Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          apkkkcwtX/80kuC1veneR/cnt/easejbGXkvT/Z6ho4=
Subject key identifier:   FF:2A:F0:A4:C4:0D:1D:AF:0E:96:DE:47:23:7A:EC:49:47:E3:EE:AE
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          0108
Signing time:             Sun 05 Apr 2026 05:27:49 +0000
Manifest this update:     Sun 05 Apr 2026 05:27:48 +0000
Manifest next update:     Sun 12 Apr 2026 05:27:48 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: /V4Bqirluip28v+s/Bm/AGivtD+Q90BbiFtr+N+rXig=)
                          2: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
                          3: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
                          4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Apr  5 05:27:48 2026 GMT
            Not After : Apr 12 05:27:48 2026 GMT
        Subject: CN=69d1f2d5-1a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:09:ce:0c:0a:96:0c:b3:79:55:6e:24:50:
                    88:56:bc:a7:44:95:d5:01:db:56:85:6a:89:d3:cc:
                    d2:55:e2:3f:3f:ba:9d:7f:8e:39:f8:48:28:77:aa:
                    cc:a7:e6:21:fc:34:3f:81:cc:9e:1d:2b:1f:7a:85:
                    e6:d4:f7:3e:71:ad:3c:bf:d7:75:05:b4:32:89:59:
                    1d:c2:ab:b5:a4:9f:11:30:04:bf:f6:d0:f6:b2:92:
                    0a:8b:61:41:81:d7:4d:e3:f2:f8:a5:3d:d1:2f:9e:
                    91:8e:c5:c3:1a:57:70:e9:1c:8d:0c:d4:45:01:c1:
                    b3:e6:01:39:f8:e5:56:70:8f:98:f6:36:4d:5e:16:
                    3c:a0:69:12:57:4d:06:7b:39:1a:1f:0f:a6:fd:8f:
                    df:f2:dd:90:1d:80:0e:0f:14:d5:eb:be:7d:81:bb:
                    b4:b7:a1:91:bc:26:31:42:a2:8a:4c:da:fe:dc:40:
                    6d:a4:8e:76:0b:f2:f0:7f:45:08:09:60:48:70:6e:
                    77:30:3f:cb:0a:4e:17:b0:2b:99:51:1d:2e:ba:b1:
                    36:08:d9:80:da:71:ee:27:7b:0b:2b:9f:b2:06:46:
                    ac:df:ee:63:48:b4:63:61:d3:9d:f0:c6:6b:ff:6f:
                    b1:12:b0:87:1d:b6:45:b9:df:f1:e7:e1:1a:20:c8:
                    ed:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:F0:A4:C4:0D:1D:AF:0E:96:DE:47:23:7A:EC:49:47:E3:EE:AE
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:7e:29:d9:24:ae:24:57:42:de:1f:ee:ef:9e:34:0f:58:
         10:f6:ac:de:73:a2:bf:ac:1a:d5:21:ac:c2:f6:13:ca:84:27:
         7f:f7:50:4e:55:bf:d1:4d:1c:ba:cf:a1:d5:1d:ec:38:89:3d:
         b7:0d:62:d3:3f:85:e2:66:61:16:56:91:d4:b2:b7:1d:e4:f9:
         6e:5b:b0:07:52:c2:35:40:00:c6:4a:7d:b4:d4:18:02:4a:a1:
         74:77:c7:3e:3d:60:d9:cd:f4:44:9b:c4:1b:ec:82:06:a4:1d:
         b5:6d:12:6c:71:17:c8:2c:56:64:bf:e9:4f:eb:30:f8:d3:da:
         4b:9b:5c:95:66:31:e6:2d:ba:a6:45:92:6a:32:fa:ed:f1:63:
         d6:34:15:1d:b1:e6:98:e3:32:37:ed:3c:63:5f:8b:2d:f1:1c:
         22:56:a1:33:6a:ef:1a:e1:a8:3e:e4:73:a9:c0:3f:6e:07:fd:
         53:a7:43:7e:2c:f0:c0:c4:10:b0:88:d1:7c:d1:a5:21:85:f1:
         a2:55:a9:d2:6e:d1:01:f2:25:75:c6:bc:45:46:fa:16:15:9e:
         98:0e:46:2a:f8:23:6e:e0:5e:fb:72:99:a4:29:ca:1a:d8:eb:
         42:5b:e0:e6:2e:5f:07:c1:7e:53:1b:e4:89:b3:db:59:9c:46:
         30:fe:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:40 2026 by rpki-client