Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
File:                     MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json)
Hash identifier:          uQp3BlAvYN9GfHbaXE+ZyICK+N3oRJUdDe6J3CnOyvk=
Subject key identifier:   CC:84:3B:E9:40:1B:6F:DD:38:53:AE:B0:CF:C6:C2:32:07:4E:54:FB
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Certificate issuer:       /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial:       0ACD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
Manifest number:          0AB0
Signing time:             Sun 20 Sep 2026 19:27:15 +0000
Manifest this update:     Sun 20 Sep 2026 19:27:15 +0000
Manifest next update:     Sun 27 Sep 2026 19:27:15 +0000
Files and hashes:         1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: 3KYMdYG+jT+AfWRUFHO91U0D1V5RxuZZTMO8HJLTCuw=)
                          2: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=)
                          3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=)
                          4: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765 (0xacd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
        Validity
            Not Before: Sep 20 19:27:15 2026 GMT
            Not After : Sep 27 19:27:15 2026 GMT
        Subject: CN=6ab03393-b4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:89:66:f2:67:0f:f7:1d:68:c3:04:50:f8:
                    94:8d:41:e1:69:d6:98:03:b1:99:fe:41:dc:21:ec:
                    e1:99:3e:5c:fc:1b:79:f1:b7:04:d5:0b:7e:be:d4:
                    16:70:cd:97:b3:9d:f5:86:97:3b:f2:ab:72:50:da:
                    ea:54:81:cf:a9:70:8e:fd:12:b2:66:86:7a:52:13:
                    74:4e:d6:52:0b:cb:29:09:35:b8:be:ab:72:b4:ff:
                    b3:23:75:bc:a5:f0:05:a4:78:3d:9a:92:a6:54:1b:
                    fa:62:7a:44:3d:1e:99:18:1b:d5:56:54:94:18:40:
                    ad:a8:70:e7:76:e0:0b:8a:37:d9:7f:c6:95:8e:0e:
                    a7:7d:42:d4:46:02:b9:8d:f1:2a:b4:58:fb:31:32:
                    cd:76:14:56:b6:e4:47:c5:9e:52:89:ab:0a:a9:8e:
                    a4:7d:89:76:26:3a:78:d4:26:ea:1f:21:f9:f2:cd:
                    3d:59:37:d6:c1:72:6a:f4:67:03:72:e3:51:38:51:
                    dd:44:1a:d3:12:69:2a:a5:57:62:69:2d:a6:05:fd:
                    8f:14:6d:71:78:fe:b7:4a:bf:5c:d7:cb:08:6b:6b:
                    ba:61:01:5a:42:9d:38:47:e4:fc:6d:97:e0:e5:9f:
                    d6:be:e2:48:84:76:5c:d5:b7:28:36:56:8f:52:07:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:3B:E9:40:1B:6F:DD:38:53:AE:B0:CF:C6:C2:32:07:4E:54:FB
            X509v3 Authority Key Identifier:
                keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c3:19:08:ee:c2:3c:ba:38:0a:4a:59:9c:b4:84:ad:72:a6:
         e9:ab:05:13:12:3f:ed:9f:aa:68:2a:b2:2d:51:0c:d5:e4:8b:
         5e:7f:15:4e:75:dc:31:05:41:ed:7c:5f:f2:d7:76:9e:87:21:
         cb:21:5e:a2:2a:2d:08:99:6d:c9:e3:3b:27:61:57:1f:ac:c3:
         56:83:c3:b2:23:5c:d1:91:ff:cd:12:81:9b:f6:b1:2b:67:6d:
         2f:69:45:b9:8b:f2:ef:a7:5e:3d:87:3a:a5:c1:17:60:e7:73:
         b3:8d:1c:1c:af:fd:28:bd:97:53:e0:74:a0:2d:a1:4f:a4:7d:
         80:19:c3:78:1e:83:cb:a8:76:00:58:35:e9:6f:9b:64:6c:05:
         cf:ab:66:07:42:cf:8d:b0:0f:2f:41:8a:87:02:84:6c:24:a3:
         6c:d8:7d:91:a8:3b:3b:75:46:4e:97:ab:4c:2a:ba:1a:4a:68:
         eb:39:e0:a7:c4:cc:78:ce:95:b1:68:0c:51:3f:91:cb:30:9f:
         b4:86:10:c3:d2:ee:e5:3f:83:1d:ba:43:6a:56:83:a7:18:77:
         50:1d:c6:bd:3b:72:1e:d9:78:8e:95:27:fd:db:58:a7:d9:fe:
         e5:cc:48:f1:46:be:46:8c:c9:dd:fd:7e:83:ff:86:17:a8:fe:
         c6:65:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:50:15 2026 by rpki-client