Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File:                     MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier:          G1y+8HRpW8rejh3ieD4gJvGScPzGQ4Yks3gjT3L2FBc=
Subject key identifier:   EB:F5:94:45:A4:B5:B9:A9:5F:0F:AE:2C:CD:0A:F7:30:D3:32:A0:FA
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer:       /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial:       0ABD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number:          0AA0
Signing time:             Thu 20 Aug 2026 19:29:19 +0000
Manifest this update:     Thu 20 Aug 2026 19:29:18 +0000
Manifest next update:     Thu 27 Aug 2026 19:29:18 +0000
Files and hashes:         1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: G+XVEJA6z+A8n1bfED0cwlzweSn8PQe7W6HayrDX4vg=)
                          2: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
                          3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
                          4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
        Validity
            Not Before: Aug 20 19:29:18 2026 GMT
            Not After : Aug 27 19:29:18 2026 GMT
        Subject: CN=6a87558e-5ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:a1:d7:8e:f3:e3:a2:7f:64:bd:d1:87:3d:
                    e4:f2:53:8c:d6:12:2c:70:07:77:21:d0:64:a8:cd:
                    59:e2:05:4c:74:b1:c6:f5:f0:7b:36:2b:45:57:2e:
                    14:56:5c:35:bc:ed:52:bd:86:2c:69:57:75:15:c0:
                    64:fe:53:c5:f7:97:42:07:90:05:17:3c:b4:03:bd:
                    82:ca:c8:fa:e9:32:b2:de:e5:46:df:da:22:06:23:
                    77:cd:b3:ea:f1:ba:34:62:6a:9f:ae:14:84:c2:c3:
                    87:51:9c:d5:8c:71:80:c1:2f:11:f8:a2:83:53:35:
                    38:f1:03:db:5e:2f:27:f8:d9:c3:c4:f2:75:2a:d4:
                    48:91:ce:1f:a9:c7:ca:f8:38:3e:51:41:4e:75:3f:
                    25:10:46:79:a9:cf:28:fb:63:49:ca:29:9e:c4:3a:
                    25:49:bb:0e:ea:d9:e7:df:0c:58:5c:37:39:d7:57:
                    df:bd:62:3d:ca:fe:97:8f:c4:d5:b9:71:41:f7:f8:
                    45:d6:a2:6d:80:23:c6:67:90:6f:3c:98:63:6d:3b:
                    bd:c1:3d:c7:35:3a:e4:86:62:e8:30:4f:49:cf:92:
                    bf:4f:38:d9:7e:9a:a8:4b:65:ec:54:ac:31:88:7c:
                    7f:b5:56:84:3a:76:a9:23:f1:1f:b9:b0:44:44:9e:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F5:94:45:A4:B5:B9:A9:5F:0F:AE:2C:CD:0A:F7:30:D3:32:A0:FA
            X509v3 Authority Key Identifier:
                keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:59:14:24:cf:0d:b3:e7:af:38:7c:cc:30:7e:01:27:8b:a9:
         82:6c:2a:25:81:56:8c:7e:ae:08:25:3a:c3:ec:33:9b:ba:90:
         38:a2:af:ac:f5:2c:42:9e:b9:84:e5:e6:e8:05:93:27:e5:e4:
         ec:80:e2:ec:79:27:93:e3:27:b7:fe:48:b6:e9:64:35:fd:3f:
         08:c4:8e:98:7c:ec:35:71:56:ad:40:dc:50:d1:1c:03:c2:0b:
         b7:3b:4a:31:a0:5c:05:1a:aa:4e:b5:cf:be:e0:ef:81:f0:e7:
         7b:58:8b:8d:b8:6a:eb:1d:ee:b9:25:ee:14:c3:59:2b:20:8d:
         eb:fc:9b:e9:27:d8:d3:0e:0d:56:c5:38:8f:cd:ba:3d:31:89:
         7b:e1:c5:d4:9d:c9:f7:24:30:3c:fb:68:c9:d3:25:6e:16:fb:
         1a:61:1e:e3:70:2d:61:4c:7f:70:f8:ac:bb:5a:55:b6:36:87:
         48:c8:d3:dd:47:71:65:9c:a0:7e:b1:21:ac:30:3c:60:a1:cc:
         a4:12:25:87:20:16:e6:65:33:53:67:03:27:ee:be:84:34:dd:
         41:63:bf:8a:d0:a8:c6:35:52:39:30:9a:4b:2d:52:1b:f2:12:
         c8:53:c1:2b:ad:e2:b1:f5:32:70:27:b1:95:3a:27:b1:ee:16:
         06:b2:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:44 2026 by rpki-client