Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          DP+iTw5fpt/XfdKlS3q2O76KA+N8AWSqnNZz6Bt2UDo=
Subject key identifier:   19:57:27:DF:6C:89:C3:0A:09:74:11:89:0E:64:C5:11:FE:DD:B8:8B
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       156D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          1567
Signing time:             Tue 22 Sep 2026 16:43:07 +0000
Manifest this update:     Tue 22 Sep 2026 16:43:06 +0000
Manifest next update:     Tue 29 Sep 2026 16:43:06 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: zU5giPFC3TtXET/QD3HGplGj7DRdwIur6Pea3dbgWok=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: F+xAnb9Dp/1DmyNH/5geMeagilcYVoZK5t/d04k7W6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5485 (0x156d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Sep 22 16:43:06 2026 GMT
            Not After : Sep 29 16:43:06 2026 GMT
        Subject: CN=6ab2b01b-b049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:ca:02:03:78:1f:b7:72:a2:3b:ce:28:fa:
                    d7:9d:e9:1b:f0:52:3c:5f:c8:7c:be:3d:1f:a4:41:
                    c6:e7:50:88:f2:0f:52:81:83:3d:e8:fb:d6:4b:9b:
                    69:dd:5e:aa:ed:be:11:92:32:de:99:b7:f3:eb:5e:
                    d4:00:a6:c2:66:7e:e0:c9:df:d4:73:28:8d:46:e3:
                    91:65:ed:4e:8d:be:7e:f2:8c:14:7d:8d:89:53:05:
                    c1:11:80:4d:b4:5b:a2:2e:44:1e:08:ba:e8:86:97:
                    e8:ff:3b:78:a0:26:23:86:81:8c:11:6a:b3:87:d9:
                    8a:13:81:72:d2:71:71:fa:1c:ed:7a:98:a6:10:0a:
                    eb:bd:c7:cc:45:bc:6d:67:38:ba:4a:7f:b2:e3:ea:
                    ce:57:0e:54:1d:4a:ca:3c:1d:11:4e:5e:6d:6a:fd:
                    eb:66:bd:b3:7e:19:38:c5:06:b0:ca:4f:1a:1c:e3:
                    b1:11:2d:d8:66:92:e6:a7:f1:d0:7f:ce:c2:fb:0c:
                    94:df:55:31:56:10:3a:fd:da:b5:fc:c3:b9:ed:67:
                    5d:c4:a2:04:51:dd:14:de:f7:c7:1c:58:33:31:23:
                    23:30:15:bd:5e:1a:81:b5:72:83:b0:f1:f2:0d:61:
                    1b:2a:39:19:54:e6:05:23:65:d6:4d:57:f8:68:fe:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:27:DF:6C:89:C3:0A:09:74:11:89:0E:64:C5:11:FE:DD:B8:8B
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:20:b2:57:3a:6e:24:2e:fe:e6:40:28:a7:30:11:40:33:e2:
         13:c8:d7:3d:3b:3e:82:64:da:c7:e7:c5:5a:9e:5c:11:33:2e:
         85:29:37:72:3f:1b:30:5b:2b:2e:15:7f:16:52:bf:21:b0:8f:
         1c:e7:b3:81:33:cd:27:d5:52:18:fb:87:88:13:fa:87:6d:ec:
         3c:de:69:29:b6:66:15:93:86:00:e6:be:f5:42:b8:73:44:77:
         72:42:c4:fc:c2:ce:6f:f0:c9:f8:23:35:ce:2e:32:07:c5:0d:
         01:eb:6e:5a:83:26:4a:2f:92:3c:ee:10:73:60:91:99:89:56:
         bc:4b:2a:35:63:8c:88:33:01:c5:6a:1b:50:a9:be:e4:4b:e4:
         20:e5:41:15:5d:a8:99:45:c4:68:c0:51:76:27:9e:12:64:26:
         6a:85:f2:4b:65:2f:11:a0:03:ec:b6:86:19:ad:e6:96:fd:ba:
         d8:b6:92:cf:e0:dc:3b:09:79:00:f1:27:6e:ad:08:ec:d6:37:
         89:40:eb:74:de:a1:10:13:ac:15:00:6f:85:f7:cd:bd:b2:36:
         27:12:49:44:1b:a9:0a:32:9c:4b:0d:63:c1:21:3f:34:03:b5:
         13:b9:a9:bb:20:42:01:ac:7b:b5:fa:c7:42:fa:72:23:99:ef:
         b0:5a:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:49 2026 by rpki-client