Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File:                     MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier:          DOLNLaFlJiHCtF7GlL5VtjJZf1tgPXweFI6wZjeWyT8=
Subject key identifier:   D8:4D:C3:45:9E:D5:CD:23:A4:00:41:A3:C1:D5:DF:9F:7C:B8:97:F9
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number:          A9
Signing time:             Mon 31 Aug 2026 07:40:38 +0000
Manifest this update:     Mon 31 Aug 2026 07:40:37 +0000
Manifest next update:     Mon 07 Sep 2026 07:40:37 +0000
Files and hashes:         1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: IIiVZQuGij0/vRZfIhsDWhrN7ZfPe7EiHoLmazdp1uY=)
                          2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
                          3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Aug 31 07:40:37 2026 GMT
            Not After : Sep  7 07:40:37 2026 GMT
        Subject: CN=6a952ff6-7657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:86:4a:91:59:b0:b1:8f:c6:f6:92:0d:de:
                    9c:72:f7:10:9f:87:fc:fd:f9:25:1e:e7:35:7e:6a:
                    e6:51:f9:d6:97:77:c4:fb:a3:fe:78:00:e2:75:61:
                    a0:a7:36:83:d4:a4:a3:53:f5:b6:bf:f8:e1:33:fe:
                    ac:2d:0e:1e:d6:5e:c1:d7:c2:3a:cb:c6:3b:e5:ce:
                    29:75:10:c0:b5:0b:14:31:55:51:48:a1:6c:ae:3c:
                    50:4c:98:ca:63:f7:40:fd:0b:77:88:fe:7a:97:56:
                    80:ee:9c:1f:23:33:26:f1:e4:8f:b8:12:1c:a6:bd:
                    20:90:79:7c:bf:e3:4c:4d:14:a6:30:f6:c8:0f:69:
                    74:2b:af:02:f0:d1:b1:74:b6:05:c6:05:ba:e6:29:
                    d8:36:0c:63:0a:92:b5:ce:71:f4:0d:08:f5:87:a3:
                    33:c2:ea:9c:34:be:a9:c5:d2:e6:30:97:c5:6c:83:
                    a4:d0:68:03:de:6e:18:82:ee:93:81:31:63:04:c6:
                    00:d7:f3:0b:51:68:8e:16:60:3a:eb:9e:c7:28:21:
                    2a:f0:32:63:ad:b7:4d:d9:d0:08:16:17:33:23:35:
                    68:72:77:61:fe:ac:62:1a:0d:e6:47:78:de:03:41:
                    16:a8:08:e4:9a:5a:0c:2e:90:4b:b1:08:2e:8b:25:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4D:C3:45:9E:D5:CD:23:A4:00:41:A3:C1:D5:DF:9F:7C:B8:97:F9
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e6:d1:78:a2:3c:f2:c3:30:b8:b8:10:06:a4:e0:de:0b:69:
         c6:be:0f:8f:13:9a:9a:f7:4a:f5:a6:01:7a:46:a9:80:86:32:
         f7:e6:ca:21:52:ea:10:7a:f5:29:85:90:53:9c:88:bb:3f:25:
         3b:0d:6d:1f:f5:ae:9f:12:60:8d:b2:d5:05:8c:05:f4:34:c3:
         d4:fa:2c:7d:34:0e:4c:d6:6f:a4:95:41:e4:de:03:ca:42:13:
         67:63:aa:a8:ad:27:a3:ad:09:38:3c:a3:b2:c1:56:a9:a2:a4:
         c8:f0:56:ee:89:31:11:ee:fa:8f:d8:7e:bf:fe:89:29:d1:da:
         60:c3:ae:cd:52:61:f0:e1:88:e8:c1:44:03:c1:9a:2a:85:36:
         04:65:4f:03:40:ac:f0:c8:a7:f6:d9:69:c1:cf:d3:71:d2:58:
         d8:94:5d:19:33:ec:e5:68:0c:95:65:38:a6:38:98:5f:45:3e:
         c6:64:62:dd:d2:4d:af:f8:f5:5f:6d:8a:59:17:b4:b6:dd:e0:
         24:fe:1c:b8:48:ab:74:76:21:4f:3e:d3:7f:89:53:32:be:3e:
         35:11:75:f8:14:14:01:c8:66:37:f1:c5:01:8e:9a:4e:37:17:
         e4:63:21:78:24:b0:c6:87:75:1e:09:40:36:2d:52:97:7e:e2:
         05:cc:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:49 2026 by rpki-client