Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          IWMEx7UbHQv15yNEGtVnFI2rlTsssulss7OJmtAQ++U=
Subject key identifier:   96:44:ED:48:66:87:1D:2C:10:D5:E9:29:D2:B1:1E:8C:D1:DD:39:C5
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          0167
Signing time:             Sun 15 Nov 2026 05:51:19 +0000
Manifest this update:     Sun 15 Nov 2026 05:51:18 +0000
Manifest next update:     Sun 22 Nov 2026 05:51:18 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: r5zJvC225l+74wRYmZV+1dbgAotXCGX1dqBD986wGW0=)
                          2: 296AC8B4A5D811F1A738BF2F3611F970.roa (hash: CQnCoRFdfoOMZ69yJprZvbmvvCNKoIKIobem+EKkuls=)
                          3: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
                          4: 7B38FA86A5D711F18B57491F3611F970.roa (hash: Qu1AHu1CC+TqDNyF3QGCgiURM+F5fmgCxLQCL8tZhCc=)
                          5: 32332AD83C8B11F1B51BFC899C833773.roa (hash: SqSvzXIRIVpELXR4zfaIkWV4fICk8+OR6AsXIXWCiYc=)
                          6: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: Wc1DoOxBicG+sk0xmxn0G7rVUatGjhMhpQRJFhbrHSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 05:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Nov 15 05:51:18 2026 GMT
            Not After : Nov 22 05:51:18 2026 GMT
        Subject: CN=6af94857-b4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:0f:1f:23:44:02:0c:82:ec:b3:94:28:c6:
                    f2:4d:1b:5e:cd:18:f6:3a:23:a2:12:52:d4:ae:c0:
                    8f:96:05:ff:d7:1a:bb:96:a5:cf:ef:56:14:ac:20:
                    27:6d:da:51:ff:0f:59:a1:cf:96:4b:c6:6b:fb:bd:
                    32:b0:19:f6:5e:ee:db:c4:35:3f:55:73:6a:03:d3:
                    2b:8f:6d:05:cc:7f:f3:fe:22:5b:dd:87:96:4e:4e:
                    73:74:d3:56:69:15:18:80:67:a8:36:a9:5d:8d:5a:
                    e1:91:4e:b0:41:43:b5:79:23:26:31:36:41:2f:f7:
                    f2:28:5e:af:11:2e:63:6f:8d:c4:ce:a9:e3:97:03:
                    5d:48:76:9b:b3:cc:15:56:65:f3:a5:47:aa:7a:98:
                    7f:5b:2b:ad:d0:6f:28:9b:c3:ab:67:fe:ff:b8:8d:
                    a3:66:57:34:a7:e4:a9:20:f0:18:cf:25:0d:ee:e8:
                    67:10:93:5d:4e:e2:cb:91:b1:bb:0c:f5:b2:26:9d:
                    74:62:20:f2:ad:45:58:6e:6a:b1:18:56:18:c7:28:
                    b3:cb:74:4c:4a:b0:94:dd:15:44:b7:f2:5b:46:98:
                    8f:a5:f3:dd:52:ae:3b:00:2a:2d:47:26:de:e2:27:
                    b8:28:a0:10:af:50:1a:16:5c:d2:1e:58:8c:3a:37:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:ED:48:66:87:1D:2C:10:D5:E9:29:D2:B1:1E:8C:D1:DD:39:C5
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:f7:d7:08:42:a5:88:2f:b6:bf:d8:88:35:42:1d:5f:b2:
         77:4a:62:7e:3e:4e:24:2a:a6:a3:52:ae:c3:0c:3e:b6:ec:85:
         3d:fc:bf:0e:a7:87:db:8c:df:ad:ad:4c:45:80:ec:19:4c:7f:
         22:ea:9c:25:c2:b5:7e:55:6c:3c:a3:69:b8:4d:49:2a:0d:0d:
         9a:ba:9a:b2:9b:0e:ac:31:53:d1:5d:4e:ea:d1:63:16:e0:2f:
         87:d2:59:3d:ac:35:48:d0:a5:f3:e8:6a:74:7b:60:8b:51:80:
         45:55:5e:60:4b:f8:65:71:77:ef:28:6b:f2:11:18:b5:77:5e:
         5d:e8:07:f7:60:b5:62:45:c6:5a:49:a1:2d:cd:22:95:bd:a4:
         1d:93:5e:fb:3e:bf:19:d8:52:28:f9:9c:77:da:06:0e:4c:63:
         e6:f1:00:55:38:58:3b:ee:d0:ca:8b:1f:18:47:14:77:68:b9:
         3e:21:cf:52:3e:d4:1e:82:13:19:8f:70:79:ce:28:34:05:16:
         6e:44:e4:00:9c:05:29:68:61:02:f6:b6:c3:de:9a:5e:79:40:
         05:de:43:f8:3b:49:1f:f3:91:32:7d:34:80:c1:0c:9c:38:00:
         54:98:63:76:8d:2a:db:b4:5f:f0:95:3d:6a:48:e0:bd:24:43:
         44:4e:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:44 2026 by rpki-client