Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
File:                     muAi3ZD6yvK8XHN26KhM5QUeiWo.mft (raw, json)
Hash identifier:          UsWg8+edL/Ry1Kx1J+y7W+MxVKWpykB95fp9NIxAh4w=
Subject key identifier:   28:77:F0:60:A7:23:CA:F4:FC:DE:A7:28:16:25:03:E1:5F:F4:CD:45
Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Certificate issuer:       /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Certificate serial:       07E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
Manifest number:          07DC
Signing time:             Sun 20 Sep 2026 21:14:24 +0000
Manifest this update:     Sun 20 Sep 2026 21:14:24 +0000
Manifest next update:     Sun 27 Sep 2026 21:14:24 +0000
Files and hashes:         1: muAi3ZD6yvK8XHN26KhM5QUeiWo.crl (hash: m+g+jaMnGkJtch5L/i722T+VxpuEFPUR3/mip98B+BE=)
                          2: 86A0946E3DE611F1A54E8A6D9C833773.roa (hash: ABolBpiR0euDJQImTKbKEYPpJHRmHZwRgzlkW2E+bnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl
                          rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919271C, serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
        Validity
            Not Before: Sep 20 21:14:24 2026 GMT
            Not After : Sep 27 21:14:24 2026 GMT
        Subject: CN=6ab04cb0-b349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:a4:33:f8:e2:2b:56:c1:0f:dc:5a:70:43:
                    53:8e:16:a9:c6:2c:95:ad:ba:3c:82:a4:43:b8:9f:
                    51:a1:c0:ad:5f:fd:64:63:52:4e:4d:72:69:de:95:
                    5e:30:9e:5f:1f:96:82:38:cf:ae:5e:ff:90:b6:dd:
                    a9:28:46:08:08:47:c3:5b:84:39:b2:ee:6b:14:97:
                    60:f9:20:fe:c5:88:26:d1:70:c6:60:5b:83:b6:11:
                    82:fc:da:67:78:01:44:e0:91:1d:9d:94:3a:aa:e3:
                    cf:a1:00:6f:83:ef:fc:a4:0b:b2:51:f3:68:d6:4d:
                    2b:89:ff:d8:10:ed:95:08:e4:07:30:d1:df:ca:f2:
                    f1:57:eb:4a:4c:20:4c:19:9c:80:03:29:51:24:f4:
                    38:55:b2:34:65:ec:f0:9b:90:cf:63:fc:c6:b1:55:
                    a6:6c:28:b7:d3:2f:cc:00:77:a4:27:6b:8f:d2:a4:
                    d7:b4:3b:98:a4:44:42:48:d4:de:2d:73:17:a4:8f:
                    93:ec:a9:5f:64:0c:af:b3:f6:b1:f6:29:86:67:e8:
                    d8:35:7c:bc:ad:49:24:60:d5:02:ac:dd:59:79:42:
                    1b:db:26:02:8b:4c:bc:18:ba:c0:be:e9:43:c8:c1:
                    33:b5:13:4d:6c:6d:37:b1:bc:11:34:45:46:b0:51:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:77:F0:60:A7:23:CA:F4:FC:DE:A7:28:16:25:03:E1:5F:F4:CD:45
            X509v3 Authority Key Identifier:
                keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:68:e5:b7:57:ba:4f:c2:b6:f6:fe:17:46:57:b4:03:34:5a:
         b5:79:1e:11:41:ee:53:a7:60:d1:c6:e4:58:c2:03:53:29:57:
         68:05:c1:a2:fa:4a:96:7f:6a:95:e6:e3:71:80:c4:76:9c:70:
         78:b3:22:97:a6:70:c2:c3:99:51:68:88:54:ea:e6:9a:0f:0e:
         1b:84:20:b3:ad:07:b2:4f:97:bb:2f:d3:e8:5b:a5:4b:4f:12:
         c5:60:ed:3a:04:cb:84:59:e9:74:66:a4:2c:da:4a:06:d6:25:
         98:b7:e6:8c:c0:d5:86:f0:a3:8e:0a:c1:1a:f3:26:d9:2e:93:
         bb:ba:33:4e:2c:ae:53:7e:4f:be:03:e3:53:94:e7:0b:2f:95:
         e8:b7:79:ee:38:e9:63:77:c4:61:d7:85:74:ea:3c:44:7e:47:
         20:77:8a:8d:4c:5e:ee:3d:34:e2:b8:4c:24:18:17:66:9f:65:
         25:03:ec:6b:2a:c8:19:d8:76:ae:ec:d1:3d:cf:91:2d:9e:5c:
         f0:b1:88:f4:2d:37:3a:73:38:a8:84:64:3a:a1:ef:f6:2d:aa:
         45:8b:ea:f7:50:d1:2c:c4:39:cf:b0:cf:41:e1:fb:54:7e:bb:
         4a:ef:ed:40:7c:85:cd:e5:5d:30:18:b4:28:a8:71:ee:2d:30:
         19:d4:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:11 2026 by rpki-client