Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          dvVqbO6vllqBmw8EeyB7nYffGaYbSrbgvB8DnqjXURI=
Subject key identifier:   E5:09:DB:5C:27:5C:82:69:86:44:A3:AA:D8:F5:18:B0:0E:CC:D5:08
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       154D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          1547
Signing time:             Wed 22 Jul 2026 16:54:15 +0000
Manifest this update:     Wed 22 Jul 2026 16:54:15 +0000
Manifest next update:     Wed 29 Jul 2026 16:54:15 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: gShDqpkmRyLt7E61ylyX9OwZ8BMCZOouDtgdgHM1en8=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: F+xAnb9Dp/1DmyNH/5geMeagilcYVoZK5t/d04k7W6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5453 (0x154d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Jul 22 16:54:15 2026 GMT
            Not After : Jul 29 16:54:15 2026 GMT
        Subject: CN=6a60f5b7-2cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:08:e7:dc:ac:ab:d2:ea:46:fa:59:ee:49:
                    58:a8:5e:48:1c:55:6f:12:8a:7d:29:91:cc:d0:3b:
                    02:95:0b:ad:c2:a3:7b:c9:70:b1:4e:2b:13:63:b5:
                    ce:e4:93:69:8f:03:35:16:2f:2c:0a:8e:9f:23:43:
                    9b:2a:32:8f:0d:06:12:82:14:e9:c1:f1:91:42:75:
                    c7:3a:7a:e3:b9:dd:47:32:a9:8e:1c:61:d5:89:f1:
                    4c:4c:6f:74:b1:d3:53:21:92:e7:0e:32:22:be:2b:
                    81:d3:d0:dd:37:6b:49:15:fa:bd:43:a5:53:60:25:
                    7f:33:34:e5:79:24:6d:18:80:68:cd:78:45:0b:76:
                    f1:b8:01:8f:71:80:48:c7:e2:f4:d1:ad:13:26:bd:
                    b6:7d:aa:b0:dd:75:1f:c7:da:2f:6c:84:de:df:e1:
                    cc:95:18:52:78:8e:90:85:67:f3:01:8a:5a:c3:e7:
                    e8:97:09:97:e8:42:c9:ad:84:20:64:e5:30:57:e3:
                    50:a3:10:ba:34:41:bd:e0:72:5e:ee:7e:02:b2:c3:
                    dd:73:64:f0:97:16:9b:46:70:71:81:23:65:76:78:
                    8a:13:cb:03:68:7c:d0:aa:af:15:00:ca:e7:5c:41:
                    ce:a5:15:43:8f:be:f9:1e:cc:9e:a0:c1:39:e1:23:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:DB:5C:27:5C:82:69:86:44:A3:AA:D8:F5:18:B0:0E:CC:D5:08
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:c4:8c:23:df:f7:d7:92:ea:56:b1:b1:a4:c5:b7:98:ec:
         ba:d1:d7:0a:89:1d:56:88:2c:22:f6:3f:64:c6:ab:2b:7c:06:
         a9:4c:02:c9:81:e5:b9:60:35:83:49:51:73:c2:c7:ed:8c:d2:
         06:4e:21:be:00:47:72:cf:e9:af:b0:63:b4:22:ae:93:53:91:
         7e:11:dd:e4:92:72:7a:23:3e:90:80:f9:5e:47:ce:fe:12:08:
         63:43:c7:b8:44:19:b9:0c:1c:ec:20:8c:1e:86:a0:af:d4:08:
         b3:4f:20:25:f4:02:3c:85:32:2c:fb:80:13:ce:12:62:11:03:
         37:ed:84:d3:ac:8d:97:cb:09:2d:5f:f9:1e:62:c8:06:02:7d:
         55:24:9a:f5:e8:42:7f:ea:9b:eb:df:46:85:2a:a2:82:6f:40:
         7f:1a:c6:e2:bf:15:57:cb:28:8f:fb:5e:5f:b3:c8:9b:63:e6:
         ed:59:bc:e4:48:15:8d:e4:03:40:ca:b8:a5:89:57:4e:4d:69:
         04:f9:49:61:40:8b:31:2a:0f:96:54:b3:62:25:ec:53:fa:db:
         3e:94:34:8d:bc:4d:65:a6:f5:44:3c:ac:5f:f3:f3:05:79:ea:
         c4:50:4b:1b:df:96:0d:4a:4e:5c:af:40:37:ef:c3:dc:01:5b:
         25:56:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:12 2026 by rpki-client