Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File:                     MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier:          m+ch23qzJ5z/z/0IGLjGGwRhQrjl29a+43nJzehUS6c=
Subject key identifier:   36:8D:39:3D:F6:ED:C3:76:3C:75:48:4F:6F:E8:74:68:8E:CA:AD:73
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       03C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number:          039B
Signing time:             Mon 03 Nov 2025 00:52:14 +0000
Manifest this update:     Mon 03 Nov 2025 00:52:14 +0000
Manifest next update:     Mon 10 Nov 2025 00:52:14 +0000
Files and hashes:         1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: 7YVCo3g2mgF6J013A/GAbfDzAttjMU3/buNoly8xAfU=)
                          2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: rYHOV+63ySve2lLbeG71M0SUbKfF20oOi9uas6YcF+A=)
                          3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=)
                          4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: Qa66QzBziJdm9L3gqGzaylVuTVRVatV8AuZ/B+L6zpk=)
                          5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=)
                          6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: hUEi5Mxm1d2fdxW2k3TL0lrkSD9s1MOK7bqcVMZxr0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Nov  3 00:52:14 2025 GMT
            Not After : Nov 10 00:52:14 2025 GMT
        Subject: CN=6907fcbe-638b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:00:5a:3f:68:96:2d:0b:8b:70:ef:60:4f:
                    9c:ac:5a:59:f4:ab:95:c7:99:d1:90:4e:f6:b2:63:
                    1a:3d:f6:52:fa:c2:fe:0a:b2:48:8a:1a:91:e8:13:
                    8b:df:64:05:34:18:72:87:42:da:40:ef:dc:d0:8b:
                    f1:a1:7c:ee:58:a3:4d:57:e8:f9:b5:1f:9b:a2:76:
                    21:c3:cc:e1:75:b0:c9:17:c6:e4:c9:07:11:6d:30:
                    72:52:c3:cf:18:8d:22:09:7b:f8:e8:99:f7:23:76:
                    53:ab:f3:da:0b:f2:cc:4b:28:1a:df:be:8b:5a:25:
                    8d:34:74:d9:04:2c:f1:32:5c:50:12:27:6d:bb:25:
                    b8:ee:0b:4b:aa:20:59:58:99:45:96:d6:8b:10:5a:
                    7e:e0:8e:f7:86:48:6c:e5:a9:b8:9f:12:8e:bf:b5:
                    a1:5d:f3:2f:6b:7f:15:95:46:05:a0:74:2c:50:76:
                    45:ea:9d:b0:25:a2:8e:e4:79:1d:94:66:7a:28:61:
                    2a:8c:2c:b4:a4:41:e2:15:3c:a7:ec:d3:19:fc:af:
                    7b:d1:ab:22:de:94:f5:c9:41:9d:4b:97:6c:04:0e:
                    67:cb:5e:27:46:da:02:d8:dd:94:05:1d:4d:ca:92:
                    7d:9e:d9:f5:f6:46:dc:77:be:46:9a:a3:25:1a:2d:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8D:39:3D:F6:ED:C3:76:3C:75:48:4F:6F:E8:74:68:8E:CA:AD:73
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:43:11:91:70:8c:da:b7:08:2e:28:93:a9:e4:21:75:df:
         81:a1:5e:2d:ab:56:69:f0:9b:89:b0:f7:4e:af:c2:c0:86:9c:
         e7:3c:c8:17:a1:d8:4d:df:e7:7b:b2:0f:8e:3b:ae:10:65:e5:
         e3:4b:46:f2:c8:74:39:b1:58:d5:0c:8a:16:3f:33:40:09:8d:
         c2:7a:eb:9d:a7:23:5d:29:00:cf:75:9c:87:db:35:91:73:17:
         fe:27:c1:b8:32:a1:02:4a:c8:6f:9c:a1:f6:d3:bd:62:8c:98:
         90:46:fe:33:5f:49:a0:2c:b1:3c:d9:6d:e4:e9:76:58:62:27:
         21:2f:fe:82:5c:3d:a3:16:92:56:fa:09:3c:03:a5:1f:48:1d:
         db:f0:14:7f:f5:7a:c0:75:41:b7:dd:fd:53:af:5d:3a:0a:b2:
         7b:cc:88:6b:04:25:bc:13:b4:f9:d6:17:ba:61:43:a9:73:c2:
         9b:f9:90:4b:83:5e:a7:25:5d:49:83:fe:0a:22:5a:27:fe:3e:
         53:5e:02:e7:c4:b3:90:56:3c:2b:b9:42:f6:41:da:bb:72:f6:
         fd:8c:dc:21:98:9c:c2:d5:3f:ec:ff:52:e8:ec:97:10:3a:54:
         1e:25:bc:7b:1f:2b:f3:6b:25:7c:26:73:a3:4d:c1:0d:f5:e5:
         5d:dd:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:16:56 2025 by rpki-client