Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
File:                     bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json)
Hash identifier:          bqWmBb+CrFf+wuPUqFILNSRnzi8kXreSIGGqmRNZgyM=
Subject key identifier:   10:C0:C6:60:C8:42:8B:F4:C3:7F:46:FC:EA:46:AE:EF:4B:CC:66:35
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Certificate issuer:       /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
Manifest number:          0622
Signing time:             Tue 06 Oct 2026 22:58:42 +0000
Manifest this update:     Tue 06 Oct 2026 22:58:42 +0000
Manifest next update:     Tue 13 Oct 2026 22:58:42 +0000
Files and hashes:         1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: Uju/kRaOffmNAxOvbauVnTUkGhdmfH63yv527wPrihY=)
                          2: 4D336D62B53F11F09557A379C4F9AE02.roa (hash: 3PGVSrX004IWe3rW1t0BQuyAOTfpt6sQECbNNWBdQuw=)
                          3: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: yCevESXrLM/arIFe29tQpXXUhc2PnmHIoYfM9qzJyOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
        Validity
            Not Before: Oct  6 22:58:42 2026 GMT
            Not After : Oct 13 22:58:42 2026 GMT
        Subject: CN=6ac57d22-40ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:8b:aa:7a:a6:c4:93:61:88:ae:96:35:09:
                    8d:69:00:6e:d6:b3:78:c5:3b:c2:f8:9e:fd:b6:31:
                    ca:7c:f1:35:38:a1:02:64:b9:9b:02:b6:d1:a3:e8:
                    1a:ef:e6:d9:95:90:f0:8a:24:7f:01:df:71:1b:a5:
                    01:a1:6b:7b:30:83:e5:b2:1d:25:e1:39:d9:e3:5d:
                    ea:bc:e2:12:ee:db:67:1a:c1:7a:4f:1b:4c:47:91:
                    7a:51:fc:88:29:33:35:71:9b:12:8d:1e:ba:e4:66:
                    53:6f:e2:b7:f9:51:89:93:4f:51:34:2d:60:32:36:
                    0b:dd:f5:e4:0e:5f:1e:b6:2e:19:29:17:10:a0:12:
                    50:c7:a4:af:c1:12:41:2b:61:75:88:71:3d:2d:ba:
                    01:8c:90:3c:a5:c1:32:cf:8b:43:11:b3:7a:77:89:
                    d0:5b:3f:39:16:1d:d7:7d:8a:c3:bc:d8:66:fe:ce:
                    52:cc:a6:10:37:da:19:f9:a9:d2:1b:bf:30:13:b9:
                    a3:2b:35:f4:19:e3:6d:98:e8:52:88:ad:cd:2c:5c:
                    6f:1a:45:ca:0e:f5:4a:c8:fa:28:1d:43:c3:1f:03:
                    0d:92:11:63:11:61:fc:00:b4:f5:7a:50:48:d3:0b:
                    64:38:3e:37:63:54:01:88:74:ac:a8:97:9b:bd:38:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:C6:60:C8:42:8B:F4:C3:7F:46:FC:EA:46:AE:EF:4B:CC:66:35
            X509v3 Authority Key Identifier:
                keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:31:36:8d:a7:ff:b1:65:ec:7e:be:7e:3e:d6:17:fb:bb:55:
         b3:69:60:15:67:84:b6:97:fc:3e:c5:3f:af:dc:67:3d:68:e2:
         8c:07:f7:9a:d1:04:75:93:df:87:40:c5:01:de:3b:8b:5d:85:
         0e:d5:80:30:b1:0d:61:4d:53:bb:96:e5:2f:4a:47:37:70:76:
         6b:15:1b:5f:a0:df:d4:80:d7:8b:aa:5e:bb:6f:bc:b6:ea:b9:
         e2:98:20:ba:c4:ca:a4:42:76:7a:27:0d:51:cc:02:7b:99:c3:
         08:b9:90:ba:2e:9f:a2:89:e9:0d:41:0a:2e:22:85:7e:46:40:
         dc:d2:96:ce:e5:f7:0f:a8:90:06:82:d9:7c:1a:27:62:0a:fa:
         2f:9d:83:00:35:42:d7:d2:d6:43:dd:3a:c8:12:80:61:e6:24:
         20:4e:d7:3b:ec:c9:99:02:49:e1:a5:40:72:89:75:d8:ec:68:
         82:67:90:0a:d5:d2:e4:6d:4f:3f:06:9e:f7:9b:c3:e2:15:b3:
         ee:d0:56:e4:5c:b8:94:6c:b5:ae:b9:15:90:0b:ea:fa:dc:38:
         84:3a:3b:45:07:00:87:86:b4:8b:1e:b1:00:e2:18:1c:dd:0b:
         0c:34:00:b2:2d:f0:84:56:7a:06:f6:f2:0e:ea:59:d0:62:a5:
         13:86:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:55:28 2026 by rpki-client