Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
File:                     MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json)
Hash identifier:          XNvAyVyEBAh+cKf/xn1NOwwGM5H7S8tT3/onncCsBxU=
Subject key identifier:   D0:B0:9C:F0:57:67:2A:F7:0C:24:88:B5:BB:B5:4B:65:0D:D0:29:72
Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
Certificate issuer:       /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Certificate serial:       0560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
Manifest number:          0553
Signing time:             Tue 18 Aug 2026 23:46:54 +0000
Manifest this update:     Tue 18 Aug 2026 23:46:53 +0000
Manifest next update:     Tue 25 Aug 2026 23:46:53 +0000
Files and hashes:         1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: OpLYVpXwKdaIB7/4Lqkbk0TdPqMHVyF5dB1FOclY1v8=)
                          2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: qt4s9HBAeJcBPk0Llq0F/Y+xml+HCsgruEcd0L0uDYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
                          rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
        Validity
            Not Before: Aug 18 23:46:53 2026 GMT
            Not After : Aug 25 23:46:53 2026 GMT
        Subject: CN=6a84eeed-54ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:be:95:7d:e8:1a:b1:74:e8:31:fe:2e:fb:
                    87:01:b0:37:0a:c8:e9:d1:f4:d4:91:bb:3b:fe:64:
                    24:6c:91:2f:74:82:dd:3e:1a:59:7e:b1:54:6b:2b:
                    f5:26:97:ca:62:51:bc:b9:64:7f:02:30:f9:11:d5:
                    57:5a:9f:2f:ef:eb:aa:e5:06:b9:5f:10:be:88:dc:
                    4d:fb:90:0b:6c:95:67:c6:ab:8e:c7:98:79:0f:f3:
                    36:f2:0a:ae:e3:f1:5d:9d:06:44:38:bb:11:9e:4b:
                    18:e4:5a:96:1f:2c:2b:3e:d2:eb:39:3a:2c:a6:5a:
                    c9:6a:c3:0c:53:2d:98:0d:a4:60:68:c6:cf:42:50:
                    83:30:03:3c:6e:98:a5:b0:4f:ae:4c:b7:62:e3:37:
                    e9:f8:6c:33:a2:75:b6:ed:a4:49:b4:59:52:6b:ef:
                    ef:09:a0:d6:f7:b4:1c:92:0b:d5:79:88:a6:c8:8e:
                    3f:f5:9e:fc:7f:d7:08:a5:bd:19:d0:d6:af:99:88:
                    74:26:59:68:f7:fd:e9:a2:db:81:f4:53:b9:ac:1f:
                    53:69:54:01:de:94:a1:c3:6d:a6:39:ed:8d:3f:49:
                    67:b0:a8:0b:a0:d4:d4:c4:8d:c2:06:35:f1:5b:0e:
                    9f:43:0f:b3:01:3e:77:5f:27:1f:83:17:35:00:8d:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B0:9C:F0:57:67:2A:F7:0C:24:88:B5:BB:B5:4B:65:0D:D0:29:72
            X509v3 Authority Key Identifier:
                keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:ee:59:a1:c3:8c:80:ce:e2:76:17:20:5b:e2:0e:bb:0b:
         6e:3f:e9:5e:53:d4:97:c2:75:35:59:61:3a:22:f9:75:2c:09:
         bc:7d:20:50:72:82:6a:84:d9:12:3d:03:07:0e:e1:4e:d4:78:
         b6:e1:69:20:4e:64:2d:1c:dd:16:51:32:e9:03:1f:68:67:2b:
         cb:c7:b3:c3:79:37:1f:77:82:88:2c:fe:2e:da:c6:10:9f:03:
         f4:34:7f:ea:3f:dd:e8:e6:6f:c2:67:51:27:bf:c2:5e:b6:2f:
         ec:22:1c:76:5f:ef:6b:f4:9a:b4:56:7d:d8:1b:d9:5a:35:f0:
         27:84:1b:60:25:eb:60:b4:87:66:99:52:bd:9d:9b:57:da:95:
         41:b8:95:f0:86:15:95:a8:33:57:c1:b5:63:9b:50:6f:68:fb:
         b5:0b:5f:c2:21:c0:58:1e:a2:d5:2d:77:e6:bf:ed:61:3f:e2:
         80:4d:43:e2:3d:ab:25:46:da:26:cd:81:40:d2:4c:b0:92:d0:
         11:d7:12:16:76:38:a1:b7:c4:8e:93:a6:88:ba:2f:a9:04:a9:
         9a:6c:d2:47:7a:81:a3:cc:23:7b:8d:48:c9:33:50:68:08:80:
         46:f0:8f:16:8f:91:7c:ec:3e:18:d6:41:de:1c:df:88:bc:e3:
         6f:16:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:01 2026 by rpki-client