Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
File:                     MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json)
Hash identifier:          CWnH6i0tKIAUpTzU5WSOonptStwWYARKEtEyrg715m8=
Subject key identifier:   82:02:62:75:87:06:47:A4:BE:C1:AA:5C:3D:3E:7A:2B:34:4E:80:0F
Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E
Certificate issuer:       /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
Certificate serial:       02F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
Manifest number:          02EC
Signing time:             Wed 19 Aug 2026 01:35:30 +0000
Manifest this update:     Wed 19 Aug 2026 01:35:29 +0000
Manifest next update:     Wed 26 Aug 2026 01:35:29 +0000
Files and hashes:         1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: lP7yYXfVWwo7B8CmpniSCKzFcunYXEGL+sxUTViP3Wo=)
                          2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: LkrylPJMa1lM5G24m9Hp0wuID2HJBSNqucTHJxmRA2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl
                          rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
        Validity
            Not Before: Aug 19 01:35:29 2026 GMT
            Not After : Aug 26 01:35:29 2026 GMT
        Subject: CN=6a850862-bcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:95:a1:9d:7a:55:53:c6:5e:fe:9f:72:95:
                    b5:5a:85:e2:72:26:27:87:27:a6:36:d0:8d:e1:3b:
                    3d:ad:b5:3f:cc:82:d8:d5:24:9f:e8:e9:9c:6a:47:
                    11:b7:c9:1c:e3:57:8e:77:7b:e4:c8:a0:0f:73:14:
                    f6:7a:ad:22:f7:22:6a:be:90:71:17:c9:fc:1e:c5:
                    c7:3f:6c:16:b4:5c:a5:bc:98:d6:a8:1e:e5:6e:6c:
                    d1:ea:a4:5d:16:65:c5:7d:6e:ae:5b:cf:36:ea:25:
                    42:06:b3:34:05:41:08:c9:b9:0c:93:39:0d:39:5a:
                    80:58:36:cb:e8:f1:55:f3:ce:35:b5:d1:2e:aa:1f:
                    f0:6d:4b:a7:c6:93:13:87:fe:8d:51:30:df:8e:a3:
                    ca:8d:b4:e4:9e:24:2a:7f:d8:ce:87:51:89:f4:ea:
                    c0:46:4b:b3:d4:eb:7a:13:38:f6:e4:ba:be:8a:5d:
                    d9:53:8f:53:05:37:05:1c:df:0d:32:f1:88:24:6c:
                    ee:7c:56:c3:ec:77:17:79:ad:3a:77:bf:63:81:5f:
                    35:77:40:c3:43:d6:2d:c0:5a:c8:8a:f3:4e:b2:19:
                    79:27:75:69:b9:1b:96:f3:c8:07:6c:a9:3c:a2:f3:
                    38:22:2e:ef:8b:f2:4a:e5:64:6b:5b:c1:e2:49:5b:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:62:75:87:06:47:A4:BE:C1:AA:5C:3D:3E:7A:2B:34:4E:80:0F
            X509v3 Authority Key Identifier:
                keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:d6:b8:11:7b:b5:12:ff:29:9b:f1:8e:7a:83:0a:af:de:
         5a:79:7a:85:ab:f1:34:73:2a:bb:5a:86:f2:5c:df:e7:67:16:
         f2:81:eb:43:a7:62:13:78:96:c3:82:f4:73:90:e7:46:f0:cf:
         90:b5:9a:c5:57:86:53:1f:ed:0a:87:27:a5:a5:d1:6f:ef:c9:
         8e:2f:cc:21:d7:6e:1a:1a:7c:2d:9a:c8:75:a0:96:f1:e5:85:
         5c:72:43:43:6f:f7:11:4c:04:2e:58:99:43:d0:02:3a:d1:3f:
         4c:1d:e8:8d:89:f8:3b:9f:82:96:63:55:55:74:4a:7f:ff:5c:
         ec:9a:f0:e7:8a:20:aa:f9:1d:7f:68:8f:7c:e7:98:e5:82:7e:
         54:e6:46:68:19:d4:8c:c7:6d:7f:04:c3:9e:2d:34:cc:2f:a4:
         4b:5c:6e:e8:36:43:6c:58:5a:8a:a9:81:8d:92:51:15:63:2e:
         5a:6a:c7:41:13:c6:c8:03:a1:90:80:70:96:36:a6:49:23:54:
         8a:ca:59:40:a3:97:a0:bc:a9:c6:bd:7f:3d:a0:18:7b:91:fb:
         57:94:c8:4e:8f:32:16:24:b6:7a:11:b9:bc:3a:95:61:60:33:
         55:23:5d:42:ad:49:81:06:37:45:21:22:20:d5:7a:ff:77:7b:
         ec:fb:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:13 2026 by rpki-client