Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File:                     MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier:          DJaiqQn0Zl6CfI8Arz+7OvDxs/Zf31J7WFmDr/9D4hI=
Subject key identifier:   A0:D8:C5:DC:C8:88:5F:9E:30:43:7F:5F:89:C8:3A:1D:1B:02:EC:17
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number:          7C
Signing time:             Mon 01 Jun 2026 08:35:23 +0000
Manifest this update:     Mon 01 Jun 2026 08:35:22 +0000
Manifest next update:     Mon 08 Jun 2026 08:35:22 +0000
Files and hashes:         1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: 9NSIJov9OHRUFjmXds/a0GZiVHu6l82BskVK4UJT6kk=)
                          2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
                          3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Jun  1 08:35:22 2026 GMT
            Not After : Jun  8 08:35:22 2026 GMT
        Subject: CN=6a1d444a-8e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:b7:63:ad:3c:c4:20:b2:53:54:c2:af:30:
                    e0:6d:28:28:3f:91:a8:8c:11:16:38:eb:24:0d:d7:
                    6e:03:41:d3:a3:6d:90:33:1f:e1:7e:7c:d3:8d:63:
                    4e:a4:f8:69:61:03:a5:4c:db:af:bd:f0:1a:f2:bc:
                    c5:3e:7a:8e:92:87:9a:5c:4f:42:aa:30:c5:e3:49:
                    7b:1c:a4:ef:b7:39:64:a5:9e:bf:81:ec:99:16:e2:
                    e9:87:58:32:15:e8:5d:f9:18:a1:a3:a3:ec:d6:a5:
                    0a:27:61:19:ce:b2:69:10:40:93:b3:c7:9a:cd:cf:
                    76:d2:a0:d5:56:fa:07:52:e5:f1:56:d9:30:21:e6:
                    35:fb:4a:f5:9b:b3:84:1c:63:79:5d:80:71:69:fa:
                    66:66:12:14:e5:ec:24:04:c0:b0:3d:e8:71:29:2a:
                    53:5f:d8:c5:c2:d9:7a:b5:2c:45:96:80:1c:46:0a:
                    74:59:2e:ec:13:b8:58:95:a8:f0:01:2b:d0:30:71:
                    fa:13:9d:f9:f6:52:7c:bf:04:8b:f5:f1:17:12:e1:
                    5e:74:40:ce:24:e6:51:50:4f:a5:12:6d:be:ac:3e:
                    e0:d3:c4:dc:de:af:df:60:53:62:18:01:5e:a7:a9:
                    f6:d4:5a:48:70:66:3d:2d:32:e2:2c:17:ed:3f:79:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:C5:DC:C8:88:5F:9E:30:43:7F:5F:89:C8:3A:1D:1B:02:EC:17
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:1c:08:c3:00:f1:dd:a5:dd:04:10:a6:34:c7:1c:6d:38:
         ef:71:ae:62:ed:7d:8b:11:51:87:29:ae:2b:1c:1f:7e:b9:62:
         17:a9:00:e2:4d:6c:53:83:4e:23:75:18:bf:d5:b4:56:7c:89:
         ef:24:6c:d1:26:4d:76:c6:68:73:09:59:e2:41:cb:c9:1f:b3:
         f3:b6:19:0c:9e:57:d4:bf:7d:ff:62:59:51:92:b6:e1:d8:bc:
         2a:10:f7:e1:ba:bd:3e:a1:0f:f7:01:f4:df:3c:1d:49:2a:4a:
         64:2c:87:8c:4c:96:db:75:6d:35:db:8e:31:4c:74:58:8b:ec:
         73:a8:b3:7d:4f:5b:78:42:9c:ed:81:0f:38:5f:20:50:e5:0b:
         68:fb:89:43:7a:92:9e:c2:b0:24:a1:da:b9:df:fe:71:40:fe:
         79:4e:c0:23:1c:e2:20:c1:d6:dd:4a:ac:f3:8b:ee:04:d7:1b:
         99:d1:97:a1:6c:c4:e2:ff:3d:33:c6:23:35:e9:18:64:8c:0e:
         cf:e7:14:b7:51:a4:fc:6f:89:5d:89:bf:1d:61:8b:c6:82:c1:
         12:46:02:91:79:91:cc:c0:5e:cd:1e:5c:13:ed:da:a6:59:f7:
         39:43:01:14:2c:aa:8b:5a:d0:4c:74:3b:9f:d7:49:4f:8d:43:
         64:cc:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:07 2026 by rpki-client