Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
File:                     MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json)
Hash identifier:          XAhseIjH9mw5LLtc+2/wiRlAUwhgDAr04F2vnESqlxg=
Subject key identifier:   19:34:FC:8F:FB:95:84:3D:04:F4:49:F8:30:81:F2:89:85:02:19:4E
Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Certificate issuer:       /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Certificate serial:       0718
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
Manifest number:          070A
Signing time:             Thu 24 Sep 2026 22:03:39 +0000
Manifest this update:     Thu 24 Sep 2026 22:03:39 +0000
Manifest next update:     Thu 01 Oct 2026 22:03:39 +0000
Files and hashes:         1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: /bpRG2/kTJuFtOSDFYbNulxSMuD5ZfVGcckOl3b5++E=)
                          2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: UOYuzO+ZfFS4K1/Mm8Vt4itIcJTcKoKeJ7BaPumjJT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
                          rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
        Validity
            Not Before: Sep 24 22:03:39 2026 GMT
            Not After : Oct  1 22:03:39 2026 GMT
        Subject: CN=6ab59e3b-9f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:ff:85:66:37:9e:e5:ee:a1:26:f1:3b:2a:
                    fd:5f:a6:be:3d:a6:77:fa:ea:4a:21:2b:f0:c1:c3:
                    73:36:1c:1e:f4:fb:80:e5:7e:1f:54:72:9e:57:f3:
                    eb:7f:83:7e:1c:9c:c2:c9:87:c8:c0:09:86:c5:4f:
                    15:e1:c0:dc:d8:9c:05:20:09:09:9b:cc:0f:85:f3:
                    80:89:0a:63:3e:11:02:11:b8:e0:3d:49:ad:24:e0:
                    6d:c4:be:61:01:6e:af:9d:68:f5:59:ef:5c:b0:ae:
                    24:ce:94:ed:09:84:7d:01:46:39:34:8a:1d:8e:53:
                    9c:c6:d0:ef:f1:45:c0:53:80:60:26:78:20:36:2e:
                    05:51:b0:35:36:59:54:5c:b0:77:1d:13:5a:7c:ff:
                    c2:bf:a1:01:6f:30:f8:7d:b7:d1:8d:dd:fb:30:d7:
                    2c:cc:cd:ba:75:b5:36:bc:0c:c3:10:93:8b:18:67:
                    56:61:e2:3e:7a:23:e9:63:44:a6:23:b5:96:f0:e5:
                    67:93:d1:16:be:3e:47:d4:14:e0:c7:0b:03:f4:eb:
                    b0:7b:39:73:ac:11:52:41:13:95:9e:6d:b3:ad:e3:
                    d6:09:7a:64:7d:95:a0:2b:a5:ab:79:e8:40:43:9a:
                    d1:3f:56:c3:f0:a6:64:23:cf:49:5f:79:d5:4a:da:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:34:FC:8F:FB:95:84:3D:04:F4:49:F8:30:81:F2:89:85:02:19:4E
            X509v3 Authority Key Identifier:
                keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:67:76:4b:09:67:c1:f9:66:84:c4:61:31:e1:29:62:7a:
         2d:3b:01:9c:0c:b6:34:7f:04:4e:4d:d1:45:4d:2f:e3:20:e4:
         9a:8e:dc:89:9d:80:f3:88:c4:3c:0d:0c:e3:78:85:4a:87:b4:
         12:e7:f1:be:1b:e8:1b:5b:20:07:61:07:e8:d8:f7:e0:42:49:
         ff:25:74:b8:38:d3:0d:db:3d:3f:c0:a7:ae:b2:6e:dd:ed:df:
         35:3f:d9:ca:e4:21:68:1a:9d:ec:2a:b6:7c:20:60:49:bf:99:
         d1:ee:cb:1d:7d:10:00:60:fd:94:ee:3a:85:ce:8a:3e:8f:ae:
         03:f2:c9:30:30:6d:57:d7:f9:df:22:40:3a:5a:33:b6:66:e7:
         b9:5c:f1:4e:1e:4c:7e:f5:35:a6:c1:2c:5e:e8:e5:d7:ef:ee:
         93:01:ec:56:2a:c0:3f:28:27:9e:2f:fb:18:b5:9d:04:66:7b:
         d1:77:fd:b2:fa:4e:55:36:3c:23:d8:cf:ae:b2:1d:d1:d3:8b:
         6c:18:8e:b1:8c:94:a9:5f:e4:0d:dd:b2:c6:93:2e:99:08:03:
         bf:bd:b5:6f:fe:00:bd:e6:cf:eb:4d:14:7d:7f:70:ff:49:0a:
         0d:55:14:77:7e:1c:fa:6a:f6:fd:c8:bb:c1:57:85:e8:62:e6:
         1b:fe:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:31:24 2026 by rpki-client