Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File:                     MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier:          18S6zFSvn9IYnu3038O1dekYe91NBq6O2AniWfVcuaw=
Subject key identifier:   60:2D:07:5A:1B:9D:85:7B:51:94:A5:DD:3B:05:EB:C1:C7:16:FE:D1
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number:          C2
Signing time:             Mon 19 Oct 2026 07:38:19 +0000
Manifest this update:     Mon 19 Oct 2026 07:38:18 +0000
Manifest next update:     Mon 26 Oct 2026 07:38:18 +0000
Files and hashes:         1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: gxLUWF4PV2g8r4SVLdEPgQlQ4wvREDQsYPp4WWYYOLk=)
                          2: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
                          3: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 07:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Oct 19 07:38:18 2026 GMT
            Not After : Oct 26 07:38:18 2026 GMT
        Subject: CN=6ad5c8eb-c474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:c4:7a:23:5e:e1:dd:5e:38:94:28:47:6a:
                    d7:c8:20:aa:09:45:17:ef:ac:5d:2c:8a:1f:71:22:
                    38:64:c8:25:82:e1:8d:82:fa:1e:6e:22:c7:93:8e:
                    ce:40:ea:0f:5c:fc:9d:31:e6:97:66:c8:17:aa:5a:
                    2e:da:62:17:4b:ec:92:f8:97:92:7c:94:be:be:c4:
                    0f:d4:ca:0e:9a:f5:19:ae:97:af:30:d6:0a:e3:29:
                    d0:ec:2f:a9:b0:80:9e:cb:fa:94:65:e0:57:f5:8a:
                    65:07:db:43:71:6b:c8:fc:f1:b8:3d:83:e2:00:7a:
                    fd:25:6a:71:2f:6c:aa:81:9b:27:b8:1f:06:30:6c:
                    6a:15:7c:78:98:31:7f:3b:80:bc:88:0b:f6:a5:94:
                    8c:fd:80:96:df:a7:44:b9:3a:6a:b8:53:e4:20:17:
                    f7:93:94:e2:8a:2d:bb:18:a6:ec:26:e3:bd:69:7d:
                    21:50:44:eb:46:cb:d0:86:6b:4e:22:bc:5c:df:aa:
                    a5:85:01:fc:1d:e3:6f:8c:b0:a0:2d:3e:cd:b0:b4:
                    b5:4e:8b:8d:68:c6:4f:91:77:b8:8d:cd:c8:97:6f:
                    ba:4c:2e:6a:09:06:c6:93:99:8b:5f:30:88:08:54:
                    28:d1:e3:aa:8f:a1:f0:98:4f:1f:2b:c0:2e:c5:35:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:07:5A:1B:9D:85:7B:51:94:A5:DD:3B:05:EB:C1:C7:16:FE:D1
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:13:0a:04:ac:82:d8:1b:94:c6:5e:a7:32:02:3e:93:7b:17:
         cd:0b:46:c6:69:a8:7e:f7:d0:91:e8:56:52:20:d5:5a:8c:a5:
         dc:3b:b6:23:61:ef:6b:b2:36:d7:28:6b:b0:3f:e6:64:81:04:
         74:cb:bb:60:e9:6a:3e:c2:0b:c2:42:1e:c5:31:b2:ee:f5:02:
         b8:cf:25:fa:7d:cf:37:09:dc:4c:ec:77:08:d6:b4:11:da:26:
         31:81:89:51:91:c2:6e:0a:c7:52:54:5d:6a:a0:c2:e5:03:57:
         45:6b:e4:c7:a0:b3:8f:50:83:08:85:04:c2:38:5a:80:b2:f1:
         41:67:61:e0:b5:db:7f:1f:1e:7a:b6:2d:c5:f4:ad:9d:c7:12:
         9d:bf:03:cc:f6:5c:f3:32:d9:50:51:64:76:05:af:4a:bc:20:
         e7:8d:fc:95:d3:df:d9:f5:98:62:b4:65:0c:00:17:37:a9:ec:
         12:83:f8:15:aa:7c:b8:57:d9:55:1f:de:ff:a8:e4:28:4a:de:
         d5:55:2d:5f:e8:26:64:0c:3e:cf:0f:b0:2a:70:c8:2b:6f:b1:
         dc:d1:2f:8e:f3:fa:31:5e:62:9c:17:6b:9d:b4:17:0d:a0:a1:
         40:a0:c1:1a:ca:9b:83:f3:cf:6a:05:2e:b9:89:01:4c:e5:14:
         d9:2b:ed:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGRUUxMTAvBgNVBAUTKDMxNDJBMUE4NjFEOUE0NEE5MzI3RjA2NjE5RkVDOEE2
QTk2MkI0MjMwHhcNMjYxMDE5MDczODE4WhcNMjYxMDI2MDczODE4WjAYMRYwFAYD
VQQDEw02YWQ1YzhlYi1jNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA307EeiNe4d1eOJQoR2rXyCCqCUUX76xdLIofcSI4ZMglguGNgvoebiLHk47O
QOoPXPydMeaXZsgXqlou2mIXS+yS+JeSfJS+vsQP1MoOmvUZrpevMNYK4ynQ7C+p
sICey/qUZeBX9YplB9tDcWvI/PG4PYPiAHr9JWpxL2yqgZsnuB8GMGxqFXx4mDF/
O4C8iAv2pZSM/YCW36dEuTpquFPkIBf3k5Tiii27GKbsJuO9aX0hUETrRsvQhmtO
Irxc36qlhQH8HeNvjLCgLT7NsLS1TouNaMZPkXe4jc3Il2+6TC5qCQbGk5mLXzCI
CFQo0eOqj6HwmE8fK8AuxTVsgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAtB1ob
nYV7UZSl3TsF68HHFv7RMB8GA1UdIwQYMBaAFDFCoahh2aRKkyfwZhn+yKapYrQj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZFRS8wRjlFOTFGOEIz
RDExMUYwODZDMjJENUFDNEY5QUUwMi9NVUtocUdIWnBFcVRKX0JtR2Y3SXBxbGl0
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01VS2hxR0hacEVxVEpfQm1HZjdJcHFsaXRDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUZFRS8wRjlFOTFGOEIzRDExMUYwODZDMjJENUFDNEY5QUUwMi9NVUtocUdIWnBF
cVRKX0JtR2Y3SXBxbGl0Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIhMKBKyC2BuUxl6nMgI+k3sXzQtGxmmofvfQkehWUiDVWoyl3Du2I2Hva7I2
1yhrsD/mZIEEdMu7YOlqPsILwkIexTGy7vUCuM8l+n3PNwncTOx3CNa0EdomMYGJ
UZHCbgrHUlRdaqDC5QNXRWvkx6Czj1CDCIUEwjhagLLxQWdh4LXbfx8eerYtxfSt
nccSnb8DzPZc8zLZUFFkdgWvSrwg5438ldPf2fWYYrRlDAAXN6nsEoP4Fap8uFfZ
VR/e/6jkKEre1VUtX+gmZAw+zw+wKnDIK2+x3NEvjvP6MV5inBdrnbQXDaChQKDB
Gsqbg/PPagUuuYkBTOUU2SvtHg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:53:50 2026 by rpki-client