Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File:                     MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier:          GwagsTZRrcJJUuxxRelE5oGOWzVK9d4r42ykMVNyapg=
Subject key identifier:   FA:BB:87:32:E8:92:E4:89:11:BE:39:EE:03:DA:A5:8F:6A:BE:0C:5E
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer:       /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial:       0AD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number:          0AB8
Signing time:             Tue 06 Oct 2026 19:37:13 +0000
Manifest this update:     Tue 06 Oct 2026 19:37:13 +0000
Manifest next update:     Tue 13 Oct 2026 19:37:13 +0000
Files and hashes:         1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: UHrPdHNNHMK/lRiWJfvWUGl7Pb9xULq4QuhWYuFDvfo=)
                          2: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
                          3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
                          4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
        Validity
            Not Before: Oct  6 19:37:13 2026 GMT
            Not After : Oct 13 19:37:13 2026 GMT
        Subject: CN=6ac54de9-25b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:46:b6:00:ee:42:62:a3:21:1d:95:85:78:
                    db:63:9a:c3:ce:d3:f3:c9:7e:aa:a8:3c:d6:dd:3c:
                    fb:41:90:bc:67:17:d8:da:2f:ec:5e:df:9f:7d:6f:
                    06:9a:52:4f:31:1c:30:3b:ae:e5:61:17:43:4c:5f:
                    2a:48:57:c6:9f:4e:d1:21:4b:b4:43:47:3d:ce:7d:
                    e1:63:55:05:75:b9:6a:2d:1b:9f:25:c9:56:1b:9b:
                    5a:bf:91:54:29:0d:a5:2f:53:e8:f0:52:45:7f:1c:
                    4e:64:62:f9:0d:c1:af:8b:a5:bf:44:59:fe:ab:e4:
                    52:2f:41:b1:c3:6b:a1:3b:3d:54:75:b0:c3:81:a1:
                    99:09:f4:d1:71:fd:0d:d9:d4:f3:18:3e:a6:94:63:
                    85:cb:15:6b:65:4c:fc:1f:7a:c5:66:fa:41:68:a9:
                    c7:f5:e1:23:3d:75:27:2e:9d:bf:b8:03:50:f0:d1:
                    71:2c:3a:25:7a:45:71:0a:91:2c:29:31:7e:2c:e6:
                    57:b3:27:02:3f:3d:ba:d5:b0:cd:87:91:77:46:93:
                    09:06:17:5a:2b:9e:3f:da:ed:f2:eb:16:ff:f5:40:
                    61:3a:52:28:a6:67:9e:03:b9:45:e0:fd:c8:42:d3:
                    c7:f3:06:ea:f0:76:48:73:41:f0:f9:0a:29:b5:38:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BB:87:32:E8:92:E4:89:11:BE:39:EE:03:DA:A5:8F:6A:BE:0C:5E
            X509v3 Authority Key Identifier:
                keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:78:57:39:dd:c8:92:7b:7e:6d:84:a8:47:b8:da:f8:1b:
         eb:71:e9:e8:a3:d5:93:22:d6:e1:e1:cc:7a:48:67:d0:d6:13:
         6c:c1:9e:9c:c0:93:68:f9:1c:54:47:ca:86:25:5b:5a:99:1c:
         73:d7:2b:56:89:9b:2b:f8:dc:2a:03:d5:b0:0b:86:e6:ea:f1:
         18:9d:6b:73:70:bd:23:b6:f5:c4:a5:03:91:6b:a4:92:ec:61:
         f5:1f:ae:2b:04:6c:cb:01:d3:19:72:d2:14:a6:0d:3d:f6:ab:
         3a:b1:ab:2d:60:7d:1f:82:ad:1f:de:b6:59:a5:e2:7e:07:e3:
         0d:77:ea:d6:b4:84:93:02:81:18:ae:fd:3e:4b:6d:b5:93:5a:
         d4:aa:10:ff:8e:c4:9c:7e:e5:35:de:53:82:50:7c:6a:7f:ad:
         18:2f:02:44:e6:4a:75:47:9a:e3:22:e0:fa:96:6e:3a:7d:8f:
         e1:d7:69:b8:fb:bb:e3:90:38:b2:58:2e:0a:40:1b:b8:13:66:
         dd:5d:15:fe:4d:a6:94:80:1f:98:10:b8:cd:e8:5c:6d:51:d1:
         d6:1f:38:d7:be:24:f8:f0:36:2f:e3:68:d7:a0:5d:d3:4f:14:
         39:aa:9f:af:9b:a6:85:0a:bb:e8:29:d9:f6:0c:04:77:8b:b5:
         ef:8d:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:37 2026 by rpki-client