Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          Vr7DarwaaFRAUsPGTpG+DxE1AtzaLkClcS83Ti53GVc=
Subject key identifier:   F2:9C:90:E9:48:81:83:74:D9:41:47:11:8C:89:72:6A:7D:A3:92:8F
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       1526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          1521
Signing time:             Tue 12 May 2026 16:49:58 +0000
Manifest this update:     Tue 12 May 2026 16:49:57 +0000
Manifest next update:     Tue 19 May 2026 16:49:57 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: dXOK0SJtl7U0WZIT73OUlUUQzMCATWmB0yBCtN0NWr8=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: WJKNo0fYbhAjCt5a3KR93LYcm+nLeCFwQ8ga/woExmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5414 (0x1526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: May 12 16:49:57 2026 GMT
            Not After : May 19 16:49:57 2026 GMT
        Subject: CN=6a035a36-e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:ff:4a:24:8e:5e:ff:67:8b:29:81:65:23:
                    a0:4c:8e:c3:a3:ea:69:83:9d:43:00:8a:e0:fc:7e:
                    98:8f:ba:b6:30:18:19:6d:e4:e3:2d:35:93:10:23:
                    47:26:3d:9e:f6:a7:6f:31:49:71:83:81:b5:ca:56:
                    cb:c1:46:7a:12:81:6a:3f:0c:a6:99:c5:f8:7c:c2:
                    03:1f:5c:4f:ec:18:cc:1f:6e:13:94:ea:68:d6:ca:
                    37:56:8b:f9:98:32:c0:f8:64:1c:09:0a:8d:27:3d:
                    21:f1:c5:f4:b9:f0:dd:53:71:ed:82:5c:44:00:9c:
                    4e:76:37:bf:f2:d0:4a:40:f7:f3:c8:2c:30:3a:f7:
                    95:a4:bd:17:20:de:6d:20:4a:33:06:4a:f9:e8:2a:
                    64:75:94:f8:d6:a0:0b:0a:31:5f:c2:70:02:e1:60:
                    19:0d:55:1e:98:a9:02:a0:a5:83:e6:4e:77:c1:8d:
                    5c:0f:2f:59:ed:f7:35:c4:0a:f0:5f:3c:4f:00:4f:
                    c7:70:8b:20:86:05:23:43:86:59:1e:7e:6d:9c:3e:
                    a1:6e:91:08:fd:8e:a9:75:48:7f:a8:a1:c3:b7:96:
                    45:41:78:9c:02:84:e6:5e:10:b4:51:23:bb:8e:ba:
                    09:1a:95:72:33:1a:08:42:f0:61:54:36:94:44:e4:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:90:E9:48:81:83:74:D9:41:47:11:8C:89:72:6A:7D:A3:92:8F
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:bc:7d:d0:8c:91:c8:7e:9a:02:44:a7:b4:a1:ae:81:ea:
         88:a9:aa:9e:a1:33:7b:bf:5b:a6:d1:87:53:7e:47:a6:f1:2b:
         82:94:26:c3:6a:89:09:59:b3:6f:9b:a8:32:89:4f:83:f3:26:
         ef:49:65:4f:7c:52:44:32:7c:46:ba:85:c8:49:98:65:45:53:
         01:14:1d:90:8c:a0:89:78:88:9c:43:1f:28:c2:84:86:1c:13:
         f2:35:5d:e6:2e:ff:3b:bb:05:81:da:09:9b:4a:2b:c4:3a:f7:
         d6:32:62:ed:30:d6:a4:ef:48:9c:2c:60:63:f8:99:4f:1a:7e:
         f1:cd:79:b2:ab:0e:06:2c:e4:a6:17:8e:b7:d1:1c:7d:6a:89:
         2e:a5:25:d6:90:10:2e:27:6c:bc:85:30:78:2a:77:3e:e2:3a:
         c9:02:2a:52:19:c9:87:f3:33:1d:69:5f:0a:7d:72:7e:a5:34:
         17:3e:1a:2b:57:b3:ea:86:98:96:cc:b7:df:0c:e9:c1:42:2d:
         41:6c:71:ff:53:2d:42:d1:c5:41:04:1b:56:74:3f:77:fe:ac:
         8d:91:e0:f1:61:0c:3f:51:1f:ac:b1:b3:52:d3:66:b3:02:b3:
         12:83:7a:b0:ad:3a:a3:aa:7a:f0:03:13:41:0f:4f:e2:e8:06:
         9b:9d:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:50 2026 by rpki-client