Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          PtMNydivKVU+h3f6KnEqLgaQ9VxA6MnzkQfAImXrDT8=
Subject key identifier:   F7:8D:7B:09:AA:A6:BC:53:3C:DF:F5:CF:0B:05:5D:9E:86:5B:DD:29
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          0147
Signing time:             Wed 19 Aug 2026 06:01:40 +0000
Manifest this update:     Wed 19 Aug 2026 06:01:40 +0000
Manifest next update:     Wed 26 Aug 2026 06:01:40 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: yHHKtKgxtefueBp4RC+waCeRuGKJqE9IE0PrjUnfVK8=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 01UiF4dupnleZ3cY+hMuL57eYYzuBzeVgHGt3xr/vbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: Aug 19 06:01:40 2026 GMT
            Not After : Aug 26 06:01:40 2026 GMT
        Subject: CN=6a8546c4-3643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:c7:54:ce:bb:97:58:bd:75:9d:95:72:6a:
                    ab:e7:d0:77:c4:5c:14:18:e4:34:26:0b:bf:de:f1:
                    e9:6f:ab:7c:9a:cc:87:ae:ca:0c:94:ef:aa:31:6a:
                    2d:ee:b1:7d:ad:f5:71:31:97:23:a7:52:c3:5b:d3:
                    7d:4c:5a:d8:70:ff:ec:51:61:a6:d5:22:78:5a:ea:
                    89:c3:2a:49:4b:e9:be:c0:ab:0a:51:5e:39:50:ed:
                    50:ea:1d:a2:21:76:64:fd:10:39:62:29:de:5a:3f:
                    05:bf:35:b7:8f:08:dd:c5:6c:0a:20:9e:25:82:88:
                    1f:fe:84:ca:d9:05:23:80:5b:f3:13:d3:14:e6:d2:
                    b1:dd:24:bc:8a:bc:e9:80:22:2c:74:b1:cb:21:89:
                    ca:0b:2e:96:bb:29:74:eb:40:5f:0f:00:6d:67:93:
                    ae:ee:c4:ec:12:8f:e0:e7:eb:2d:3f:aa:74:48:9c:
                    65:45:86:71:8e:a3:f3:95:09:c3:62:11:15:03:27:
                    17:0d:77:98:21:d1:88:4d:13:db:57:a7:49:36:b6:
                    5f:5d:ac:f9:f5:20:85:44:0e:82:f1:b8:e9:82:93:
                    c6:80:36:e2:fe:de:e8:97:c1:f8:6d:69:5e:34:aa:
                    c0:3e:ee:c4:18:b5:24:dd:39:ad:78:4f:59:33:94:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:7B:09:AA:A6:BC:53:3C:DF:F5:CF:0B:05:5D:9E:86:5B:DD:29
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:96:1d:61:a9:55:7f:8b:39:05:a6:87:c1:60:9a:12:37:78:
         ce:f4:93:39:de:01:4d:c0:67:3d:f1:89:56:5c:6a:6a:d9:df:
         5e:16:2b:b3:c7:dd:58:bf:4e:2e:62:1c:e7:53:85:ee:0b:65:
         2d:54:7a:fc:92:08:fd:a8:a6:51:db:cd:08:f9:22:d1:e5:d0:
         62:04:24:4f:7e:10:38:f4:52:b6:61:82:b8:c7:11:5d:a4:02:
         f0:f7:39:a7:c5:71:e0:69:dd:20:a1:16:91:25:bb:4a:2c:58:
         6c:fc:10:84:83:f7:c1:f9:f3:24:7c:ba:95:3e:9a:df:77:28:
         76:a1:28:c6:1d:1f:63:63:d4:ab:86:5d:e5:ed:2c:d3:dd:ee:
         7c:ef:7b:1d:9e:8c:e9:61:ca:2e:ed:16:9f:3f:9e:8a:b4:21:
         9e:15:9a:35:23:f6:a5:c6:04:36:de:0f:42:81:dd:62:29:88:
         23:1f:c7:01:fb:46:be:42:83:41:58:76:b6:47:21:ac:1d:9d:
         41:ea:92:af:86:22:30:51:5b:02:0e:d7:c7:d2:ab:a6:80:5b:
         c7:38:50:b3:8e:de:14:c3:20:fa:fd:c1:35:e8:54:b9:10:84:
         77:5f:10:33:47:6b:68:62:94:35:8d:a0:df:67:53:49:57:3c:
         9f:f1:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:58 2026 by rpki-client