Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          vX8GTSlSO450lrRnVkxWyOirypPaWACp0Z7RHo24uNI=
Subject key identifier:   CB:C9:E8:CA:A8:3E:E9:F7:3D:0B:D5:8A:D9:4D:E8:5F:48:17:09:4C
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       1519
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          1514
Signing time:             Thu 16 Apr 2026 16:45:50 +0000
Manifest this update:     Thu 16 Apr 2026 16:45:50 +0000
Manifest next update:     Thu 23 Apr 2026 16:45:50 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: 18Ohdy6PgX19G1ru0zVaIeb4FMQzZ+DKTccVpEjYNKQ=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: WJKNo0fYbhAjCt5a3KR93LYcm+nLeCFwQ8ga/woExmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5401 (0x1519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Apr 16 16:45:50 2026 GMT
            Not After : Apr 23 16:45:50 2026 GMT
        Subject: CN=69e1123e-619d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:eb:6c:29:52:54:e1:e6:3c:3b:05:3e:c7:
                    0c:8a:00:fa:bf:b6:13:a9:9c:ed:47:5b:c4:63:4d:
                    80:d2:7e:2f:47:cb:be:a7:57:c3:39:92:be:65:a5:
                    bf:79:1a:1e:17:36:da:f9:0d:e6:f1:d4:9b:96:95:
                    11:f6:ac:d6:1a:b0:83:26:4f:f8:a1:5d:b5:0d:af:
                    52:d7:b0:ef:63:46:92:e1:d5:53:b1:e7:75:8d:d2:
                    67:fb:d0:39:54:82:1c:dd:07:ed:6b:35:16:d0:11:
                    5d:ef:d2:23:20:f7:c5:1d:3b:02:db:f8:19:be:61:
                    80:9a:14:ba:cb:92:b7:8b:ad:8a:a2:be:82:e5:62:
                    12:e4:49:af:c6:f2:2a:b2:f5:f3:dd:83:39:97:94:
                    04:90:89:29:d3:96:b9:e6:4a:18:90:bf:77:52:1a:
                    94:17:2b:66:15:bf:a1:d5:fb:7f:39:12:ff:56:c8:
                    33:3f:4d:6d:a5:76:a9:d5:93:40:af:b7:b0:51:ce:
                    43:eb:b0:00:04:40:cc:8e:d8:c2:f9:f9:5e:3a:62:
                    70:58:d2:57:e4:61:11:14:09:dd:9c:43:99:08:c3:
                    44:c5:3c:c2:0c:1b:fc:5d:00:71:bd:a1:f1:a7:a3:
                    9c:dd:2b:aa:84:74:22:d7:ea:18:b3:5e:69:67:c6:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:E8:CA:A8:3E:E9:F7:3D:0B:D5:8A:D9:4D:E8:5F:48:17:09:4C
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:47:fa:a0:f1:cf:3f:fe:0e:c0:7b:d0:e3:4d:2f:17:c3:
         70:5b:72:0a:b6:20:5e:f5:70:3b:c2:b5:00:c9:70:fb:e1:5f:
         b9:8d:14:32:38:80:4a:28:8f:1c:42:92:0b:04:dc:91:3f:31:
         16:00:e2:24:b3:cc:e2:8a:5a:00:01:bf:18:8e:65:a5:ce:73:
         b8:03:4a:4d:80:24:37:3a:c7:7a:d4:b0:b1:32:cc:ec:4d:bd:
         30:02:de:bb:42:a8:9f:1b:cc:c4:de:a6:7d:dc:31:c8:1b:6d:
         ea:86:ac:8c:90:47:cb:eb:bf:b7:e1:1b:3c:de:33:2e:0d:ad:
         09:f2:57:15:f8:ff:33:30:b3:7e:58:86:62:b8:a2:e2:4a:16:
         4e:ca:7b:97:24:19:f4:73:93:a8:73:b9:e0:48:df:c1:0f:3f:
         ce:66:b4:45:29:4f:5f:e7:0c:b6:32:fa:07:42:ac:ab:7b:16:
         8f:8c:a2:0a:a9:19:cb:d5:1e:d4:fe:21:78:60:91:e1:fb:84:
         1e:11:71:7d:25:45:49:b8:41:95:b6:f3:45:af:50:fd:a0:5b:
         cc:e8:60:ac:2f:89:6b:d2:14:97:2d:a2:4b:72:39:70:9f:a3:
         b2:f2:bc:08:20:0b:2e:44:94:d2:16:8b:0d:46:e2:94:b0:80:
         5d:46:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:09 2026 by rpki-client