Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File:                     MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier:          jKM4zsd5l2wuQQ0TKKE/wgzLPZuvQtjapMofsH6THoA=
Subject key identifier:   66:7F:C9:0E:06:DC:56:6A:B1:44:6E:66:AD:18:2C:C7:40:9A:8B:1D
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number:          5F
Signing time:             Sun 05 Apr 2026 07:30:05 +0000
Manifest this update:     Sun 05 Apr 2026 07:30:04 +0000
Manifest next update:     Sun 12 Apr 2026 07:30:04 +0000
Files and hashes:         1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: LpGUkCs0/by6OlxBqPt8vZ3ZKLH7FMGN3xFpT8GKHSY=)
                          2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
                          3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Apr  5 07:30:04 2026 GMT
            Not After : Apr 12 07:30:04 2026 GMT
        Subject: CN=69d20f7d-f1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:69:c3:46:30:9d:bf:af:67:94:e8:05:6f:
                    6a:04:e6:bb:d5:8c:11:3b:1c:91:d8:f3:04:e3:6a:
                    d4:a9:4e:fa:f5:27:3b:9c:b7:09:5c:31:d1:fc:c9:
                    e0:44:4b:34:05:a3:c6:82:51:fc:61:0f:fb:49:ec:
                    36:fb:b4:11:ee:30:0d:0f:e4:24:11:cb:48:a6:49:
                    82:a3:4a:3c:86:8d:88:e6:57:8a:a1:92:55:ef:14:
                    c8:57:fc:20:9d:db:54:c5:03:c6:cc:97:00:5c:d5:
                    28:67:87:e8:a1:8a:c2:7a:eb:a8:49:5a:af:1b:af:
                    a7:7c:98:65:3f:f9:19:4e:04:76:de:d7:db:d4:19:
                    11:e7:48:69:60:87:99:75:3f:51:39:4b:a2:f0:f8:
                    38:f8:af:aa:36:39:fe:08:4d:3c:28:22:d5:f7:eb:
                    16:26:e4:f7:97:03:e0:b0:3a:d8:8a:48:b1:87:52:
                    5b:5c:2a:21:9f:5d:bd:2f:b5:73:e3:e8:bb:92:ff:
                    0f:7e:4b:23:9d:dd:bf:78:80:5a:7d:a2:86:23:2c:
                    48:55:9b:47:26:3a:bd:ae:fe:08:7d:26:6a:b2:9b:
                    d9:cf:85:2a:85:fc:8d:ee:65:a6:5b:fc:3c:ea:10:
                    57:3a:e0:5c:bd:6d:f6:1b:d5:d1:3c:62:b3:97:4f:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:C9:0E:06:DC:56:6A:B1:44:6E:66:AD:18:2C:C7:40:9A:8B:1D
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:56:19:7a:f7:7b:7b:e6:82:cf:9b:f0:64:25:0d:f7:63:f9:
         76:64:bf:c6:ae:cb:39:f3:b0:f3:be:f8:bb:3e:5d:5e:21:4a:
         01:84:d0:9a:3c:ad:a9:ed:9b:e8:1c:2c:f3:88:56:35:ac:25:
         9a:b8:e4:14:13:65:21:a0:ce:c9:0a:df:10:b7:03:6a:8e:ed:
         7d:83:98:5b:64:e5:32:fe:94:a5:fc:e9:e3:f3:d7:65:39:05:
         fe:1c:0f:89:c0:f5:f6:88:db:f8:39:98:cd:3c:4a:ab:f6:7f:
         dd:ef:1c:41:fa:44:8e:fb:44:9e:b4:f8:26:34:85:d2:e7:84:
         bb:b0:16:a8:c7:fc:87:f7:6c:f7:3d:59:6f:0d:5a:af:4d:b5:
         2d:da:46:7a:20:64:9b:0a:46:a5:8d:e1:86:77:fc:78:8e:14:
         a2:d9:f8:92:a7:98:48:5c:b1:01:d2:44:2d:b0:fa:f4:32:3a:
         9e:dc:36:e8:53:97:5b:0b:79:07:ec:69:ab:88:c6:5f:70:89:
         58:90:c1:b8:0e:29:e4:a9:8d:3e:14:08:31:a8:b2:f8:67:bf:
         cf:8c:af:58:e9:87:e8:0c:8a:fd:22:c0:64:97:f6:69:b7:20:
         f9:ec:cf:67:6c:7a:1d:24:4c:92:52:77:27:72:37:ff:60:e9:
         c1:98:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:33 2026 by rpki-client