Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File:                     MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier:          ACcqiF8y2KjSZiQRcXnYUUWT63L7u6nasgMu8NydKxU=
Subject key identifier:   E0:C9:D8:A3:F1:09:86:67:DA:D8:24:90:93:9B:D1:40:3B:6C:E6:7F
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer:       /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number:          59
Signing time:             Wed 25 Mar 2026 07:25:44 +0000
Manifest this update:     Wed 25 Mar 2026 07:25:44 +0000
Manifest next update:     Wed 01 Apr 2026 07:25:44 +0000
Files and hashes:         1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: LtsdYHEQ+m5Peun/7FR89piPwQet4nlAeBECJwktBTs=)
                          2: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
                          3: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
                          rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
        Validity
            Not Before: Mar 25 07:25:44 2026 GMT
            Not After : Apr  1 07:25:44 2026 GMT
        Subject: CN=69c38df8-51c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:93:cc:2e:d2:e7:45:5e:cb:cf:a3:c4:e0:
                    f8:2e:5e:f8:04:e2:44:53:a5:9b:90:ff:35:00:69:
                    ef:1b:ea:bd:ce:2f:fb:b7:82:28:10:56:22:e4:e7:
                    3d:56:57:fc:83:5f:e6:04:b1:6f:ae:16:8e:44:2e:
                    7c:8a:69:88:19:9d:63:04:31:29:e0:8c:14:1b:f9:
                    55:1c:88:88:b4:9f:7f:c1:28:e8:14:78:39:11:0a:
                    0c:65:5a:e4:cc:2f:62:ba:9d:77:be:df:60:88:05:
                    41:d8:55:b2:c5:51:cb:b1:ab:e1:08:b4:b8:53:83:
                    9c:bc:48:36:68:aa:9d:c1:17:41:5c:60:dc:6e:c8:
                    d2:03:4f:cb:1d:35:c0:a6:5f:dd:de:c2:22:3d:3e:
                    4b:49:b8:fb:32:a7:79:bf:bc:c6:52:8a:59:af:b2:
                    9a:9d:ee:5f:64:a7:05:63:92:4d:8e:9f:83:54:08:
                    27:16:7e:ae:1f:cb:8b:b6:96:91:67:ab:34:7f:03:
                    6a:70:95:92:9c:65:90:27:8c:5a:22:cd:7a:95:50:
                    93:b2:a1:7b:8a:e6:b0:c5:11:55:8f:c9:96:7e:f5:
                    f3:07:f1:9c:99:82:b4:0e:d7:0c:a1:1c:28:14:09:
                    2e:51:e6:67:57:73:c1:79:76:b6:de:7b:b0:28:68:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:D8:A3:F1:09:86:67:DA:D8:24:90:93:9B:D1:40:3B:6C:E6:7F
            X509v3 Authority Key Identifier:
                keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ea:c0:51:17:c2:64:72:28:a4:50:46:8c:54:d0:e6:49:c1:
         66:37:ba:fa:7d:c5:46:1d:8b:1c:7c:53:75:66:d8:79:9e:2a:
         a0:d4:01:25:0b:23:a8:0d:3e:25:55:e6:63:30:cd:06:fa:cc:
         90:ba:33:44:8f:3c:03:85:75:8c:57:bd:e6:81:10:38:d3:92:
         36:da:87:29:07:40:3f:00:45:5c:aa:d6:5c:4f:4b:e1:f5:1d:
         04:2a:69:2f:0d:92:31:a9:f7:f4:c0:da:dc:28:c1:69:46:d1:
         f7:63:e4:cc:25:4a:de:50:a8:36:c7:69:f6:70:d4:81:09:31:
         b1:27:28:81:27:3a:28:ec:42:87:58:92:0d:1c:3e:f0:1a:20:
         1d:59:42:aa:7b:43:1e:aa:32:6d:43:73:67:f2:b7:26:73:92:
         02:f5:3b:c9:8f:a7:f5:91:a0:6c:3c:d3:ee:72:0a:02:06:4b:
         38:7b:50:40:a1:19:04:1a:5f:41:37:c4:f0:70:dd:8f:d6:3b:
         53:7c:18:57:7e:d7:af:3d:7e:1e:d3:18:f1:7e:d2:4e:8a:91:
         ad:3f:2d:7a:5c:ff:7b:91:e5:18:a3:03:69:1b:fe:c3:45:59:
         e0:bd:da:1e:ab:23:72:e8:4c:35:25:fb:b3:f8:23:20:6a:b7:
         3f:bc:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:33 2026 by rpki-client