Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
File:                     moOQ_87kYoLKpxzdePBmlPjT1bY.mft (raw, json)
Hash identifier:          SssI2Fk6IlVY87ESM1/fURcqCsA10XfDdsF2Wj+2zHo=
Subject key identifier:   CC:32:0C:4E:8C:05:AA:EB:0B:68:84:20:87:6A:BD:D5:9A:8F:C9:DE
Authority key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
Certificate issuer:       /CN=A918B531/serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
Manifest number:          CD
Signing time:             Mon 27 Jul 2026 08:55:51 +0000
Manifest this update:     Mon 27 Jul 2026 08:55:50 +0000
Manifest next update:     Mon 03 Aug 2026 08:55:50 +0000
Files and hashes:         1: moOQ_87kYoLKpxzdePBmlPjT1bY.crl (hash: ETLdJChbzWjEOD5R3B0sQW+/Q8VxXySTLMMvfKnYe1Q=)
                          2: C0B3AE3056F511F0AF865C85C4F9AE02.roa (hash: soQNMOK7SzLj3ICqswnaXGnnM7wkX3rumUTfdSAnLgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl
                          rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
        Validity
            Not Before: Jul 27 08:55:50 2026 GMT
            Not After : Aug  3 08:55:50 2026 GMT
        Subject: CN=6a671d17-02d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:02:bd:07:7a:c6:8a:bf:f6:eb:3f:cf:8e:
                    2c:3c:d0:d8:65:c1:3f:4b:05:7e:71:0f:0d:0b:1b:
                    18:9b:2e:b4:ba:73:0d:3a:a0:ad:99:3c:64:1b:98:
                    2e:ae:48:b5:45:57:2d:bb:0f:ee:a9:fb:7e:fa:20:
                    d4:a5:af:26:d4:3a:b3:97:ca:bf:84:a7:75:7d:36:
                    a7:ff:95:e0:0b:5b:61:14:b0:42:1a:e6:a7:93:c8:
                    2c:d5:51:59:2e:04:e2:75:a1:cd:de:df:23:df:61:
                    4f:99:7e:87:72:f9:8a:c4:99:dd:e5:09:c2:ac:3f:
                    c1:ca:84:63:26:77:87:8d:46:fb:ba:ec:65:a9:d0:
                    c3:2c:aa:51:52:68:13:65:d9:01:db:b0:89:ff:38:
                    1f:ed:e3:ff:1a:ed:4e:6a:23:2a:52:c1:24:c6:2f:
                    51:86:29:15:ba:21:17:a9:b3:5d:0a:f7:66:69:e4:
                    70:84:ce:69:9e:2f:90:2c:64:1c:30:20:c3:31:f9:
                    19:a1:42:14:77:2f:31:de:bf:26:19:c3:9c:e1:fd:
                    26:5f:20:5d:a9:4f:8b:98:c3:3a:94:d9:9a:ee:ba:
                    98:b6:20:bc:b7:a3:34:ea:64:e7:65:9d:fd:32:e1:
                    7b:c6:96:f4:2d:2e:cc:fe:02:78:1e:10:02:af:3d:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:32:0C:4E:8C:05:AA:EB:0B:68:84:20:87:6A:BD:D5:9A:8F:C9:DE
            X509v3 Authority Key Identifier:
