Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File:                     n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier:          oZ30BGhkFVz9qxljsHV8QCRqxoiywqt8g3Fy/yMtXKs=
Subject key identifier:   37:1C:01:91:2E:46:8F:AA:ED:12:0F:3D:E5:42:25:7E:E0:8C:A9:6B
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer:       /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number:          0166
Signing time:             Fri 23 Oct 2026 05:36:49 +0000
Manifest this update:     Fri 23 Oct 2026 05:36:49 +0000
Manifest next update:     Fri 30 Oct 2026 05:36:49 +0000
Files and hashes:         1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: +Ot7OYhu6jtks1iuvARE9b+mb/SUytKtkbmcxXAp4jk=)
                          2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=)
                          3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
                          rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 05:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
        Validity
            Not Before: Oct 23 05:36:49 2026 GMT
            Not After : Oct 30 05:36:49 2026 GMT
        Subject: CN=6adaf271-4377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:42:a5:33:41:2f:09:24:45:91:1f:c0:aa:
                    ba:f5:53:ca:aa:0a:8e:55:f0:ae:0c:1d:d6:7b:1e:
                    d6:c8:0c:f3:cf:6e:fd:5e:1b:86:04:59:5c:35:79:
                    27:5d:b5:8a:8f:32:04:c2:1b:d8:70:ff:c0:b2:e6:
                    4f:d9:b8:2d:d0:ab:a2:b6:ec:dd:ee:38:94:8c:52:
                    1e:28:37:3f:d7:59:dc:aa:75:29:2a:f9:4a:9c:87:
                    78:9a:22:c7:14:bf:a6:30:a3:48:80:47:1c:34:7a:
                    e5:50:a7:08:a0:d6:02:3d:6d:0f:92:32:87:f8:8d:
                    2d:d7:e8:24:9f:43:d9:9b:53:7b:fa:91:de:ea:96:
                    2c:7b:88:e4:45:11:50:7f:b9:d3:09:8d:7e:6e:8d:
                    b9:c4:20:25:85:b0:a7:02:93:7d:30:d9:b7:6a:29:
                    b4:f3:24:88:46:cf:19:e8:7c:dc:12:26:26:fc:98:
                    51:46:b5:c9:5d:65:3f:23:87:14:13:c3:de:f0:e4:
                    ef:0c:41:03:bd:c7:82:fb:48:11:9a:07:02:52:87:
                    b1:b9:db:f4:1b:3b:35:a1:70:ad:67:1c:94:b6:7c:
                    44:b8:c3:ff:0b:41:c7:3a:9e:16:1e:52:05:37:c3:
                    cf:24:ee:b0:da:82:24:fa:de:e3:f0:64:b5:73:43:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:01:91:2E:46:8F:AA:ED:12:0F:3D:E5:42:25:7E:E0:8C:A9:6B
            X509v3 Authority Key Identifier:
                keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:df:a9:29:9e:63:e2:21:e1:9b:a2:61:1f:7d:a7:40:23:e5:
         36:d8:1f:05:10:a4:1c:53:09:43:05:d7:d8:a2:ae:58:97:fd:
         d0:fd:f8:29:11:e2:2e:7a:98:b6:c5:23:47:e0:f0:cd:d4:4d:
         d0:92:df:2f:8a:c4:bb:8f:cc:69:25:5a:db:ce:c6:b2:ec:e6:
         48:d4:50:5f:b7:83:d7:3f:81:bd:d8:2a:57:83:0a:7e:f9:21:
         9b:d9:60:ae:7c:ec:38:8d:ce:0e:1a:c0:84:41:f3:4c:70:74:
         64:b6:ab:7d:58:13:a7:b5:fb:2b:17:35:d6:b0:1b:4e:c4:96:
         a7:0d:0f:4d:6f:56:68:29:b3:f8:03:9e:e4:1f:43:3e:c4:80:
         70:d9:7c:85:5a:ce:ad:75:09:2d:18:7e:b8:ce:74:75:ad:97:
         e0:14:bb:be:3c:b7:ab:9c:f1:20:2b:57:81:1d:39:82:e7:92:
         50:dc:7f:93:16:43:34:42:bb:16:0e:fa:f5:e0:c4:ca:8c:26:
         7b:0f:bc:92:d2:4c:1e:95:ee:99:65:a4:fe:b5:ae:0a:e0:87:
         6b:e0:63:46:74:ef:6d:26:5c:0d:a9:71:44:f8:f3:2d:f5:41:
         4f:44:77:c2:ef:81:e6:7f:c4:0d:de:eb:8c:6d:1d:7b:1a:6f:
         c0:87:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:29:57 2026 by rpki-client