Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File:                     MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier:          6J49TUU7f3ttR1BrmRuEhWa2tu8F94ddJW2/vbFVuV8=
Subject key identifier:   68:9E:FC:D5:68:DD:63:29:51:03:6C:9E:A8:E9:D6:E7:D3:75:6E:4E
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer:       /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial:       1543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number:          1524
Signing time:             Sun 20 Sep 2026 16:46:57 +0000
Manifest this update:     Sun 20 Sep 2026 16:46:57 +0000
Manifest next update:     Sun 27 Sep 2026 16:46:57 +0000
Files and hashes:         1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: kw2PRw0UkbTt9Sd03RX6pmInNKGJbU+pnLhKLPtslxY=)
                          2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: hNpWfzStSxoi1fPkxcbnh4V9DqsCkVyC0AQQMNFEtXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
                          rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5443 (0x1543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
        Validity
            Not Before: Sep 20 16:46:57 2026 GMT
            Not After : Sep 27 16:46:57 2026 GMT
        Subject: CN=6ab00e01-fb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:37:c6:e9:37:db:e4:53:70:29:19:3f:7a:
                    26:98:33:08:fc:c7:7e:4c:65:59:8e:61:10:14:e5:
                    55:e2:35:d4:a4:09:48:99:69:e5:40:4c:7e:25:77:
                    1d:e5:f1:c4:b2:17:04:e5:c8:55:af:f8:02:84:a0:
                    c5:01:4a:23:d8:d9:9a:99:06:d6:b5:ee:7f:42:51:
                    d4:73:70:8a:8e:33:53:15:d6:8c:df:c6:33:09:4d:
                    59:98:7d:6d:25:d8:26:a0:6d:6f:e5:e9:e5:13:85:
                    0d:31:2d:ec:e6:26:39:b2:98:75:3f:bf:28:24:2e:
                    b6:c0:54:01:18:d7:5f:5c:4c:f6:3b:c7:3f:25:ee:
                    d4:05:bd:4b:65:7b:00:b9:28:88:d7:74:d6:8f:65:
                    fd:32:e3:dd:34:ed:c9:ba:b8:8a:7f:26:84:ed:da:
                    4f:ab:25:e8:ac:da:43:37:37:f5:b3:47:3b:b1:92:
                    f4:f9:b7:6e:16:cb:01:ec:f3:63:0a:06:31:15:1f:
                    b5:72:94:f1:55:f3:1f:02:c7:a5:1c:2b:9d:1c:23:
                    69:69:3c:35:00:4f:80:2f:d5:9d:9e:70:f7:8b:5e:
                    f6:81:ee:30:30:95:22:b5:2d:0f:ac:c0:4f:4a:2f:
                    b6:b6:0c:43:b4:2f:61:e0:45:a9:47:2a:a6:05:46:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:FC:D5:68:DD:63:29:51:03:6C:9E:A8:E9:D6:E7:D3:75:6E:4E
            X509v3 Authority Key Identifier:
                keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:62:58:cd:35:cd:df:12:4c:23:47:ce:0c:f8:60:33:c6:
         98:7b:ea:69:1d:7f:65:62:94:cb:4f:54:b8:c5:27:3c:d2:26:
         c0:ca:37:66:20:23:f7:94:24:51:c7:a3:f3:83:84:1b:c4:8f:
         44:ba:3f:74:40:00:78:10:26:c2:e7:bd:87:f7:18:c9:dd:3b:
         88:b7:ac:cd:6f:59:82:43:1d:5c:a4:0e:6c:69:82:fa:93:e8:
         01:3a:58:59:95:a2:7a:cd:f7:96:6f:fd:11:36:84:29:01:93:
         3f:57:26:a6:d6:a2:09:9a:41:4f:d9:82:f0:63:d1:e3:d3:f2:
         9b:f7:17:22:e8:7c:09:b1:3d:d8:12:ff:6b:2d:56:0e:cb:0e:
         6d:98:32:af:46:6c:69:f4:03:06:52:94:0a:dd:4d:b2:ef:7f:
         ad:03:f0:3f:2b:f0:54:26:3f:54:c9:04:c7:c5:39:4a:73:40:
         3c:48:81:64:ea:ce:e4:db:d3:49:90:ca:7f:a2:17:43:2e:50:
         4f:ac:96:45:52:8d:11:51:72:8a:b9:b6:7f:7f:5b:c3:33:fb:
         b0:61:f5:04:85:74:ad:be:6c:48:ef:2b:af:98:22:87:62:c7:
         6a:68:56:b0:fe:30:ef:c2:da:75:70:47:96:26:bc:56:7d:21:
         80:bd:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:32:10 2026 by rpki-client