Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
File:                     OpBsYeE9uJ5h3MrxA2oyvtqof18.mft (raw, json)
Hash identifier:          VqVcIx7IJIEvsofcud5PeoSIcPWr/R6MQ/ZysfL130Q=
Subject key identifier:   39:86:8B:5D:9D:20:53:6A:D8:0E:AE:EC:49:BA:E5:14:7B:09:57:C7
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Certificate issuer:       /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
Manifest number:          33
Signing time:             Wed 29 Jul 2026 10:17:45 +0000
Manifest this update:     Wed 29 Jul 2026 10:17:45 +0000
Manifest next update:     Wed 05 Aug 2026 10:17:45 +0000
Files and hashes:         1: OpBsYeE9uJ5h3MrxA2oyvtqof18.crl (hash: /REjt8a1HK5cLZ6FnTDwuVVcyJH4zmHPtnN8idbS6U8=)
                          2: 1B095A06869811F184DE0C3C6EA30FBC.roa (hash: f8BDbd1V8OOTxeth43R3JsquIgRX5kFT2OaagVfMyiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
                          rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 10:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
        Validity
            Not Before: Jul 29 10:17:45 2026 GMT
            Not After : Aug  5 10:17:45 2026 GMT
        Subject: CN=6a69d349-b8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3f:d3:3d:ab:67:4f:3e:f7:82:8e:1a:6a:26:
                    fc:3f:4d:26:81:9b:5b:f0:8c:4a:06:05:c7:1b:74:
                    21:a9:16:0f:7e:e0:91:4b:19:71:86:a9:3e:b6:8e:
                    c2:52:d6:f6:d7:b7:2c:64:95:99:18:c9:90:bf:59:
                    84:a5:1e:1e:1d:c7:5d:a5:c3:39:fc:5b:7a:87:10:
                    c1:cc:f5:10:a4:c1:56:dc:41:3a:14:bd:85:d5:19:
                    fd:7d:9e:34:58:38:c2:23:82:c1:57:13:f3:7f:e3:
                    16:da:dc:a7:4a:c8:97:cb:9c:6f:bb:79:30:6d:19:
                    85:cd:5a:e4:e4:eb:52:d8:fc:df:ef:bb:e9:d5:2b:
                    3d:0d:9a:06:15:77:43:b1:c9:df:6b:b6:3d:2c:8e:
                    e2:10:81:60:fe:e2:3f:00:cb:97:b5:ac:e8:c7:bd:
                    b4:5e:f5:76:31:cc:a0:7e:8d:06:42:42:89:d0:24:
                    49:43:14:64:22:3f:a8:d6:74:c3:25:9b:66:14:d9:
                    21:ad:c7:d3:4c:e6:93:99:da:88:67:f8:02:22:ba:
                    10:f8:58:53:35:25:62:e4:05:d7:b3:fa:82:49:d6:
                    ab:cf:eb:fe:01:d8:8e:78:ad:ec:66:4b:d7:45:11:
                    96:7d:77:15:53:25:e4:89:f7:0a:1b:64:22:2f:85:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:8B:5D:9D:20:53:6A:D8:0E:AE:EC:49:BA:E5:14:7B:09:57:C7
            X509v3 Authority Key Identifier:
                keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:1f:dd:ea:96:0f:61:9f:a8:b1:a4:fa:08:5d:ca:ab:6d:
         b6:e2:31:d2:f1:4a:c7:33:69:03:18:14:f5:11:4a:08:ec:41:
         b5:7e:d7:5f:43:ca:d6:60:a8:64:b5:be:08:e5:6a:b6:29:b4:
         cb:2e:0e:7b:f7:d1:43:a0:71:a0:c6:a1:ee:06:23:1d:1e:50:
         9f:92:87:ed:13:f7:68:e8:9d:08:4a:51:29:5b:77:67:d0:12:
         05:20:7c:26:f1:c2:02:87:41:7f:e9:a4:30:76:98:f4:5a:04:
         3c:e9:cd:00:a1:64:2f:d5:b6:81:84:a0:bf:2b:c9:ad:70:97:
         fa:9f:e0:fe:bd:