Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
File:                     mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json)
Hash identifier:          tmRFmJFBrdz0BJjUl5Ir8SUMOSOFwoLzLA9Rr9Y0g8o=
Subject key identifier:   44:49:ED:0A:EE:2C:49:0A:49:FF:00:69:BE:A3:2A:9B:1C:96:73:22
Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
Certificate issuer:       /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
Manifest number:          7B
Signing time:             Thu 03 Sep 2026 08:01:32 +0000
Manifest this update:     Thu 03 Sep 2026 08:01:31 +0000
Manifest next update:     Thu 10 Sep 2026 08:01:31 +0000
Files and hashes:         1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: Q6Hfn3BRztBiUcIIMOnuixroRuMSzZ5S987eT92wamw=)
                          2: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=)
                          3: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
        Validity
            Not Before: Sep  3 08:01:31 2026 GMT
            Not After : Sep 10 08:01:31 2026 GMT
        Subject: CN=6a99295c-9b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:49:90:d1:9c:c2:d7:bd:b3:83:67:0c:d9:
                    5c:bb:58:28:e1:d5:4d:51:cc:fc:20:c1:49:8c:66:
                    58:56:7c:c9:f0:4d:22:9c:b9:54:45:64:74:7f:76:
                    2f:d2:fb:fb:fa:6f:e8:c3:06:91:3a:8a:d9:c0:9c:
                    2a:64:6f:bd:8a:6a:43:ee:c6:13:05:f5:a2:2b:c9:
                    35:2c:eb:f8:8b:78:41:05:d8:ed:18:56:b6:e1:f3:
                    ea:44:14:00:59:9a:37:55:75:01:27:14:bd:0d:7e:
                    59:22:77:1b:4f:4f:3b:84:e3:2a:af:83:6b:85:d4:
                    f5:0d:be:8f:0f:8d:49:51:4b:dd:25:18:80:c4:d8:
                    6c:2b:d9:7c:f1:72:6b:af:90:41:d3:b5:84:1e:6e:
                    5a:73:e6:bc:0d:68:3c:2a:c1:37:2c:d8:2f:96:37:
                    c3:2d:7f:6c:14:93:43:ff:98:46:84:16:8b:8f:cf:
                    88:9d:7b:52:37:5b:6e:d5:47:7a:2f:9d:8a:0d:27:
                    5d:ca:30:8f:7f:d7:cd:e5:eb:ce:3b:ff:f5:42:17:
                    70:18:41:7e:28:61:26:1b:02:9c:fb:92:86:0a:42:
                    2d:6f:89:a8:d7:59:7e:41:ab:4b:5d:cb:85:e0:a2:
                    61:73:59:b2:f0:0d:d3:70:8b:1f:7a:1a:fe:27:c2:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:49:ED:0A:EE:2C:49:0A:49:FF:00:69:BE:A3:2A:9B:1C:96:73:22
            X509v3 Authority Key Identifier:
                keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:02:7d:f2:52:21:bc:8e:84:30:f9:a4:ea:ee:48:7d:92:b0:
         69:1e:34:46:12:fb:52:a9:ff:2a:61:0e:a8:bd:f4:fb:d9:5c:
         18:a4:79:63:7e:bf:41:c4:4d:bf:74:6d:b5:c6:e3:7d:61:43:
         5c:29:87:f4:32:da:50:ca:32:43:55:6c:66:eb:df:1d:d3:6a:
         73:6d:9b:0c:6e:6b:c9:b0:15:d0:2c:a5:c6:05:27:10:b1:69:
         85:3f:ce:fb:4b:d1:98:66:ea:a9:04:a9:e0:4a:cd:2a:97:07:
         e8:b8:e4:26:87:cf:16:d9:c7:58:bb:ac:c1:af:70:63:c4:6e:
         b3:de:c4:25:7e:31:1a:b3:53:09:66:05:d0:51:9c:78:79:8f:
         e4:8f:b5:cb:46:67:f1:08:52:e0:22:32:47:71:73:b3:5c:50:
         80:db:4a:eb:87:7c:96:29:f0:be:76:b0:c6:4a:d8:b9:9f:ef:
         57:82:0d:6b:25:64:ac:7b:9c:f5:3d:04:25:9b:67:36:ef:02:
         70:8e:cc:ac:b4:e7:dd:b3:5b:87:d9:bb:8f:49:bc:35:f7:8d:
         26:0b:a0:10:55:48:f9:70:6d:50:fe:a5:25:6c:2b:5b:71:21:
         66:c2:ab:01:d3:28:1c:cd:0c:cb:e3:75:d3:83:dd:55:1a:b2:
         70:ff:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:35 2026 by rpki-client