Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File:                     mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier:          KPCQE//ABABAeC72ZaO//gNPWUKYjCPNed9A1NxL5qs=
Subject key identifier:   59:BE:38:D7:FA:85:BD:7D:7A:A0:1E:1C:E4:FE:1C:A6:1A:CE:71:6B
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer:       /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number:          01F8
Signing time:             Mon 21 Sep 2026 03:28:01 +0000
Manifest this update:     Mon 21 Sep 2026 03:28:01 +0000
Manifest next update:     Mon 28 Sep 2026 03:28:01 +0000
Files and hashes:         1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: GmGfERE4R7XhL2WRTuE8LCbUKwV5hxZ3VgJ6xXdb4hc=)
                          2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: Olday+AXi3Qq8gq780450bntMRq7xAhbF+H8ZFEm5II=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
        Validity
            Not Before: Sep 21 03:28:01 2026 GMT
            Not After : Sep 28 03:28:01 2026 GMT
        Subject: CN=6ab0a441-48db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:88:6a:63:73:cd:6f:8e:70:ea:17:cb:e9:
                    d0:8d:d2:b1:b9:c7:d3:05:74:41:2e:59:05:2d:98:
                    71:4f:2c:43:9f:32:19:dc:2b:90:f0:2a:82:a8:a6:
                    89:f5:d2:a4:f9:64:d8:af:0c:b9:44:84:12:66:cc:
                    fc:12:26:88:9b:b0:ad:a0:2d:44:9d:74:86:cd:20:
                    99:6a:5a:c3:9d:93:d7:55:0f:1b:f5:b2:5a:f5:26:
                    e8:17:b0:60:0a:f3:52:c1:90:f5:94:05:34:89:40:
                    81:8f:ae:48:bf:95:c6:80:17:35:12:fb:b3:04:71:
                    6d:64:be:fb:fd:ee:25:1a:5a:5d:2f:d4:65:21:97:
                    ba:6e:a2:a7:d4:9e:87:71:12:bd:14:3a:36:50:6e:
                    73:ec:da:5b:b8:1d:7e:a5:8e:be:96:11:27:fd:ec:
                    92:77:86:b4:95:fc:f4:f5:ba:96:d4:da:b4:f6:28:
                    77:a8:f9:4e:ee:10:29:bb:b3:46:d8:e5:ea:46:e7:
                    9f:09:eb:f6:62:d8:59:2a:7e:5b:9b:ff:9d:53:f9:
                    67:24:3a:9d:b0:1e:9b:aa:f7:50:ef:1a:4e:81:fa:
                    9e:7c:6a:ba:a5:55:29:cf:b6:cc:f5:29:18:a1:93:
                    30:22:bf:ff:ee:6d:ac:af:20:24:fb:6f:3e:6f:c0:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:38:D7:FA:85:BD:7D:7A:A0:1E:1C:E4:FE:1C:A6:1A:CE:71:6B
            X509v3 Authority Key Identifier:
                keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:45:45:a9:1b:b1:b2:a6:61:39:d8:c7:f0:65:0f:e3:61:
         96:42:f4:b5:01:e4:0c:ba:3f:05:b9:a3:e1:d2:4d:c1:9d:2b:
         ae:4b:4c:ba:54:7c:dc:9f:98:b0:4c:44:19:ef:ef:25:9a:30:
         1c:2b:05:bf:f1:c3:34:4a:25:28:ff:11:78:31:d9:09:5b:52:
         53:e9:ed:b6:8c:d5:70:a0:cd:3e:bf:ee:93:84:4d:33:69:52:
         79:a6:3d:2b:48:03:1f:05:1e:2f:c9:03:e6:35:86:77:d0:1f:
         8d:c6:14:3b:40:34:cd:66:00:96:67:99:25:d4:af:c9:0f:25:
         9b:c6:17:c6:56:82:dc:af:dd:75:3b:85:7e:d7:7d:46:e9:4c:
         4e:86:de:b7:25:92:03:d4:43:ab:8a:e9:ec:d5:c2:4e:47:4a:
         15:35:03:99:93:ea:b4:2d:b1:fa:4c:ea:5b:88:d6:4a:ac:ba:
         f9:a0:f2:23:0f:e6:d9:3b:0d:fd:cb:50:6c:30:a9:3a:ca:f0:
         0a:58:82:df:7e:23:9a:f4:d6:01:bf:6f:62:6f:07:e0:04:40:
         9b:40:b4:75:aa:47:60:4f:c3:b6:e6:9e:e6:eb:08:55:dd:36:
         1f:f8:52:b5:bd:4a:09:b2:d4:a3:90:7b:4f:5a:c6:2a:ab:00:
         b5:6a:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:26:02 2026 by rpki-client