Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
File:                     MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json)
Hash identifier:          5wJoMRXnw4bmpYKOuMrG3ie8twaw8Zx0O5Nq/6o4P5k=
Subject key identifier:   FC:B8:E8:A5:F8:73:FB:F1:06:84:5D:79:90:72:DD:BD:51:41:F9:C1
Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Certificate issuer:       /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
Manifest number:          06AE
Signing time:             Sat 04 Apr 2026 22:12:16 +0000
Manifest this update:     Sat 04 Apr 2026 22:12:15 +0000
Manifest next update:     Sat 11 Apr 2026 22:12:15 +0000
Files and hashes:         1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: q08WBykzIO52b5919pYcKZbQJj6tLs3jo01l8NQHhfM=)
                          2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: H9bQjSPeahTiFhtLO0uJjbU189cBl39e5cIHw8cFvVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
                          rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
        Validity
            Not Before: Apr  4 22:12:15 2026 GMT
            Not After : Apr 11 22:12:15 2026 GMT
        Subject: CN=69d18cc0-c474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:89:c6:ab:12:7b:4c:70:e9:f6:68:3e:f1:
                    2d:11:45:f3:c8:76:18:97:27:2b:fb:c1:53:d4:6d:
                    0c:c3:52:b9:be:d7:a2:cc:26:a1:19:9a:9f:dd:4f:
                    bf:3d:d5:fd:0e:fb:89:94:42:54:f5:13:92:e1:a2:
                    24:95:62:68:10:9d:15:b2:fc:e5:d5:65:e0:8e:72:
                    ea:49:14:9a:ae:bf:8c:32:b3:98:95:e0:03:0e:c8:
                    57:1c:33:e4:1e:b8:08:aa:87:ec:44:d5:4a:c8:7c:
                    f7:a5:4b:62:81:82:8d:47:63:e8:f1:1f:27:51:a3:
                    cb:cf:cc:5a:db:f9:89:ac:ff:ec:5a:f5:77:b7:eb:
                    8a:93:64:5b:99:af:da:f5:e7:c5:18:38:cf:49:ab:
                    00:27:39:3f:90:57:c4:0e:41:27:57:9a:1c:4a:0f:
                    e1:73:31:73:b1:f1:e2:c2:e7:0f:03:e1:c5:c5:48:
                    2b:80:82:b1:cc:05:24:3c:00:53:6f:6d:78:21:2d:
                    7a:1c:f1:41:ee:5b:27:44:06:51:b8:f0:b9:60:48:
                    3c:6e:2d:2e:31:11:40:9f:61:43:8d:19:9e:c8:d6:
                    d7:3b:c3:b9:70:e5:03:4a:e2:1e:c8:ce:84:02:3a:
                    92:9f:e7:86:99:64:e5:61:b2:2b:ed:bc:7e:29:cd:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:E8:A5:F8:73:FB:F1:06:84:5D:79:90:72:DD:BD:51:41:F9:C1
            X509v3 Authority Key Identifier:
                keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:a8:1d:9c:e0:21:33:02:9b:65:bb:b9:71:9f:a8:86:41:
         d5:36:1c:7f:56:01:33:2c:51:6b:6c:4c:24:7e:d2:37:1d:62:
         b7:e8:b4:29:75:76:78:50:68:fb:12:9a:9e:1c:d0:41:30:ff:
         52:8a:5f:ec:af:4a:54:b3:2b:44:c4:51:89:0c:ce:a5:fe:d2:
         d9:14:64:a4:39:af:21:31:0d:6c:4f:9e:2b:83:94:7b:db:96:
         8e:62:47:42:d7:45:99:42:18:dd:ca:59:61:dd:2f:93:38:70:
         db:17:d3:63:27:d5:c1:2c:e6:01:a2:10:81:98:6c:26:4e:5d:
         61:83:35:b4:49:ce:92:f6:41:51:53:08:fc:35:59:f2:0b:51:
         2c:eb:c1:f5:be:25:33:b9:37:6b:a3:a1:9f:fc:fb:0b:a2:b1:
         f7:26:1b:4b:d0:8f:b8:02:19:82:28:30:4c:d1:d5:46:6a:5b:
         79:36:82:68:25:65:00:de:c8:c9:dc:73:3e:40:b6:c8:28:fd:
         2f:85:b4:18:f9:a2:03:bc:4d:35:48:8b:62:a5:a4:cb:96:54:
         07:75:41:9d:2c:48:49:68:d0:9d:f3:5c:2a:36:63:0a:59:91:
         34:96:40:24:1f:21:58:d1:d2:89:1d:12:48:6a:38:10:b4:2f:
         65:07:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:13 2026 by rpki-client