Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
File:                     MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json)
Hash identifier:          Wj28gd6AWgMepBzOKBbGTzo6RG8uEe3z9dEHtMFut9I=
Subject key identifier:   4E:A8:CC:D6:FF:33:2F:CB:ED:CF:61:F4:DE:6B:9F:47:BF:31:3D:E7
Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
Certificate issuer:       /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Certificate serial:       0554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
Manifest number:          0547
Signing time:             Mon 27 Jul 2026 00:25:28 +0000
Manifest this update:     Mon 27 Jul 2026 00:25:27 +0000
Manifest next update:     Mon 03 Aug 2026 00:25:27 +0000
Files and hashes:         1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: K6eSChYYcUTHJ1nuNaHNZVfctquKpMR29VLp60/2Ki0=)
                          2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: qt4s9HBAeJcBPk0Llq0F/Y+xml+HCsgruEcd0L0uDYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
                          rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
        Validity
            Not Before: Jul 27 00:25:27 2026 GMT
            Not After : Aug  3 00:25:27 2026 GMT
        Subject: CN=6a66a577-9bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:34:41:70:ed:db:17:7f:a8:9a:b5:5c:94:
                    39:a9:6b:fe:c4:87:a6:3c:a4:e2:a2:b6:dd:02:66:
                    bc:3b:81:d8:7e:e3:31:24:ec:ad:e3:78:9f:d5:d0:
                    f7:6e:37:51:e6:2c:b9:ad:9f:fa:7a:73:d9:36:bf:
                    a6:61:36:0c:07:f3:e3:0d:e7:9f:0a:60:6c:7c:fb:
                    ce:4d:f0:8c:77:e2:58:fb:54:09:03:63:4f:5d:8e:
                    2f:b3:db:45:84:e0:8a:91:63:52:4b:6a:37:f5:12:
                    74:bc:7d:c8:6c:3e:a4:2b:40:00:2c:92:ff:46:73:
                    6d:68:87:65:8b:da:c2:68:d2:32:79:6d:5c:cb:fc:
                    68:a2:12:4d:12:74:0e:9b:f0:64:71:4d:07:9d:b4:
                    3f:c5:22:cf:dc:e8:ba:56:38:b8:99:6b:1d:30:1c:
                    af:77:13:33:e5:b6:11:0a:a8:d0:e6:ae:ff:f0:a9:
                    ad:cd:a7:0a:f8:11:06:8d:a6:bc:f4:69:6e:7b:c1:
                    46:27:a4:1a:c1:6c:08:fe:3a:f7:56:20:3f:7c:94:
                    f2:88:51:68:fc:43:2c:bf:8f:52:7c:9d:f3:e7:9f:
                    94:40:87:e8:1a:ba:56:f8:97:c7:a2:0f:76:a0:84:
                    56:a8:24:31:6d:e1:54:4b:b7:cf:49:aa:37:57:b1:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A8:CC:D6:FF:33:2F:CB:ED:CF:61:F4:DE:6B:9F:47:BF:31:3D:E7
            X509v3 Authority Key Identifier:
                keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:78:ed:7e:3f:94:01:84:d0:98:c4:f6:c3:e4:36:15:2a:48:
         f9:46:9a:b0:86:53:d6:3e:a6:7b:02:fc:ee:e4:c3:88:c5:ed:
         e3:0c:80:16:c5:21:6d:27:c8:24:03:9a:23:b6:54:09:09:de:
         8e:06:80:9a:c1:ce:98:60:c3:0d:3a:22:fb:61:ed:12:a0:32:
         15:28:fb:87:f4:97:7b:d3:47:db:67:01:ff:e2:72:88:51:f9:
         29:e1:fc:06:d5:9d:9f:a4:fc:29:fa:eb:a1:f0:73:2b:c0:3b:
         f8:b0:73:44:e5:f3:e6:3d:0a:4c:e5:b8:29:19:24:89:56:ba:
         b2:d7:dd:0c:ae:9c:37:88:37:4a:23:dc:09:54:25:63:fc:51:
         cf:ad:cb:6e:18:0c:fd:89:91:41:0f:7f:47:d8:67:1a:c0:78:
         70:c2:fd:4b:da:08:34:c0:52:29:26:7b:0c:6a:f8:f8:78:1e:
         76:5d:74:2f:43:5d:9a:68:1d:fc:4d:e4:97:b3:71:37:89:c8:
         40:65:55:f6:de:f0:d4:70:67:9f:51:45:d2:de:dc:e6:b6:37:
         46:54:f0:94:4c:6e:f4:3d:06:30:1c:15:7a:a7:09:e1:99:33:
         a2:4b:7e:4d:10:c0:75:82:14:40:b5:11:26:22:62:08:cd:76:
         f9:18:ce:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1
QkZCQTgzNjkwHhcNMjYwNzI3MDAyNTI3WhcNMjYwODAzMDAyNTI3WjAYMRYwFAYD
VQQDEw02YTY2YTU3Ny05YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxE0QXDt2xd/qJq1XJQ5qWv+xIemPKTiorbdAma8O4HYfuMxJOyt43if1dD3
bjdR5iy5rZ/6enPZNr+mYTYMB/PjDeefCmBsfPvOTfCMd+JY+1QJA2NPXY4vs9tF
hOCKkWNSS2o39RJ0vH3IbD6kK0AALJL/RnNtaIdli9rCaNIyeW1cy/xoohJNEnQO
m/BkcU0HnbQ/xSLP3Oi6Vji4mWsdMByvdxMz5bYRCqjQ5q7/8KmtzacK+BEGjaa8
9Glue8FGJ6QawWwI/jr3ViA/fJTyiFFo/EMsv49SfJ3z55+UQIfoGrpW+JfHog92
oIRWqCQxbeFUS7fPSao3V7FoYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6ozNb/
My/L7c9h9N5rn0e/MT3nMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC
NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG
R2hxRExOZmQ1QmRiLTZnMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdHjtfj+UAYTQmMT2w+Q2FSpI+UaasIZT1j6mewL87uTDiMXt4wyAFsUhbSfI
JAOaI7ZUCQnejgaAmsHOmGDDDToi+2HtEqAyFSj7h/SXe9NH22cB/+JyiFH5KeH8
BtWdn6T8KfrrofBzK8A7+LBzROXz5j0KTOW4KRkkiVa6stfdDK6cN4g3SiPcCVQl
Y/xRz63LbhgM/YmRQQ9/R9hnGsB4cML9S9oINMBSKSZ7DGr4+Hgedl10L0Ndmmgd
/E3kl7NxN4nIQGVV9t7w1HBnn1FF0t7c5rY3RlTwlExu9D0GMBwVeqcJ4Zkzokt+
TRDAdYIUQLURJiJiCM12+RjOsA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:25 2026 by rpki-client