                keyid:9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:04:e8:22:12:77:af:2f:0c:a8:38:b9:12:83:21:4c:9a:3c:
         c8:43:2d:6e:2a:2e:45:be:7c:e8:15:56:22:d2:87:c2:97:2f:
         59:8a:a8:28:00:6a:99:ac:b5:a2:78:fc:29:08:65:6e:9d:a5:
         aa:2e:52:da:60:2e:cb:e5:ed:72:3f:a7:80:fc:e9:cc:45:02:
         96:35:5d:24:f3:2b:e8:2d:33:d8:f6:ba:f5:94:87:a8:13:9f:
         14:c3:9f:cb:64:da:8d:ec:bf:15:a2:00:56:a4:77:f5:e7:5a:
         5e:b0:73:c2:fa:c9:ca:bc:2e:77:dc:0e:7a:37:f6:8e:f5:25:
         60:6a:c1:e3:d8:1c:18:c4:86:8c:b9:3d:ac:e1:99:64:08:af:
         22:b0:0e:93:40:20:64:a0:70:42:0d:b5:62:6a:5f:e8:78:cc:
         bd:b4:a2:1b:69:8d:a3:05:9a:cf:57:0a:e9:06:33:98:36:22:
         1e:1a:31:75:01:d8:5f:e1:15:cc:29:86:c9:0f:e1:92:fa:76:
         99:ec:4d:9c:76:3a:69:69:48:12:96:91:4f:71:2e:ab:d5:e8:
         a0:49:6b:5f:32:06:18:e0:83:70:69:00:ab:d6:dc:f4:dd:c2:
         4a:9e:f5:dc:40:66:9d:69:aa:05:c8:14:07:f6:71:36:f2:08:
         5b:d8:17:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI1MzExMTAvBgNVBAUTKDlBODM5MEZGQ0VFNDYyODJDQUE3MUNERDc4RjA2Njk0
RjhEM0Q1QjYwHhcNMjYwNzI3MDg1NTUwWhcNMjYwODAzMDg1NTUwWjAYMRYwFAYD
VQQDEw02YTY3MWQxNy0wMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3UgCvQd6xoq/9us/z44sPNDYZcE/SwV+cQ8NCxsYmy60unMNOqCtmTxkG5gu
rki1RVctuw/uqft++iDUpa8m1Dqzl8q/hKd1fTan/5XgC1thFLBCGuank8gs1VFZ
LgTidaHN3t8j32FPmX6HcvmKxJnd5QnCrD/ByoRjJneHjUb7uuxlqdDDLKpRUmgT
ZdkB27CJ/zgf7eP/Gu1OaiMqUsEkxi9RhikVuiEXqbNdCvdmaeRwhM5pni+QLGQc
MCDDMfkZoUIUdy8x3r8mGcOc4f0mXyBdqU+LmMM6lNma7rqYtiC8t6M06mTnZZ39
MuF7xpb0LS7M/gJ4HhACrz1fTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwyDE6M
BarrC2iEIIdqvdWaj8neMB8GA1UdIwQYMBaAFJqDkP/O5GKCyqcc3XjwZpT409W2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjUzMS8wMTg0OTQ1MjU2
RjUxMUYwQjgzOTRCODRDNEY5QUUwMi9tb09RXzg3a1lvTEtweHpkZVBCbWxQalQx
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21vT1FfODdrWW9MS3B4emRlUEJtbFBqVDFiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjUzMS8wMTg0OTQ1MjU2RjUxMUYwQjgzOTRCODRDNEY5QUUwMi9tb09RXzg3a1lv
TEtweHpkZVBCbWxQalQxYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdQToIhJ3ry8MqDi5EoMhTJo8yEMtbiouRb586BVWItKHwpcvWYqoKABqmay1
onj8KQhlbp2lqi5S2mAuy+Xtcj+ngPzpzEUCljVdJPMr6C0z2Pa69ZSHqBOfFMOf
y2Tajey/FaIAVqR39edaXrBzwvrJyrwud9wOejf2jvUlYGrB49gcGMSGjLk9rOGZ
ZAivIrAOk0AgZKBwQg21Ympf6HjMvbSiG2mNowWaz1cK6QYzmDYiHhoxdQHYX+EV
zCmGyQ/hkvp2mexNnHY6aWlIEpaRT3Euq9XooElrXzIGGOCDcGkAq9bc9N3CSp71
3EBmnWmqBcgUB/ZxNvIIW9gXag==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:27 2026 by rpki-client