Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File:                     MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier:          akVXZoEQ0b4pU+XYVoir0Sp9Xomu8fRL2uEfwCXY+eU=
Subject key identifier:   04:27:ED:E0:96:0E:4B:E1:B3:C4:1B:42:53:DB:49:E7:41:82:53:33
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 07:08:01 +0000
Manifest this update:     Mon 21 Sep 2026 07:08:01 +0000
Manifest next update:     Mon 28 Sep 2026 07:08:01 +0000
Files and hashes:         1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: vwZB1Tefw6JWfyvbuyq6BL+kWalbjix2Qu9/yZ3pJZc=)
                          2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
                          3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Sep 21 07:08:01 2026 GMT
            Not After : Sep 28 07:08:01 2026 GMT
        Subject: CN=6ab0d7d1-0ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:09:9e:db:f8:63:c7:4e:e5:75:85:c1:2e:
                    6f:e2:e0:44:bd:4f:dd:d1:dc:8d:70:98:6a:17:bd:
                    c2:e2:3e:06:55:54:f7:03:d3:3c:80:cf:84:8e:65:
                    de:85:0c:74:c1:e6:e8:39:83:83:ca:e1:bb:9a:50:
                    c8:52:aa:18:f7:63:32:18:f1:19:99:dd:a8:74:f1:
                    b2:ad:ff:45:da:93:63:fa:ee:a1:d0:66:4e:58:1a:
                    90:6d:11:d7:97:5e:c9:ea:e5:54:f6:79:a0:2d:e0:
                    c3:da:6b:de:8e:6f:1e:a3:0b:3f:cc:ff:99:aa:4d:
                    c6:6f:52:77:3c:37:09:7d:20:53:26:6d:73:ac:54:
                    83:52:74:fa:46:f1:a7:f3:79:ba:f6:f8:19:93:95:
                    04:5c:68:a2:ca:48:2e:a9:f1:9b:ee:4a:e2:63:0a:
                    3b:03:d2:33:bf:30:5f:14:ae:f3:a2:11:8b:08:35:
                    ee:c8:5c:ce:8c:36:05:57:74:fb:58:47:6b:af:03:
                    f8:74:27:6d:bf:8b:10:da:87:ed:8b:f3:ed:20:cd:
                    72:ad:c5:27:64:d2:37:8e:c4:9d:cd:71:ca:78:72:
                    ba:fe:cc:30:a8:3c:1c:66:5c:d4:5d:43:6d:de:c2:
                    a5:b9:78:e8:61:98:5e:33:97:34:ea:58:1e:e3:21:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:27:ED:E0:96:0E:4B:E1:B3:C4:1B:42:53:DB:49:E7:41:82:53:33
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:43:39:ca:07:a2:25:72:ab:aa:0d:d6:a5:b6:4f:8e:df:27:
         4b:da:0d:a0:01:0a:21:19:f9:61:d0:38:5e:e3:ec:cd:06:2b:
         1b:dd:26:09:47:cb:67:e7:ad:d9:6f:7c:28:ce:df:8f:6d:b5:
         de:de:68:58:a7:d0:94:81:f8:f5:d4:41:de:4f:71:42:cd:5c:
         69:47:24:bc:c0:ae:dc:26:06:bb:99:0c:fc:cc:10:73:d1:1c:
         71:b1:7e:cd:e3:36:2a:e1:4c:69:12:7c:09:f9:f7:15:fc:00:
         2f:6a:3f:4b:98:ba:77:4e:e1:03:c1:a8:b6:8d:ea:5f:03:0f:
         d8:b5:9e:fd:31:a1:9f:90:bc:04:b5:ea:9f:39:d9:2a:68:fc:
         64:33:68:9d:f3:1b:d6:d6:3e:ad:a7:c2:93:05:d8:8c:b9:d5:
         41:93:18:e9:ef:12:76:26:ea:69:44:7f:d6:77:a0:b1:4f:43:
         de:46:15:23:ff:31:9f:d4:39:f9:bb:c3:2d:4a:d4:66:0f:b6:
         d3:e2:97:41:c4:21:75:57:57:7c:9d:94:10:25:53:ab:bc:bb:
         52:41:de:b3:e1:d0:87:db:e8:f3:b7:a2:15:82:9b:84:93:33:
         8a:13:ea:5c:3c:f1:45:91:b5:cd:95:d7:b7:b3:3b:6b:b0:34:
         a7:a7:7b:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGRUUxMTAvBgNVBAUTKDMxNDJBMUE4NjFEOUE0NEE5MzI3RjA2NjE5RkVDOEE2
QTk2MkI0MjMwHhcNMjYwOTIxMDcwODAxWhcNMjYwOTI4MDcwODAxWjAYMRYwFAYD
VQQDEw02YWIwZDdkMS0wZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm5sJntv4Y8dO5XWFwS5v4uBEvU/d0dyNcJhqF73C4j4GVVT3A9M8gM+EjmXe
hQx0weboOYODyuG7mlDIUqoY92MyGPEZmd2odPGyrf9F2pNj+u6h0GZOWBqQbRHX
l17J6uVU9nmgLeDD2mvejm8eows/zP+Zqk3Gb1J3PDcJfSBTJm1zrFSDUnT6RvGn
83m69vgZk5UEXGiiykguqfGb7kriYwo7A9IzvzBfFK7zohGLCDXuyFzOjDYFV3T7
WEdrrwP4dCdtv4sQ2ofti/PtIM1yrcUnZNI3jsSdzXHKeHK6/swwqDwcZlzUXUNt
3sKluXjoYZheM5c06lge4yGDJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQn7eCW
Dkvhs8QbQlPbSedBglMzMB8GA1UdIwQYMBaAFDFCoahh2aRKkyfwZhn+yKapYrQj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZFRS8wRjlFOTFGOEIz
RDExMUYwODZDMjJENUFDNEY5QUUwMi9NVUtocUdIWnBFcVRKX0JtR2Y3SXBxbGl0
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01VS2hxR0hacEVxVEpfQm1HZjdJcHFsaXRDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUZFRS8wRjlFOTFGOEIzRDExMUYwODZDMjJENUFDNEY5QUUwMi9NVUtocUdIWnBF
cVRKX0JtR2Y3SXBxbGl0Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMkM5ygeiJXKrqg3WpbZPjt8nS9oNoAEKIRn5YdA4XuPszQYrG90mCUfLZ+et
2W98KM7fj2213t5oWKfQlIH49dRB3k9xQs1caUckvMCu3CYGu5kM/MwQc9EccbF+
zeM2KuFMaRJ8Cfn3FfwAL2o/S5i6d07hA8Goto3qXwMP2LWe/TGhn5C8BLXqnznZ
Kmj8ZDNonfMb1tY+rafCkwXYjLnVQZMY6e8SdibqaUR/1negsU9D3kYVI/8xn9Q5
+bvDLUrUZg+20+KXQcQhdVdXfJ2UECVTq7y7UkHes+HQh9vo87eiFYKbhJMzihPq
XDzxRZG1zZXXt7M7a7A0p6d7TQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:16:12 2026 by rpki-client