Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          E6L5fwcln0qXXJV1vmkpCelO2BcdivrC1N2Sa4Dlkpk=
Subject key identifier:   68:27:0F:21:ED:67:E3:BC:D8:2B:0C:3C:90:02:C7:D1:9A:F8:04:14
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          0141
Signing time:             Mon 27 Jul 2026 07:19:24 +0000
Manifest this update:     Mon 27 Jul 2026 07:19:24 +0000
Manifest next update:     Mon 03 Aug 2026 07:19:24 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: FvZ7WC+/fnvLnloJ+2fzvCOp87pTSkLJ8PnzskmCbR4=)
                          2: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
                          3: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
                          4: 11A52E8285CF11F1AA606E4D69A30FBC.roa (hash: bCeuzw2zIW/twQzOJG86lqVnHmDqpRY5xgdnsY0FAtc=)
                          5: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Jul 27 07:19:24 2026 GMT
            Not After : Aug  3 07:19:24 2026 GMT
        Subject: CN=6a67067c-d1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:e9:09:70:bf:ab:44:0f:b1:6a:b5:a0:b7:
                    e9:4c:11:fa:d7:bc:85:07:af:57:fc:64:ea:38:b0:
                    56:c2:7d:89:65:2b:4a:6e:7e:c3:e3:50:72:0a:18:
                    ae:26:d2:66:93:60:88:b7:bd:31:18:21:ab:04:b1:
                    01:04:28:5c:dc:f1:43:07:3f:d7:73:d1:7a:6f:eb:
                    bf:cb:92:c3:f9:f8:b1:f7:36:54:d4:09:38:a0:31:
                    3a:fa:05:d5:0a:c8:19:77:20:34:dd:73:a0:82:54:
                    be:76:50:20:a2:4a:f4:a2:45:68:df:dd:ee:34:55:
                    f5:dd:cb:0f:85:e2:05:d7:17:4b:32:72:9f:16:07:
                    86:c6:94:1f:c3:49:1d:b2:5d:f7:9b:9c:14:ab:73:
                    5f:88:ec:3c:e9:f2:77:47:d7:9b:fd:e7:f3:ad:38:
                    28:60:75:1d:f4:06:2b:e2:f1:a6:a1:68:8d:44:13:
                    1b:0f:70:9d:1b:6e:fe:73:79:98:26:b4:99:78:36:
                    a8:88:b0:3c:bc:6a:d7:d9:3f:ec:85:c3:0f:15:0d:
                    8e:d0:b9:64:a2:51:a5:80:06:90:3d:1b:85:fe:d5:
                    35:cb:79:d0:e4:50:23:6d:59:cd:6e:6d:b6:a8:69:
                    13:4c:78:d6:d0:74:d7:88:7e:e0:b6:57:7a:ae:e2:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:0F:21:ED:67:E3:BC:D8:2B:0C:3C:90:02:C7:D1:9A:F8:04:14
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:45:0a:ce:22:ef:06:ac:a1:a2:b1:42:c6:be:47:66:47:d0:
         b3:5d:6c:6b:d2:42:17:a4:e9:51:73:4b:ad:83:84:a9:cc:81:
         9b:15:8f:3f:5b:49:29:32:2a:19:ab:19:46:23:c3:6e:10:29:
         db:bb:7c:f7:d2:6e:4e:23:ae:5d:c7:e7:cd:6e:ab:bd:43:7a:
         1a:1f:e8:6d:fb:29:3d:79:b5:25:b1:66:27:91:b6:da:a0:23:
         67:e0:50:2a:2a:11:22:89:7c:14:55:0d:5f:1a:8b:a7:bf:c6:
         51:78:fd:b7:c6:97:62:95:6f:25:76:aa:d9:bf:2f:4a:25:95:
         dd:ac:04:e8:3b:b6:ac:60:61:d7:7a:90:b3:ba:f0:00:42:0f:
         51:26:d6:7b:2b:6f:6a:32:c6:50:70:96:e8:17:d9:fa:d4:7c:
         ca:3d:58:da:a3:88:ec:e1:20:46:3d:51:08:ee:50:f1:df:5f:
         d3:bc:91:db:a3:0b:74:e1:12:0d:d6:38:e6:96:96:f4:b3:3a:
         12:6d:67:3a:17:76:60:c6:2d:69:ec:7e:07:82:4a:7f:28:f5:
         a0:c2:ec:a3:46:dc:0a:7d:04:94:ce:c2:9f:ae:77:6d:73:bf:
         9f:fa:36:0e:34:9f:2a:d1:ea:51:ed:b0:07:ae:16:df:96:93:
         5f:98:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:13 2026 by rpki-client