:67:7c:48:5d:
                    8f:47:73:01:56:03:3c:b4:8d:37:7f:66:13:5c:a6:
                    32:b7:d2:76:2c:bf:37:4b:84:ce:7b:21:f7:ef:85:
                    a1:b1:93:00:13:02:af:2f:31:86:33:bc:26:05:73:
                    ac:14:09:d3:a7:a7:17:1e:4c:7e:54:5b:90:1a:fd:
                    ee:59:11:e4:24:0c:aa:e7:af:84:aa:06:5a:cc:2b:
                    05:f7:47:24:16:ea:6f:59:b7:95:4d:6b:0b:65:02:
                    da:cc:d4:d5:a7:73:85:d5:77:2a:0c:7c:91:93:59:
                    9d:6b:b0:01:ba:18:35:c2:c2:a7:92:3f:3a:8a:32:
                    8b:17:6d:24:ed:d9:7d:00:cd:d0:51:e1:bf:cc:a0:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:35:B0:74:15:F5:57:68:1C:B9:0E:57:83:0A:F4:2E:65:08:D3
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:06:d3:30:5b:d7:f6:0e:21:91:72:04:a6:de:49:31:c4:
         9d:db:44:ba:b2:15:b7:70:55:db:f3:4d:4c:32:e2:9f:99:77:
         28:2d:49:84:60:f9:fd:07:ed:0b:8c:8b:2b:b7:f1:17:02:db:
         38:ac:f8:94:aa:6d:4f:f5:32:a6:6b:19:52:e8:a7:8c:b8:12:
         42:42:39:56:ba:36:cf:ca:64:44:02:51:ec:47:91:22:c0:50:
         1d:f9:2b:24:5f:ff:9f:96:c4:2d:12:24:76:81:85:1d:57:49:
         a2:31:94:71:c3:f0:2e:7f:75:c1:6b:7b:bd:ab:f9:bd:7f:8e:
         6c:c2:dd:a8:e0:c3:55:fa:25:f8:61:51:95:57:cd:e2:7b:04:
         86:a2:9a:cb:55:6b:d5:b7:e9:71:1b:e3:10:ab:fd:ac:37:f8:
         1a:b7:df:70:fb:1e:10:9f:d4:57:b3:93:d1:fe:af:06:47:4a:
         49:3b:3e:93:ab:00:80:27:2f:4b:28:15:46:60:fa:79:bd:28:
         c6:73:8e:2e:54:e1:65:a7:70:2c:39:44:65:66:d1:e7:96:32:
         2f:f7:49:26:39:81:be:5b:b4:82:60:70:ee:b0:7c:a0:e1:e1:
         e9:66:dd:84:71:31:64:40:5b:85:d0:84:17:3e:f2:e9:9c:46:
         13:39:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:43 2026 by rpki-client