Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
File:                     bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json)
Hash identifier:          9k98HJggkic/jjDkNL+n4BckaomiGUDVZC1b6gFCe4g=
Subject key identifier:   69:5D:74:ED:B3:51:EA:F8:73:4A:E2:39:9B:5E:22:8F:DA:42:56:D5
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Certificate issuer:       /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial:       0619
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
Manifest number:          0609
Signing time:             Tue 18 Aug 2026 23:17:05 +0000
Manifest this update:     Tue 18 Aug 2026 23:17:04 +0000
Manifest next update:     Tue 25 Aug 2026 23:17:04 +0000
Files and hashes:         1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: be+8Zy1S/lr/+Ul64ISmVmmz5OZw13MXfr7dO4zCmAU=)
                          2: 4D336D62B53F11F09557A379C4F9AE02.roa (hash: 3PGVSrX004IWe3rW1t0BQuyAOTfpt6sQECbNNWBdQuw=)
                          3: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: yCevESXrLM/arIFe29tQpXXUhc2PnmHIoYfM9qzJyOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
        Validity
            Not Before: Aug 18 23:17:04 2026 GMT
            Not After : Aug 25 23:17:04 2026 GMT
        Subject: CN=6a84e7f0-3561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:9e:d8:a6:3f:c3:57:e6:a6:d5:f0:22:42:
                    03:1b:ed:1e:23:33:af:d1:0b:52:2c:ea:fc:25:af:
                    3d:95:fa:34:1a:4d:0f:d0:04:a9:80:df:99:67:d4:
                    70:d6:28:ba:af:db:71:69:5a:a7:a9:9f:32:66:11:
                    44:98:bf:09:3d:61:10:8c:a6:ec:7d:f8:21:c5:2f:
                    d0:5e:73:53:fe:6a:d3:4c:00:89:f4:87:65:bc:b2:
                    2d:fd:46:9d:e0:ea:62:59:e1:f6:cd:df:e7:98:a1:
                    56:9e:9d:e7:55:dc:ee:0a:04:e9:3c:f1:a6:8c:ff:
                    d2:8f:be:42:73:46:01:51:f0:66:82:e5:e7:14:19:
                    3c:55:fc:d7:86:d3:2a:5c:bc:c3:28:b4:5a:50:a1:
                    46:18:10:fc:50:d1:ba:4f:56:57:8d:75:9b:fe:d8:
                    e9:f6:d5:a8:c8:e5:7f:0b:91:19:13:12:b0:f5:72:
                    88:9f:72:2a:30:f4:14:1f:5f:66:35:a7:01:d5:dc:
                    3d:c2:77:2d:5f:df:8c:53:6e:df:09:9c:0d:92:24:
                    8f:8c:d4:55:80:4f:62:97:3f:59:61:85:39:b5:18:
                    21:b8:66:34:67:9d:dd:d3:3d:fa:e1:63:06:81:dc:
                    b9:83:05:70:c1:85:62:8c:3f:ec:b4:76:17:68:23:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:74:ED:B3:51:EA:F8:73:4A:E2:39:9B:5E:22:8F:DA:42:56:D5
            X509v3 Authority Key Identifier:
                keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:44:d7:43:fa:60:be:26:6f:61:fd:bc:6b:09:e1:87:48:
         e0:dc:ad:f6:33:3e:fd:b3:65:f0:54:25:46:cb:80:e9:75:82:
         bf:3a:8b:1e:a1:b0:10:18:72:78:71:e2:57:2a:06:88:7c:10:
         29:79:82:25:54:f5:df:9e:6c:01:c7:f1:f6:04:ea:ef:fb:cc:
         30:67:f9:18:c1:b8:b7:90:4c:44:41:df:59:01:56:5a:c8:93:
         af:7d:75:6d:48:c7:fb:4a:03:2c:54:6f:64:58:c0:48:e2:93:
         da:cd:8c:16:a5:7c:20:be:97:e6:92:05:e1:32:ca:b5:64:d0:
         c9:2a:1f:4a:cf:c2:e8:85:cd:8c:76:f5:72:55:d5:f4:d6:ec:
         18:47:46:e5:d9:fa:b1:9e:e4:73:5c:fe:ee:8e:50:ca:cb:a9:
         2d:55:51:5a:f2:1a:11:38:77:b0:a9:78:d0:d5:71:9b:1c:4c:
         db:58:f6:d4:10:0d:ae:72:51:e2:a1:15:43:ce:1a:80:c6:22:
         2a:9f:79:9b:52:c6:63:f9:5e:09:24:e0:e5:f9:f4:d2:07:44:
         17:1e:67:78:e0:db:2b:6c:6f:24:d7:09:6e:47:e3:89:a6:af:
         0e:cf:08:d0:47:0d:e7:5b:2d:78:9d:14:6e:40:32:d6:d8:e0:
         17:d0:79:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3
Q0QxQzgyNkIwHhcNMjYwODE4MjMxNzA0WhcNMjYwODI1MjMxNzA0WjAYMRYwFAYD
VQQDEw02YTg0ZTdmMC0zNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwtye2KY/w1fmptXwIkIDG+0eIzOv0QtSLOr8Ja89lfo0Gk0P0ASpgN+ZZ9Rw
1ii6r9txaVqnqZ8yZhFEmL8JPWEQjKbsffghxS/QXnNT/mrTTACJ9IdlvLIt/Uad
4OpiWeH2zd/nmKFWnp3nVdzuCgTpPPGmjP/Sj75Cc0YBUfBmguXnFBk8VfzXhtMq
XLzDKLRaUKFGGBD8UNG6T1ZXjXWb/tjp9tWoyOV/C5EZExKw9XKIn3IqMPQUH19m
NacB1dw9wnctX9+MU27fCZwNkiSPjNRVgE9ilz9ZYYU5tRghuGY0Z53d0z364WMG
gdy5gwVwwYVijD/stHYXaCOpoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlddO2z
Uer4c0riOZteIo/aQlbVMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2
MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVE
cFFCVnBSazVndzk4MGNnbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVbdE10P6YL4mb2H9vGsJ4YdI4Nyt9jM+/bNl8FQlRsuA6XWCvzqLHqGwEBhy
eHHiVyoGiHwQKXmCJVT1355sAcfx9gTq7/vMMGf5GMG4t5BMREHfWQFWWsiTr311
bUjH+0oDLFRvZFjASOKT2s2MFqV8IL6X5pIF4TLKtWTQySofSs/C6IXNjHb1clXV
9NbsGEdG5dn6sZ7kc1z+7o5QysupLVVRWvIaETh3sKl40NVxmxxM21j21BANrnJR
4qEVQ84agMYiKp95m1LGY/leCSTg5fn00gdEFx5neODbK2xvJNcJbkfjiaavDs8I
0EcN51steJ0UbkAy1tjgF9B5rw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:02 2026 by rpki-client