Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
File:                     MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json)
Hash identifier:          IcD1xRioXyiM22xRwsfuQqD2h98senDGoHl43BPZu4s=
Subject key identifier:   EF:39:05:93:D1:A5:4E:52:5C:2E:B2:16:12:BD:47:8B:F9:8A:59:E4
Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Certificate issuer:       /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
Manifest number:          0712
Signing time:             Sun 04 Oct 2026 22:11:56 +0000
Manifest this update:     Sun 04 Oct 2026 22:11:56 +0000
Manifest next update:     Sun 11 Oct 2026 22:11:56 +0000
Files and hashes:         1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: uKxRmWPjKIetdTwVBCjK8oND0k1g8uxz4O7ZFQGuGkc=)
                          2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: 5wXDr1Y4xXPrp5MEX9JiUG+NNP+qZv35l6G9SEzxAOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
                          rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
        Validity
            Not Before: Oct  4 22:11:56 2026 GMT
            Not After : Oct 11 22:11:56 2026 GMT
        Subject: CN=6ac2cf2c-cc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:43:ac:17:6a:aa:b2:b7:5f:75:c7:24:10:
                    8d:f5:8b:e0:ac:a8:11:5b:f6:48:58:27:9d:12:e3:
                    64:45:bc:e6:35:dc:8d:d3:d6:96:ac:63:89:5d:19:
                    9a:15:69:d3:6f:17:8f:3a:1c:06:a3:26:8a:c4:85:
                    da:84:a4:08:3a:75:8b:93:1a:50:84:0c:61:8d:88:
                    75:d0:15:c5:2f:4f:75:fe:42:e0:d8:40:fd:a8:c2:
                    26:a7:de:7d:a1:0d:30:56:86:e6:17:d7:6c:3f:4b:
                    ce:a8:c8:5b:86:c0:7d:c5:ec:ef:39:0c:f9:b1:86:
                    18:41:21:c4:d4:69:83:79:c7:bf:d7:88:52:88:4c:
                    52:2a:6c:64:04:74:cc:68:c7:44:f3:62:7c:25:f0:
                    ff:70:31:9f:cf:ca:05:ad:20:1f:72:1e:4b:3f:2e:
                    4f:ea:da:f6:d2:7e:2c:86:8c:4c:24:bf:08:7d:44:
                    2c:b5:fb:57:ce:e6:a8:fc:00:65:cc:cb:85:e2:8f:
                    8d:bb:67:fa:87:89:4b:9b:b8:fe:a3:7c:ea:c2:eb:
                    92:16:4b:c4:e8:13:13:0c:02:1b:34:5b:9d:f4:20:
                    5e:a7:8f:3e:09:c6:ec:be:86:14:dc:bc:ac:c9:c7:
                    cb:b0:14:ad:f7:94:f6:4a:04:4c:f8:45:76:bd:a9:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:05:93:D1:A5:4E:52:5C:2E:B2:16:12:BD:47:8B:F9:8A:59:E4
            X509v3 Authority Key Identifier:
                keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:56:3b:ac:35:5d:5c:f7:07:50:dc:d0:2b:79:06:24:83:
         1d:ce:f1:80:45:1c:45:54:92:27:59:6a:25:85:f5:a0:0f:48:
         49:c5:a6:44:b0:9f:92:d9:43:f1:6d:68:9b:5b:c4:27:47:e6:
         0a:83:a9:1b:c0:f1:04:ef:32:64:78:87:82:2c:0a:cf:2e:c7:
         29:98:45:90:83:00:74:c5:27:35:f8:94:ae:01:67:57:a0:91:
         0d:a3:5a:50:0c:00:f7:98:74:8f:fe:06:61:fd:85:3f:6b:da:
         e1:56:47:2e:8d:e3:74:1f:1d:27:01:2d:ef:78:a6:21:b5:64:
         ea:e2:1f:1f:b1:68:90:31:49:94:b8:37:d5:88:75:ca:70:f3:
         86:d8:49:61:7c:20:19:78:de:3c:83:6f:7d:0c:b1:3a:3d:28:
         ab:a4:5f:b1:65:e5:dd:1b:70:0f:46:50:33:d3:2c:e2:04:f6:
         6e:6c:d9:46:40:f2:57:38:17:78:3b:0b:54:27:92:a3:64:1a:
         b5:65:ad:84:bc:e1:e7:d3:01:77:9f:e1:da:dc:5e:c1:fe:87:
         78:ba:1c:c6:d5:75:0b:9e:c7:26:51:1f:1e:55:e9:83:da:a5:
         cf:2e:7d:77:a2:83:a7:50:d3:03:32:f0:f5:fc:77:41:9c:3a:
         dc:89:30:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg2RTgxMTAvBgNVBAUTKDMwRTIzNjFDRERBNUVCQTcwNUYzQTZCMkZCRUJFNURC
N0RBRjEwRjEwHhcNMjYxMDA0MjIxMTU2WhcNMjYxMDExMjIxMTU2WjAYMRYwFAYD
VQQDEw02YWMyY2YyYy1jYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArE5DrBdqqrK3X3XHJBCN9YvgrKgRW/ZIWCedEuNkRbzmNdyN09aWrGOJXRma
FWnTbxePOhwGoyaKxIXahKQIOnWLkxpQhAxhjYh10BXFL091/kLg2ED9qMImp959
oQ0wVobmF9dsP0vOqMhbhsB9xezvOQz5sYYYQSHE1GmDece/14hSiExSKmxkBHTM
aMdE82J8JfD/cDGfz8oFrSAfch5LPy5P6tr20n4shoxMJL8IfUQstftXzuao/ABl
zMuF4o+Nu2f6h4lLm7j+o3zqwuuSFkvE6BMTDAIbNFud9CBep48+CcbsvoYU3Lys
ycfLsBSt95T2SgRM+EV2van+jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO85BZPR
pU5SXC6yFhK9R4v5ilnkMB8GA1UdIwQYMBaAFDDiNhzdpeunBfOmsvvr5dt9rxDx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODZFOC80ODg5NTk0RUE4
MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2Y0Y4NmF5LS12bDIzMnZF
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PSTJITjJsNjZjRjg2YXktLXZsMjMydkVQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODZFOC80ODg5NTk0RUE4MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2
Y0Y4NmF5LS12bDIzMnZFUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARs1WO6w1XVz3B1Dc0Ct5BiSDHc7xgEUcRVSSJ1lqJYX1oA9IScWmRLCfktlD
8W1om1vEJ0fmCoOpG8DxBO8yZHiHgiwKzy7HKZhFkIMAdMUnNfiUrgFnV6CRDaNa
UAwA95h0j/4GYf2FP2va4VZHLo3jdB8dJwEt73imIbVk6uIfH7FokDFJlLg31Yh1
ynDzhthJYXwgGXjePINvfQyxOj0oq6RfsWXl3RtwD0ZQM9Ms4gT2bmzZRkDyVzgX
eDsLVCeSo2QatWWthLzh59MBd5/h2txewf6HeLocxtV1C57HJlEfHlXpg9qlzy59
d6KDp1DTAzLw9fx3QZw63IkweA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 04:03:22 2026 by rpki-client