Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
File:                     _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json)
Hash identifier:          PM9X67kMJgq8xyhYnL4gXsxkWEPB0B9TM3CHiZikI98=
Subject key identifier:   D7:D4:B9:3F:83:BE:E2:A4:89:EF:98:B4:A0:5D:8F:28:AC:CB:F2:6B
Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09
Certificate issuer:       /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
Certificate serial:       0A54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
Manifest number:          0A4B
Signing time:             Tue 28 Jul 2026 20:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:02 +0000
Manifest next update:     Tue 04 Aug 2026 20:01:02 +0000
Files and hashes:         1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: uSymk0U+i315xFNqHIT4NU8Th6JWMaEsJ1JwgbPZ8Cw=)
                          2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: cDOd12lHJvxwUolrfTe3odnYbC9rB4VadWNGF5sIPUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl
                          rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109
        Validity
            Not Before: Jul 28 20:01:02 2026 GMT
            Not After : Aug  4 20:01:02 2026 GMT
        Subject: CN=6a690a7f-c019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:d7:88:fc:31:cd:84:cc:af:3a:82:b0:15:
                    39:16:88:2b:9f:3b:9a:4f:0e:cd:da:78:0e:9e:d5:
                    d5:65:5e:cb:1f:0e:1b:24:d0:ff:7f:f7:10:cb:bb:
                    05:0d:47:f0:b6:f2:9a:cf:97:bc:71:cf:65:a1:f3:
                    f0:c5:41:cc:68:58:df:02:ae:c2:de:39:e6:50:7b:
                    5e:b4:35:49:28:8b:5f:02:ae:9b:5f:d8:d9:db:51:
                    2d:8e:69:f7:65:21:9f:8d:43:46:bc:43:f8:61:e9:
                    b2:f1:5a:4c:4a:92:0b:c2:85:6d:97:13:7c:17:d2:
                    58:2d:96:c6:bd:62:86:e0:89:86:df:e7:eb:8a:a1:
                    76:d1:ed:88:47:c9:4d:02:e5:b2:15:ca:ae:ab:c6:
                    8f:91:2f:e0:c9:cd:27:da:ab:0b:65:38:ff:d8:92:
                    07:b2:42:2d:61:66:69:20:8e:0f:bb:47:bf:ba:cb:
                    1a:88:e4:47:d8:67:b3:a4:f4:95:b1:f1:9e:66:f1:
                    65:1f:7d:04:90:73:f4:19:2b:2c:ae:4f:d1:bb:eb:
                    f5:f8:30:17:89:d0:14:f0:4b:41:4e:62:66:8b:da:
                    db:b3:66:a2:98:d9:37:d7:57:c1:d7:bb:56:d7:fb:
                    77:8c:70:1a:91:87:34:83:c7:88:24:9e:45:07:a9:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:B9:3F:83:BE:E2:A4:89:EF:98:B4:A0:5D:8F:28:AC:CB:F2:6B
            X509v3 Authority Key Identifier:
                keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:92:1c:10:68:0e:ff:0d:2b:f9:8a:69:d4:24:c3:4e:b9:21:
         5d:d3:cd:a0:c0:c2:3a:f2:8c:34:52:50:17:b3:cc:c0:9f:8a:
         39:ab:bc:67:ff:5d:ba:62:f7:a4:db:2c:5b:6d:19:f5:b3:6f:
         f3:4a:6f:e4:1f:a5:96:00:ad:57:a4:1b:5c:e9:55:8e:8c:50:
         a0:2b:26:81:b8:dc:54:4c:30:f9:85:07:8e:10:85:a9:ac:0e:
         d0:3f:53:b9:80:d8:91:bd:0b:01:f3:dd:c9:97:e3:19:75:3b:
         eb:73:02:ad:16:3a:23:39:70:6e:4a:b9:41:3f:4c:e6:94:69:
         d0:9a:02:28:76:a4:bd:b2:e4:77:59:f5:f7:4a:49:33:a1:94:
         19:4a:64:ac:06:b0:97:75:85:03:38:d7:2e:dc:42:e6:84:b1:
         29:f7:7d:26:88:6d:24:06:e9:3d:bf:65:1a:e5:c6:87:4b:12:
         55:f5:e4:28:b0:84:90:95:ff:66:f7:25:c4:08:d4:cc:6c:37:
         64:ca:af:ec:80:78:ab:ba:3f:20:11:a1:f9:76:25:70:91:c0:
         cb:7f:6f:54:ba:2b:d3:f9:82:32:43:a9:c1:39:1b:0f:11:6d:
         7b:7b:82:bf:5d:7b:23:7d:df:6d:84:2b:54:78:85:d2:86:ba:
         22:fb:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:01 2026 by rpki-client