Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
File:                     MUIxLklxwu35BoX7-ycBqtETRho.mft (raw, json)
Hash identifier:          f/x8xMPzt8oxwpiudXa3Ocptm4XUq7yi57l/leuQA3A=
Subject key identifier:   1C:57:B1:4A:D8:36:5C:54:7F:D6:0A:70:8A:B4:04:CC:22:9D:8E:A2
Authority key identifier: 31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Certificate issuer:       /CN=A91F0500/serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
Manifest number:          3D
Signing time:             Mon 21 Sep 2026 08:30:50 +0000
Manifest this update:     Mon 21 Sep 2026 08:30:50 +0000
Manifest next update:     Mon 28 Sep 2026 08:30:50 +0000
Files and hashes:         1: MUIxLklxwu35BoX7-ycBqtETRho.crl (hash: QpZtiodYIZ5Q/JOj/UA/k8swItgoB5YrD6T8IF+OazY=)
                          2: 4A1C3B3E583911F1803EAD1AB0833773.roa (hash: U73r8bNjOpORwGTwTGq9EMOQxt2BgsG5nN01tCAPjcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
                          rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
        Validity
            Not Before: Sep 21 08:30:50 2026 GMT
            Not After : Sep 28 08:30:50 2026 GMT
        Subject: CN=6ab0eb3a-fe10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:bf:47:87:08:3a:da:9f:f2:cc:bd:8b:a3:
                    10:fa:85:1b:25:22:e1:1e:59:0d:b6:25:4f:a1:61:
                    0e:dd:a6:26:86:77:77:17:68:f1:15:60:01:1a:50:
                    4d:0f:7f:3d:0e:86:1b:dc:ea:06:6d:52:59:c2:3e:
                    b7:dd:c7:fe:c6:ac:1b:38:82:be:af:11:64:a1:79:
                    be:69:11:98:ba:38:63:cf:f2:fd:be:21:11:dd:33:
                    9d:9d:29:07:6d:0e:1e:ad:89:37:81:04:16:0f:66:
                    47:44:43:dd:cc:98:04:d5:e7:8e:41:0d:c8:b9:dc:
                    aa:d4:c9:1a:21:9b:e1:8d:50:5a:09:44:87:7c:86:
                    e1:af:53:1b:b5:69:91:74:e7:cf:fb:c8:a2:ef:80:
                    41:0f:e4:c3:33:ab:7c:d4:50:7c:24:6a:86:8d:76:
                    76:08:ed:ea:be:d0:95:82:02:ed:0f:5e:2e:5d:9a:
                    84:45:f6:a8:c3:29:d0:fa:ad:e8:a4:22:f6:f4:4d:
                    26:57:9b:64:c8:23:6f:85:ae:19:cb:b0:ba:b1:bd:
                    36:d2:ad:f6:1f:dd:a2:84:39:8d:87:50:de:70:40:
                    8d:10:99:fe:9b:30:be:9b:29:54:73:75:62:21:51:
                    ae:3a:f2:2f:e8:d9:92:3a:0f:3e:8a:5f:03:f8:c5:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:57:B1:4A:D8:36:5C:54:7F:D6:0A:70:8A:B4:04:CC:22:9D:8E:A2
            X509v3 Authority Key Identifier:
                keyid:31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:38:bf:de:b0:f1:bd:76:56:04:16:cc:66:4b:52:60:09:
         0c:c0:c8:b4:0a:8c:6f:6c:f6:a2:d9:62:04:b4:9d:0f:2f:50:
         f4:06:69:57:94:f8:c9:b8:a1:55:ba:d4:3e:9b:63:93:ed:c7:
         2a:44:63:b2:df:b2:ec:37:ac:f6:dc:cd:af:7f:9a:03:18:43:
         e3:fe:d6:a7:b6:29:4b:be:79:4b:26:ea:d7:dc:3c:f3:f0:00:
         42:c4:7d:81:2e:3b:45:cc:ff:ed:e2:67:fa:cb:63:a9:e1:4e:
         4d:3a:bd:cb:f9:a1:74:93:92:93:3b:17:a5:06:f1:5e:60:61:
         e8:06:6c:c1:ee:56:92:73:67:5a:bf:b6:44:9f:da:c1:14:a4:
         bf:a0:7a:f7:a9:d7:48:ce:fb:71:d2:a9:9a:1f:31:4f:fe:e2:
         12:85:02:6a:35:74:ff:4e:b0:45:ed:71:d0:bc:b0:60:c8:c8:
         c4:4a:f1:e0:6a:0b:45:13:31:64:b8:27:96:c8:80:0e:89:3e:
         a2:84:2f:89:a3:34:22:8c:ed:ca:48:51:6a:dc:45:e4:be:88:
         91:a4:5f:8c:22:41:e6:f2:c4:b6:35:be:c8:4e:c3:ca:e2:fa:
         d3:b8:6b:2b:dc:8a:47:8d:47:7e:29:67:52:1f:cc:fe:ed:fb:
         9f:f4:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:39:22 2026 by rpki-client