Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File:                     mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier:          lf5fPX/HyK6dsKPJMEda5J7x+LprTt4x2JJKiKQqe5o=
Subject key identifier:   52:C3:34:CB:1D:76:31:58:F2:F8:98:C0:6D:C2:EA:6C:B9:3E:78:23
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer:       /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number:          01A9
Signing time:             Fri 17 Apr 2026 04:02:04 +0000
Manifest this update:     Fri 17 Apr 2026 04:02:03 +0000
Manifest next update:     Fri 24 Apr 2026 04:02:03 +0000
Files and hashes:         1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: o+nRLSowVzvFbe8oTgGDWwDitgTvc5rDUhaTj+Zvszw=)
                          2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: Olday+AXi3Qq8gq780450bntMRq7xAhbF+H8ZFEm5II=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
        Validity
            Not Before: Apr 17 04:02:03 2026 GMT
            Not After : Apr 24 04:02:03 2026 GMT
        Subject: CN=69e1b0bc-6662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:20:f6:17:de:53:59:af:54:df:ff:76:fe:
                    d3:a2:36:f8:8c:d1:9e:4f:2f:12:3e:51:bc:0c:42:
                    77:f4:bd:22:5e:b1:d6:82:93:f5:78:d9:3c:b9:79:
                    f8:b5:2e:cc:f7:3a:8b:39:cc:a8:8c:fc:a1:37:39:
                    70:16:78:4d:7b:17:c1:02:a8:c1:26:2c:76:2f:75:
                    12:80:fd:ce:34:7a:8d:b4:41:f5:c3:c8:44:2a:6d:
                    e8:4a:52:7a:b2:d4:ba:8f:88:39:b6:80:ef:ec:cb:
                    47:2a:0b:33:fb:07:15:f4:9e:1a:72:2b:23:7a:a2:
                    b3:d3:9e:9e:75:1c:b0:a4:68:01:b2:d4:21:73:a6:
                    14:6e:df:8d:72:4e:56:87:6d:bc:a2:72:62:f4:50:
                    01:80:ec:a8:07:70:d8:fb:67:56:2b:00:14:49:03:
                    53:e1:d6:80:54:eb:77:23:92:2a:80:04:eb:d8:23:
                    c6:97:88:3c:e2:b6:d3:f8:73:3e:04:0a:0c:c4:e3:
                    53:33:d7:ce:23:be:9f:81:cc:d1:8a:ed:75:ca:31:
                    a3:d7:aa:4f:fe:e6:dd:35:ea:ab:43:5b:51:3d:5f:
                    f6:c6:df:32:fa:75:e1:0d:c5:86:f8:79:f7:61:7a:
                    75:30:3c:3b:b6:80:b7:78:9d:c1:15:0c:66:c6:99:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C3:34:CB:1D:76:31:58:F2:F8:98:C0:6D:C2:EA:6C:B9:3E:78:23
            X509v3 Authority Key Identifier:
                keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:11:52:64:a4:81:d5:51:6e:f1:55:a7:3e:e2:4d:d7:32:ff:
         01:a4:e9:70:d6:93:e5:7f:cd:67:e7:82:46:2a:99:1a:e0:f4:
         3f:6d:b7:b9:2c:9e:c4:9a:3b:69:fd:0b:2c:3e:20:a7:e5:79:
         bf:ab:73:06:4e:ee:4c:48:a0:c2:a1:67:74:8a:d5:44:b6:47:
         1c:83:69:b7:3b:69:f9:5b:36:2d:04:33:2b:19:79:5a:47:b5:
         f2:23:81:72:59:96:4d:84:d8:56:1a:e6:d1:4f:a5:8d:9d:2c:
         59:e1:fa:c3:65:01:49:d2:c2:5c:20:58:fd:92:08:ce:34:8c:
         a1:7c:43:1e:c0:61:e1:52:0a:57:18:e0:73:ad:ed:92:1e:da:
         7d:8f:f8:20:1c:31:8e:d4:5b:f5:d3:8a:72:33:9d:d6:91:02:
         9a:09:11:99:84:a4:fd:86:a5:1d:02:da:3a:b0:77:fc:31:ed:
         3d:db:73:5c:2d:cc:e2:da:6b:ef:18:41:1f:1b:03:db:aa:e0:
         a2:57:07:15:10:ac:ea:3c:11:17:a1:d2:c5:35:35:37:06:69:
         7d:52:c6:b5:c5:f4:a4:41:4d:9f:1c:3a:31:0b:86:19:52:13:
         5a:65:96:14:17:be:0a:00:77:90:07:84:09:91:00:d3:3f:a5:
         27:cc:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:57:39 2026 by rpki-client