Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
File:                     MUIxLklxwu35BoX7-ycBqtETRho.mft (raw, json)
Hash identifier:          wNwv7RS+S+Yq9X/j65YoUrpCtmptzqr7HzjB2jVP7ew=
Subject key identifier:   FE:44:D8:3E:AF:C2:1B:07:52:86:2D:61:9B:E6:64:1F:5A:CE:6C:67
Authority key identifier: 31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Certificate issuer:       /CN=A91F0500/serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
Manifest number:          1E
Signing time:             Thu 23 Jul 2026 10:59:12 +0000
Manifest this update:     Thu 23 Jul 2026 10:59:11 +0000
Manifest next update:     Thu 30 Jul 2026 10:59:11 +0000
Files and hashes:         1: MUIxLklxwu35BoX7-ycBqtETRho.crl (hash: MhYbUiyEDwM3h9VE3WBqaww8taqHxlh32dVXXzfGYm4=)
                          2: 4A1C3B3E583911F1803EAD1AB0833773.roa (hash: U73r8bNjOpORwGTwTGq9EMOQxt2BgsG5nN01tCAPjcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
                          rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
        Validity
            Not Before: Jul 23 10:59:11 2026 GMT
            Not After : Jul 30 10:59:11 2026 GMT
        Subject: CN=6a61f3ff-f692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:2b:cb:bb:10:e5:e6:75:33:df:88:33:b8:
                    74:fa:d1:dc:de:37:2e:71:44:18:27:24:fa:20:2f:
                    b2:0e:7e:58:35:84:ae:2f:db:a6:66:45:1e:1f:0d:
                    9e:77:12:9e:32:db:94:33:3d:3a:7a:2c:5b:4e:d3:
                    5b:74:06:71:77:8e:6a:ab:b8:8b:fd:4a:29:6e:19:
                    24:4c:aa:2d:8f:21:7c:97:f5:86:3b:fb:57:7a:06:
                    5c:e1:dc:9d:df:62:87:1b:4b:b2:1b:21:a0:ac:46:
                    f3:08:91:04:67:35:05:be:c7:4a:82:ad:41:2e:ec:
                    a8:bd:a8:85:40:f4:55:28:9b:fc:69:aa:4c:90:20:
                    d7:81:b8:1d:1d:2c:90:96:21:7c:60:13:2c:6e:ce:
                    73:44:80:4d:a7:26:39:af:fe:7b:65:bc:98:8f:5d:
                    68:41:6f:d2:e9:4d:72:f1:0a:28:4f:71:b7:f7:e9:
                    82:e2:67:cb:ba:2e:48:a7:69:9f:06:2d:b0:8a:13:
                    c4:92:41:33:58:23:1f:3b:0c:f0:ea:fb:5f:bb:9f:
                    58:97:24:4c:b9:59:c9:52:0e:f1:05:51:1c:9d:22:
                    dc:0d:a2:6f:09:8d:43:cb:bf:6a:58:f1:de:b8:ce:
                    9f:34:3b:8c:b4:55:39:1b:eb:4a:6a:bb:fd:b7:91:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:44:D8:3E:AF:C2:1B:07:52:86:2D:61:9B:E6:64:1F:5A:CE:6C:67
            X509v3 Authority Key Identifier:
                keyid:31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:fe:3e:9a:ef:cb:1e:a3:d4:ee:d3:52:ce:65:c0:22:c0:
         05:60:15:15:c5:b5:10:ba:d8:1b:18:9a:72:76:15:8b:71:38:
         1d:53:4d:87:84:86:ae:3d:c6:bd:5b:09:b8:a5:85:c6:d7:de:
         e4:82:d2:cc:af:61:49:b9:ab:04:de:f3:af:2e:0b:06:6c:4a:
         c3:01:03:61:aa:87:e0:df:64:ac:f0:0d:bc:3b:76:8e:b4:ba:
         5d:e3:13:00:e9:77:39:90:c3:cc:3f:51:04:43:ff:77:3f:cf:
         fa:d7:92:f9:3a:f8:82:49:a4:75:7b:84:e5:9e:e5:fd:63:69:
         1c:02:0d:14:5e:f4:30:17:92:0b:94:92:71:f5:fe:b2:d6:06:
         fb:3c:f5:92:24:dc:92:8a:d7:ab:0a:f2:72:26:0d:7d:90:c9:
         b7:46:ac:ba:80:0f:74:71:3a:a8:0d:bc:fb:7e:a1:a9:ab:c3:
         6e:18:8d:98:c9:83:87:a0:2b:31:a3:c5:49:b8:11:18:e4:3e:
         c8:7c:af:6f:b6:47:03:66:40:ec:92:53:a1:3d:b5:ed:99:d5:
         61:16:fc:53:2f:47:7c:34:45:5a:c6:cd:57:e8:3a:4b:98:b5:
         19:57:df:db:55:da:f7:9c:a4:06:12:19:ac:36:5d:9c:4a:d8:
         3e:7c:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:19 2026 by rpki-client