Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File:                     N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier:          ZKq9kOlTSvgZdf9s0LQnxlD5mlX5yb+znJktptBAF3s=
Subject key identifier:   5C:3C:A3:DB:BE:14:F3:15:B8:E8:92:AE:53:15:EF:F4:2C:12:1B:BA
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number:          0167
Signing time:             Fri 17 Apr 2026 04:34:47 +0000
Manifest this update:     Fri 17 Apr 2026 04:34:46 +0000
Manifest next update:     Fri 24 Apr 2026 04:34:46 +0000
Files and hashes:         1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: 2/NMkDhgQddNF0vFyKohRS0ZONCm2ckWLlWJVtl2jCM=)
                          2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: WF6w/HKO6UZ72c8ORFF3ZA3mUk6+CxEAfEJ2u/IKs9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: Apr 17 04:34:46 2026 GMT
            Not After : Apr 24 04:34:46 2026 GMT
        Subject: CN=69e1b867-2d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:5d:ce:b4:b2:f3:2c:f4:46:d8:d8:e9:61:
                    95:8b:5a:52:cf:35:d3:3b:bb:2d:08:2b:a2:b4:f6:
                    0b:b0:51:69:c4:d2:31:20:b8:e0:df:34:96:c0:6c:
                    3a:ca:5f:0d:d2:35:01:ea:1f:02:54:c4:c4:09:5e:
                    e4:6e:af:c2:46:03:e6:56:75:5d:4c:cf:34:6c:19:
                    5b:c9:77:26:de:dd:88:21:87:31:97:da:b4:be:52:
                    cb:b8:ea:66:02:ad:0b:f5:ed:e4:64:2c:0e:c7:2e:
                    88:83:90:84:ac:f3:d4:2b:a5:ab:5d:51:ab:23:9a:
                    5f:20:b0:a0:29:1a:ce:fc:36:a0:41:86:a7:c0:c5:
                    0a:95:3e:e5:e5:fc:4c:c2:4f:82:71:be:46:15:ea:
                    e5:07:ac:69:ee:bf:6c:83:10:a6:3f:ba:70:38:de:
                    24:a6:3c:a6:1e:31:cb:1d:59:21:bd:b0:43:b5:80:
                    db:5c:2d:3d:ad:e1:09:e9:f6:d7:5c:14:15:05:c7:
                    aa:9a:b9:3f:f5:06:64:f3:94:ef:bd:99:c0:fb:dd:
                    60:40:e1:c2:0c:c6:83:28:79:72:ea:ef:db:92:d9:
                    89:7b:ff:6c:cd:07:bc:a1:08:21:b2:6f:b0:31:ac:
                    95:da:29:16:68:b7:2e:25:42:04:88:38:10:60:22:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3C:A3:DB:BE:14:F3:15:B8:E8:92:AE:53:15:EF:F4:2C:12:1B:BA
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:61:f7:6a:da:96:e6:d7:fa:94:20:3c:4a:74:b2:09:30:a9:
         b2:1c:7c:7f:55:49:26:87:b2:09:ca:8e:7c:db:83:b8:fe:d5:
         6d:cd:15:84:43:39:d5:35:f0:40:39:ed:ba:85:6f:17:28:a2:
         43:07:fd:ec:18:8f:b2:59:eb:5a:f1:04:8f:6a:c6:76:55:a0:
         60:31:00:00:c0:b6:61:99:61:c2:36:30:35:19:96:8a:94:73:
         59:f7:9f:35:81:27:f4:47:7a:0e:0f:f0:20:99:8e:74:cf:68:
         f8:3e:63:32:c9:30:74:93:45:ca:a5:1f:67:d1:77:bf:2c:87:
         e9:11:99:68:2a:d5:a4:52:47:6f:82:71:41:0c:7c:af:0b:39:
         39:e0:17:27:4f:2a:dc:3c:7a:f6:be:8f:c8:78:9e:8f:91:10:
         18:83:00:e1:fc:be:49:07:b3:74:b6:c1:51:34:62:4b:73:8a:
         26:63:ac:d2:b1:81:ee:e1:08:60:d7:6c:08:2c:fa:f3:db:f2:
         78:09:6e:43:ba:b6:dd:8c:59:8c:c1:9a:c5:fa:8e:17:ad:68:
         da:11:e2:4d:27:3b:ae:da:e2:a5:42:f9:f6:9e:f8:83:9f:f4:
         87:63:1f:e7:2d:7d:ba:f4:78:b9:97:03:ca:53:ed:83:49:5f:
         23:9a:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:16:51 2026 by rpki-client