Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File:                     MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier:          VK18umnBNWd2dz/ma4N0ryv+j/+JK0bplF2bA0fAmZc=
Subject key identifier:   69:84:E0:19:52:7E:14:AB:BB:85:92:5A:17:64:F5:E2:55:28:5F:67
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer:       /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial:       0A8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number:          0A71
Signing time:             Wed 20 May 2026 19:39:29 +0000
Manifest this update:     Wed 20 May 2026 19:39:28 +0000
Manifest next update:     Wed 27 May 2026 19:39:28 +0000
Files and hashes:         1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: uzAzziVyPqjY5wZRtHrpSTQhuCcuoz8ZVALh0nvV318=)
                          2: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
                          3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
                          4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2702 (0xa8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
        Validity
            Not Before: May 20 19:39:28 2026 GMT
            Not After : May 27 19:39:28 2026 GMT
        Subject: CN=6a0e0df1-ad08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:b6:ff:6f:de:ef:81:a3:a3:3c:d4:25:e7:
                    5e:1a:c0:4a:46:40:78:e0:7c:3e:b1:0d:65:5a:26:
                    f0:64:60:be:51:e7:ff:5b:a2:d8:7e:b6:42:c4:a6:
                    26:62:59:ea:1c:4e:8e:fd:30:24:01:84:1b:53:4d:
                    2d:23:cd:2f:eb:bb:fd:76:96:14:38:ae:c2:cd:78:
                    b0:58:3c:ba:6e:e0:2c:bd:35:17:b8:59:ee:56:34:
                    a2:de:97:57:f2:d5:f9:18:de:fa:d9:a3:b7:dd:38:
                    a6:91:09:1c:84:8d:c3:4a:c6:e1:88:ef:75:7b:2b:
                    b7:3b:e9:71:99:f7:f1:68:01:3e:22:bb:8d:6b:21:
                    61:a3:ed:37:0f:72:3e:d3:9e:4b:99:1e:33:b8:f4:
                    2f:58:b9:c2:ad:08:3b:20:45:60:47:a9:2c:19:73:
                    18:ee:89:30:07:d0:11:d4:61:ec:b0:0e:ed:f8:10:
                    8e:d2:68:68:d2:82:01:7d:6c:8a:d8:9d:77:22:af:
                    9a:d0:f2:1c:7d:43:99:9e:59:97:eb:2d:57:eb:19:
                    dc:6d:ea:d5:08:8f:ac:74:df:53:c1:d6:90:21:74:
                    32:43:86:ed:20:ea:d4:f2:34:31:76:3f:50:20:d8:
                    61:a1:de:cf:ab:91:75:04:3c:14:ce:81:62:fe:70:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:E0:19:52:7E:14:AB:BB:85:92:5A:17:64:F5:E2:55:28:5F:67
            X509v3 Authority Key Identifier:
                keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:5c:ae:e6:6b:d4:0d:c2:b8:c8:70:d6:2e:38:d5:fb:a6:
         22:96:7f:ed:c2:79:19:e1:44:92:17:7a:a6:b3:6c:7a:3e:90:
         e5:3e:6e:6f:24:96:c5:af:e3:a0:9c:4b:ab:3a:b3:74:bc:02:
         d9:0e:db:dd:d6:79:3d:7a:9e:35:3a:b9:3a:ca:c7:b9:5d:46:
         a4:ac:6f:77:e6:e3:cd:df:40:82:e5:ed:4d:01:9b:48:61:91:
         74:97:0c:45:1c:79:07:b8:12:63:19:53:ab:ce:85:5e:5a:23:
         b9:20:d9:d3:90:46:05:2a:d3:2f:73:e6:ac:26:ee:d7:80:e3:
         9a:e7:89:7c:7b:26:e5:f7:83:64:6d:cf:ac:9e:7f:7d:13:08:
         68:ac:6b:71:f9:8d:86:b2:c2:16:69:12:16:c7:03:bd:66:c7:
         25:e5:c2:ba:7c:be:ed:51:53:bc:9d:28:bf:1d:58:94:7a:dc:
         da:26:a3:62:6e:ba:a9:06:0e:ad:ae:0d:59:73:00:2b:c9:90:
         9e:4e:4d:99:5f:25:5e:b7:58:5c:68:37:fd:ca:08:7f:f1:4e:
         12:e1:df:f1:51:c2:b1:83:f6:f7:47:a3:4a:02:f3:e4:cb:27:
         bc:8e:69:da:b4:31:22:20:d6:52:7d:1d:1e:02:a6:1e:00:10:
         21:2a:54:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx
RDZEOTc1OTIwHhcNMjYwNTIwMTkzOTI4WhcNMjYwNTI3MTkzOTI4WjAYMRYwFAYD
VQQDEw02YTBlMGRmMS1hZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsW2/2/e74GjozzUJedeGsBKRkB44Hw+sQ1lWibwZGC+Uef/W6LYfrZCxKYm
YlnqHE6O/TAkAYQbU00tI80v67v9dpYUOK7CzXiwWDy6buAsvTUXuFnuVjSi3pdX
8tX5GN762aO33TimkQkchI3DSsbhiO91eyu3O+lxmffxaAE+IruNayFho+03D3I+
055LmR4zuPQvWLnCrQg7IEVgR6ksGXMY7okwB9AR1GHssA7t+BCO0mho0oIBfWyK
2J13Iq+a0PIcfUOZnlmX6y1X6xncberVCI+sdN9TwdaQIXQyQ4btIOrU8jQxdj9Q
INhhod7Pq5F1BDwUzoFi/nBjHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmE4BlS
fhSru4WSWhdk9eJVKF9nMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0
RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy
d3hkdUhmZE9rSWdkYlpkWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN2FcruZr1A3CuMhw1i441fumIpZ/7cJ5GeFEkhd6prNsej6Q5T5ubySWxa/j
oJxLqzqzdLwC2Q7b3dZ5PXqeNTq5OsrHuV1GpKxvd+bjzd9AguXtTQGbSGGRdJcM
RRx5B7gSYxlTq86FXlojuSDZ05BGBSrTL3PmrCbu14DjmueJfHsm5feDZG3PrJ5/
fRMIaKxrcfmNhrLCFmkSFscDvWbHJeXCuny+7VFTvJ0ovx1YlHrc2iajYm66qQYO
ra4NWXMAK8mQnk5NmV8lXrdYXGg3/coIf/FOEuHf8VHCsYP290ejSgLz5MsnvI5p
2rQxIiDWUn0dHgKmHgAQISpUSw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:15:32 2026 by rpki-client