Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File:                     mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier:          1U1BWdoYWzVH79wN8kw640PodaFcD8NVIV8m1E9bzUQ=
Subject key identifier:   A2:16:B7:D2:A2:24:43:63:3B:5A:13:BA:2E:C9:5A:1A:C1:1E:6D:4A
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer:       /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number:          0206
Signing time:             Mon 19 Oct 2026 03:53:21 +0000
Manifest this update:     Mon 19 Oct 2026 03:53:20 +0000
Manifest next update:     Mon 26 Oct 2026 03:53:20 +0000
Files and hashes:         1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: atfOvnRjiC2k89+RD+t0rx4McuXVxrKAkAcWTTrqc8U=)
                          2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: Olday+AXi3Qq8gq780450bntMRq7xAhbF+H8ZFEm5II=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
        Validity
            Not Before: Oct 19 03:53:20 2026 GMT
            Not After : Oct 26 03:53:20 2026 GMT
        Subject: CN=6ad59431-2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:82:f7:ec:7f:b7:df:39:ae:a5:6f:a0:6e:
                    51:fa:5f:22:de:7b:e0:07:42:68:14:e6:d9:28:b7:
                    77:9d:04:9f:d9:31:09:66:32:3e:3f:90:07:59:e4:
                    b7:14:11:66:31:ed:ad:ca:62:99:5a:80:97:29:3f:
                    0a:f1:d5:17:bd:f4:20:31:2c:a2:60:08:e3:8b:b3:
                    e2:24:fb:2f:48:6f:42:44:49:1e:54:af:93:45:be:
                    4d:f5:4a:d3:f9:b9:f2:33:2b:4f:40:3f:23:08:bf:
                    4f:7a:7f:39:fb:69:6c:94:af:c5:ec:95:78:3a:cb:
                    bd:f3:bc:bd:2f:e6:51:48:42:23:3e:fd:df:ba:94:
                    a8:2e:70:dc:0f:75:10:40:8e:51:d5:be:90:7d:c4:
                    02:c7:f0:3d:a3:b4:04:6b:45:c2:ec:dc:b9:67:8d:
                    58:da:6f:96:60:f3:7c:b7:4b:fd:7f:07:c0:84:78:
                    2e:10:b8:21:c5:28:db:b5:6e:8c:74:fd:2b:32:45:
                    f4:8e:21:76:6d:c5:b1:56:09:04:06:59:95:49:90:
                    e7:cf:35:69:9a:9e:cd:45:a5:d6:a0:9d:e6:cf:9a:
                    a4:c4:83:19:d6:e3:05:ac:72:76:ef:5d:c3:f8:91:
                    5c:94:b0:3a:b6:68:c1:6c:f2:69:d7:91:2f:4f:d4:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:B7:D2:A2:24:43:63:3B:5A:13:BA:2E:C9:5A:1A:C1:1E:6D:4A
            X509v3 Authority Key Identifier:
                keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:97:99:d5:e9:af:a8:00:f2:ac:af:1a:3a:82:52:f1:29:21:
         44:a8:30:f4:bd:c0:4f:a1:ec:82:3a:d0:6e:e2:38:b8:32:81:
         ef:fd:94:83:ae:8c:ae:e5:5d:c8:3c:a2:0b:5b:0c:af:9f:a6:
         4f:23:24:6d:49:8f:17:b0:02:eb:61:49:56:9a:31:dc:95:03:
         ad:bf:8b:3d:d2:ce:12:be:5b:ad:26:a8:b6:dc:fe:94:77:92:
         c3:7a:16:ee:89:66:82:dc:8f:c9:eb:52:a5:29:7a:92:d1:11:
         0a:3a:85:49:ef:28:19:0b:ee:8d:03:b1:f8:4b:96:f1:e0:04:
         9e:ac:58:85:71:8b:c0:23:83:ba:c5:ee:ce:25:bf:1b:c9:0e:
         84:77:e8:fd:56:14:be:66:cf:1d:fc:2c:8d:d4:12:47:72:58:
         47:24:88:83:37:62:70:d7:af:55:01:a1:e7:5b:6b:3f:9b:07:
         b4:23:dc:f5:c5:7c:6e:82:8a:31:99:e5:36:01:93:6c:92:9c:
         31:bc:26:ec:d3:89:15:3a:3d:43:f1:a3:f1:e1:cc:67:97:ca:
         c9:ba:9c:de:aa:5d:c4:62:e6:a4:87:2d:d5:7c:30:82:3b:1e:
         0b:a9:60:99:70:1b:02:ba:72:62:66:1a:c1:71:77:ab:e6:3f:
         5e:87:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:53:42 2026 by rpki-client