Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          R4baetiS8+nm4ayxO90rScRddprj67SsqBZa6bMCGpc=
Subject key identifier:   79:28:69:F0:C8:F4:65:9F:BB:DD:7D:23:6D:D2:D6:DF:85:71:84:AD
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          0125
Signing time:             Mon 01 Jun 2026 06:28:31 +0000
Manifest this update:     Mon 01 Jun 2026 06:28:31 +0000
Manifest next update:     Mon 08 Jun 2026 06:28:31 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: IUeUSlb3+ZOFjDWSqVQb2NVyVOVIZeEKxjJ39qO79b0=)
                          2: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
                          3: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
                          4: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Jun  1 06:28:31 2026 GMT
            Not After : Jun  8 06:28:31 2026 GMT
        Subject: CN=6a1d268f-8712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:84:dc:e8:77:e5:53:d4:54:03:1f:31:47:
                    a8:44:92:80:50:6b:b3:7d:df:e6:9b:bf:b9:b4:9f:
                    1a:a8:1d:66:e5:03:46:de:b2:34:ca:db:6a:b3:c8:
                    c3:3e:b1:71:ed:fa:69:0c:16:df:59:19:2c:99:16:
                    7a:fb:62:b5:f4:d3:a4:c3:3a:cb:75:9e:32:ce:97:
                    4f:1c:45:c2:ae:1b:7a:8f:f1:10:41:26:47:5c:c1:
                    ff:6e:8d:82:a5:fd:94:f2:c8:1d:34:49:27:89:e4:
                    ae:88:4e:c5:d8:d8:e5:8e:04:79:2c:cb:a3:8e:ff:
                    e7:71:75:59:cb:76:a9:44:0b:27:1f:8d:3e:d6:4b:
                    85:ae:e2:50:17:84:7f:57:8e:b3:22:e5:9b:0f:f1:
                    7d:e3:c7:1a:43:61:c1:3c:fe:e6:77:ab:77:37:25:
                    09:e7:ed:30:18:27:28:81:d0:fb:e5:62:5d:74:fc:
                    25:95:55:0e:99:17:f3:2f:c1:55:88:81:9b:38:9b:
                    6e:c2:d3:da:43:61:08:f8:1d:43:9d:8e:c1:74:27:
                    54:84:c6:52:89:1c:1d:79:b4:9a:25:53:97:8a:36:
                    dc:da:b4:48:ef:e4:4b:0b:f0:9e:74:e6:a9:cf:a1:
                    57:01:8a:4a:ae:e2:9c:fd:68:64:5d:d2:5e:22:c6:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:69:F0:C8:F4:65:9F:BB:DD:7D:23:6D:D2:D6:DF:85:71:84:AD
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:f2:25:70:20:5a:61:d9:13:77:41:fa:2c:7e:fd:3d:f1:
         42:e1:03:7e:54:24:71:2b:6b:5c:f1:60:ad:44:83:11:43:88:
         35:d1:60:24:e2:72:1a:97:ef:b1:f1:ec:be:f1:4d:b6:86:82:
         d5:9e:27:1f:26:99:8a:29:20:76:b0:43:64:5c:43:fd:7a:e8:
         2b:7d:48:1c:63:9b:ee:0e:08:60:4a:87:e3:a9:54:0b:9b:ea:
         e0:2c:58:db:53:2b:86:d6:9f:64:6e:5a:36:a5:01:7c:78:17:
         73:09:c2:09:ed:3d:61:c6:8c:07:04:4c:55:44:d2:5d:34:62:
         9d:8a:70:d8:71:7b:cb:57:5c:c2:1f:fb:32:62:d1:fa:3f:d9:
         81:d0:ef:0b:3a:86:6a:71:71:39:fb:5f:1f:63:5e:0d:ff:3a:
         0a:c4:a6:bd:95:2a:24:8e:84:57:89:de:4c:f5:6c:21:36:13:
         9d:b1:3c:b1:20:dc:4a:2d:62:19:c4:6a:ac:b7:5e:3c:2b:3c:
         7d:f1:69:b5:62:66:4f:02:70:71:32:0b:7d:db:02:92:aa:c2:
         5a:5c:8d:fc:73:c0:47:33:28:e0:47:08:aa:32:ca:dc:aa:27:
         71:91:d8:36:55:58:1b:09:23:52:9d:06:36:56:50:32:d7:50:
         bd:5b:00:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZGMjExMTAvBgNVBAUTKDlDRERGQUVBQkM2NEJDQ0Q3ODg4Mjk2MjkxMEVDMTky
QTJEMjI4MzgwHhcNMjYwNjAxMDYyODMxWhcNMjYwNjA4MDYyODMxWjAYMRYwFAYD
VQQDEw02YTFkMjY4Zi04NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4i6E3Oh35VPUVAMfMUeoRJKAUGuzfd/mm7+5tJ8aqB1m5QNG3rI0yttqs8jD
PrFx7fppDBbfWRksmRZ6+2K19NOkwzrLdZ4yzpdPHEXCrht6j/EQQSZHXMH/bo2C
pf2U8sgdNEknieSuiE7F2NjljgR5LMujjv/ncXVZy3apRAsnH40+1kuFruJQF4R/
V46zIuWbD/F948caQ2HBPP7md6t3NyUJ5+0wGCcogdD75WJddPwllVUOmRfzL8FV
iIGbOJtuwtPaQ2EI+B1DnY7BdCdUhMZSiRwdebSaJVOXijbc2rRI7+RLC/CedOap
z6FXAYpKruKc/WhkXdJeIsbduwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkoafDI
9GWfu919I23S1t+FcYStMB8GA1UdIwQYMBaAFJzd+uq8ZLzNeIgpYpEOwZKi0ig4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyMS9GRTM3RTNFQ0Ex
QUMxMUVGQjY3NTg1NDhDNEY5QUUwMi9uTjM2NnJ4a3ZNMTRpQ2xpa1E3QmtxTFNL
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25OMzY2cnhrdk0xNGlDbGlrUTdCa3FMU0tEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkYyMS9GRTM3RTNFQ0ExQUMxMUVGQjY3NTg1NDhDNEY5QUUwMi9uTjM2NnJ4a3ZN
MTRpQ2xpa1E3QmtxTFNLRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlNnyJXAgWmHZE3dB+ix+/T3xQuEDflQkcStrXPFgrUSDEUOINdFgJOJyGpfv
sfHsvvFNtoaC1Z4nHyaZiikgdrBDZFxD/XroK31IHGOb7g4IYEqH46lUC5vq4CxY
21MrhtafZG5aNqUBfHgXcwnCCe09YcaMBwRMVUTSXTRinYpw2HF7y1dcwh/7MmLR
+j/ZgdDvCzqGanFxOftfH2NeDf86CsSmvZUqJI6EV4neTPVsITYTnbE8sSDcSi1i
GcRqrLdePCs8ffFptWJmTwJwcTILfdsCkqrCWlyN/HPARzMo4EcIqjLK3KoncZHY
NlVYGwkjUp0GNlZQMtdQvVsA1Q==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:16:40 2026 by rpki-client