Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
File:                     MUIxLklxwu35BoX7-ycBqtETRho.mft (raw, json)
Hash identifier:          ObQQbTQX1kPGsGYP3GUZAcGp+nLsloB8qiQKkAbKZQ8=
Subject key identifier:   93:24:7C:25:68:3E:99:B7:ED:91:96:89:CB:CF:24:24:88:3F:75:13
Authority key identifier: 31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Certificate issuer:       /CN=A91F0500/serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
Manifest number:          20
Signing time:             Mon 27 Jul 2026 11:16:16 +0000
Manifest this update:     Mon 27 Jul 2026 11:16:15 +0000
Manifest next update:     Mon 03 Aug 2026 11:16:15 +0000
Files and hashes:         1: MUIxLklxwu35BoX7-ycBqtETRho.crl (hash: dTefhQX4BRI5snYuKBJI6gLhBSfz1ZB+rzCi2rPEUf8=)
                          2: 4A1C3B3E583911F1803EAD1AB0833773.roa (hash: U73r8bNjOpORwGTwTGq9EMOQxt2BgsG5nN01tCAPjcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
                          rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
        Validity
            Not Before: Jul 27 11:16:15 2026 GMT
            Not After : Aug  3 11:16:15 2026 GMT
        Subject: CN=6a673e00-b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:38:4c:6d:9e:41:9b:a1:1d:a9:f0:67:92:
                    34:2a:f6:47:e1:4d:9a:a1:89:33:8f:5a:3c:fe:1c:
                    bb:63:06:e6:e8:9c:ef:54:cd:dc:fd:23:b2:3c:9a:
                    c3:44:5f:b5:81:94:d4:20:ad:c4:ce:11:e8:3b:2e:
                    e4:2a:28:38:3f:62:bd:bf:d7:c5:ad:12:2c:60:69:
                    98:b0:82:76:3e:40:85:d8:1d:b9:0f:03:a4:b7:23:
                    37:8e:7e:f3:4d:c7:a8:79:ea:53:45:2f:3c:b3:94:
                    93:bc:a6:40:9e:e4:de:e9:da:90:33:0d:35:77:65:
                    eb:21:2d:74:f1:65:92:43:a0:bc:49:e4:8a:30:7c:
                    9d:57:2f:e6:8f:92:94:54:2b:13:a0:8d:c0:32:e5:
                    17:83:c2:75:f4:0c:03:40:65:32:28:72:2c:7f:49:
                    1d:7c:d5:bd:8c:35:d6:22:17:e7:ae:e5:04:5d:17:
                    43:ac:79:27:fe:18:54:48:50:40:57:a6:2a:3b:e9:
                    4e:20:75:60:36:b6:87:62:3b:2e:d8:2e:79:46:b3:
                    5c:55:9f:f9:4f:6b:3c:d2:5b:00:05:37:cb:9e:4a:
                    78:e6:b0:dd:ff:c2:29:32:af:55:77:76:1a:7e:2c:
                    fd:d7:3c:f9:8c:f0:23:e9:bf:b4:55:84:c3:c6:82:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:7C:25:68:3E:99:B7:ED:91:96:89:CB:CF:24:24:88:3F:75:13
            X509v3 Authority Key Identifier:
                keyid:31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:4a:f0:4f:cf:75:3b:5a:25:fc:d7:57:4f:f6:4c:d4:be:
         fb:57:48:2d:05:ad:83:5e:78:ca:44:3a:eb:6c:a0:0e:26:c4:
         39:5c:42:f2:38:79:9b:19:c6:90:4f:31:5a:3d:1a:9e:98:b8:
         9c:ba:5e:99:a9:35:24:18:54:a8:06:2c:e5:1d:39:89:5b:60:
         7a:c9:0c:c5:00:85:50:18:d1:e7:5f:ac:84:18:1a:07:c0:7c:
         5e:23:19:54:6c:fe:42:43:47:9e:24:49:c5:b4:27:64:5c:e4:
         3b:bb:e1:ac:c1:1e:c0:08:fb:9f:2f:f7:fd:99:b1:95:66:6d:
         5c:2d:da:db:65:7b:0d:3d:94:6f:09:3e:e2:78:c1:67:21:b1:
         cc:dc:21:91:cb:a3:a7:e7:87:2a:38:ec:65:7c:16:2a:a9:ca:
         91:b6:41:d2:20:aa:c4:5a:e7:0d:9b:55:53:4b:db:e9:cb:0d:
         c4:85:ca:61:5c:87:59:3c:7b:1c:74:6a:74:ee:02:fc:f9:68:
         d1:5b:c1:1a:70:6f:82:5f:30:97:d6:65:a1:85:07:7d:12:38:
         cd:df:82:ae:34:84:40:ff:c8:45:6f:18:32:fa:80:ef:7c:68:
         39:81:a3:a2:aa:bc:45:3f:4f:a9:9f:56:09:02:71:42:f0:6b:
         0c:ca:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:21 2026 by rpki-client