Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File:                     MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier:          ocnNI4xHBP9IRRw4J2YCNb5ixKwCCxMsyXB81SP19rU=
Subject key identifier:   CB:E2:50:56:CA:A3:6D:6D:20:B2:01:B1:60:9E:C5:FE:26:3E:C3:21
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer:       /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial:       1EA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number:          1E78
Signing time:             Tue 28 Jul 2026 16:09:38 +0000
Manifest this update:     Tue 28 Jul 2026 16:09:38 +0000
Manifest next update:     Tue 04 Aug 2026 16:09:38 +0000
Files and hashes:         1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: /zFieeonYxRhcchrmvf42fKvDhXwwc9+sM7Gfm+qqYM=)
                          2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=)
                          3: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=)
                          4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7846 (0x1ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
        Validity
            Not Before: Jul 28 16:09:38 2026 GMT
            Not After : Aug  4 16:09:38 2026 GMT
        Subject: CN=6a68d442-69ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:d4:b3:1e:ed:a3:a5:cb:81:f9:fb:89:45:
                    27:f6:07:60:ba:1f:7b:66:15:07:96:63:a8:b4:09:
                    2d:55:8a:47:49:04:66:c9:74:51:3f:b5:97:4a:37:
                    ea:3b:fd:25:35:57:78:01:1a:d8:b6:59:24:dd:31:
                    c1:0d:a5:81:3c:2c:cc:8d:df:05:3f:9a:d1:d8:0a:
                    3b:52:fd:96:60:52:0d:39:97:29:79:42:e7:e2:9f:
                    2d:d3:13:b6:20:c1:4f:67:cf:9d:b0:9b:89:d0:36:
                    d7:c4:15:9a:11:52:bf:64:1c:33:c3:0f:ad:72:20:
                    02:2d:d7:1d:1d:92:35:b4:4e:31:f1:83:a3:93:49:
                    2e:49:b0:d9:ae:13:bb:6a:19:90:6f:2d:77:45:c3:
                    65:90:5c:6c:41:b0:b8:26:ba:2d:74:a1:3a:1f:d4:
                    12:3f:a0:94:2c:59:3e:d3:c1:71:92:f2:77:e9:c8:
                    35:d6:7a:f1:8c:50:7a:1a:58:de:92:f0:ab:12:d0:
                    de:1d:17:de:cd:51:6b:46:ee:d3:53:1f:6d:d2:39:
                    97:14:07:53:32:29:a3:2c:98:84:b3:bb:da:7f:5d:
                    5a:6e:a5:ab:50:cc:2c:e3:4f:0c:cb:93:ab:43:75:
                    ff:84:18:12:22:75:8e:f0:b8:51:75:76:42:9d:94:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:50:56:CA:A3:6D:6D:20:B2:01:B1:60:9E:C5:FE:26:3E:C3:21
            X509v3 Authority Key Identifier:
                keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:25:7c:c3:c2:61:ac:da:aa:fd:3c:40:67:5f:9d:50:03:
         b6:1f:6f:13:09:14:7f:77:26:11:3f:7f:bc:d9:5a:36:5f:76:
         61:48:59:e6:3e:ef:a3:22:66:40:76:83:92:c7:17:7c:21:1d:
         55:84:f2:32:e8:c7:e0:2c:b2:07:c0:d5:59:e0:21:a6:ce:09:
         d7:6d:b4:44:ae:37:9d:d7:ac:57:3e:bc:4f:cc:5d:99:a3:3d:
         31:ac:50:7c:3a:ac:dd:ff:d2:52:c1:29:19:7e:6e:a9:1a:2b:
         03:f7:49:e2:6a:1f:d9:c5:8b:4b:a4:c9:df:69:3f:8b:97:70:
         5c:87:e4:a6:2e:50:23:de:21:8d:18:a7:a2:81:ca:01:dc:c5:
         c8:a9:79:87:58:99:36:d1:5e:d9:3a:bd:79:9d:0a:e5:57:84:
         10:61:7f:38:00:93:aa:d0:68:d5:0c:7a:61:a9:db:8a:02:5a:
         86:ca:26:ea:f2:12:78:ba:f3:6f:ee:3b:0d:7d:9e:a0:cd:e9:
         91:ba:5a:6a:5b:e1:2d:45:7d:60:b8:25:e4:7e:96:58:26:86:
         26:a4:57:27:2b:f5:35:e2:23:c5:3f:27:8d:9f:4c:ff:92:6f:
         4b:41:d3:17:90:fa:5b:73:20:8b:df:c7:2b:4c:ec:c7:73:c1:
         32:72:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:36 2026 by rpki-client