Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
File:                     3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json)
Hash identifier:          c0wIEh/+6DEvhRUWgeaFsVl8a9RyANM6Euak0e9Ltzk=
Subject key identifier:   A7:F7:76:E5:06:82:1B:CD:73:C0:22:3A:F6:2F:C7:03:97:EB:90:87
Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
Certificate issuer:       /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
Manifest number:          0166
Signing time:             Fri 13 Nov 2026 05:19:30 +0000
Manifest this update:     Fri 13 Nov 2026 05:19:30 +0000
Manifest next update:     Fri 20 Nov 2026 05:19:30 +0000
Files and hashes:         1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: f8Gi6klut0/SJREFzYjxHlvOML9lpK3DgWvLZ9DGVtk=)
                          2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 05:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
        Validity
            Not Before: Nov 13 05:19:30 2026 GMT
            Not After : Nov 20 05:19:30 2026 GMT
        Subject: CN=6af69de2-768e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:87:e4:7c:f6:26:45:08:d9:52:26:37:cc:
                    e5:ca:72:f8:84:08:d6:68:e4:93:8b:3c:b2:3a:9c:
                    fc:84:58:6f:90:4d:ff:2e:99:61:5c:3e:7f:99:cb:
                    6c:8e:6c:ca:7f:69:19:fe:f0:64:53:c4:3c:01:99:
                    c1:e9:7a:ae:0e:6e:ce:58:75:97:10:ee:64:a3:d9:
                    c8:1b:86:60:13:2e:10:df:f2:27:e6:49:d3:ec:42:
                    b6:34:ad:65:c7:cb:fb:eb:a8:15:83:b8:82:f8:c2:
                    ce:da:62:ce:f0:0a:bf:47:53:9f:9c:3e:c4:bd:18:
                    37:63:f1:8c:cb:4b:78:6d:75:77:28:a8:b1:8d:77:
                    ac:b4:05:ce:d9:e5:d0:c7:72:cf:1f:93:e9:79:a0:
                    ff:65:62:e9:17:2f:b9:84:a9:24:5b:09:f6:6c:36:
                    d0:a3:c5:40:a8:6e:f2:90:4e:7a:1e:42:32:12:4b:
                    51:dd:73:6e:df:16:4f:08:e7:74:12:fe:fa:0f:2f:
                    8c:ed:be:0c:25:9d:6f:0e:63:6a:00:17:84:24:21:
                    a8:e6:1a:ea:0f:88:6e:66:6d:db:af:70:01:b3:3b:
                    e2:d3:04:43:59:cc:99:2a:14:31:2a:b9:32:3e:26:
                    27:6d:a4:5b:0a:5d:af:a4:5e:8c:4a:97:08:ec:4e:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F7:76:E5:06:82:1B:CD:73:C0:22:3A:F6:2F:C7:03:97:EB:90:87
            X509v3 Authority Key Identifier:
                keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:34:fd:d2:4c:56:1d:44:ea:76:fb:cc:b8:72:13:d2:83:
         47:44:f4:cf:92:21:fa:12:97:3d:39:ae:02:31:9e:be:6b:20:
         9d:08:78:fc:87:88:ad:d7:fe:99:8f:bf:af:59:8e:40:12:79:
         10:24:42:07:6b:e6:9b:b5:77:79:29:9f:a8:8c:54:85:36:fd:
         d5:79:ab:07:19:28:0b:d7:52:e7:2a:2c:8d:fc:ad:8a:e6:70:
         bf:62:1d:f4:cc:b8:b0:62:0d:92:1a:64:be:38:fb:e0:4e:01:
         13:ac:02:d6:64:ed:78:45:cb:bb:45:67:e6:6c:de:c3:01:0b:
         73:8a:55:c0:93:6c:90:64:fc:a2:ed:ef:fc:42:8d:47:22:cf:
         1e:0f:4e:fe:af:cb:b7:43:d8:07:62:a9:ac:20:62:1f:69:79:
         5a:e4:c3:fa:f2:6b:14:22:40:4d:1c:6e:54:c3:87:a6:fa:08:
         d8:94:65:35:1e:2c:4e:47:57:dd:76:d3:0c:33:f1:3a:5a:22:
         ab:32:87:41:8b:41:6e:8b:b8:30:86:97:56:df:07:1c:01:94:
         fa:85:6e:31:11:da:e5:69:48:cc:14:7c:45:0a:57:09:eb:f3:
         6d:24:8c:f8:c9:f7:c8:ff:bf:98:4a:a8:07:66:2f:2b:86:64:
         b6:7a:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:13 2026 by rpki-client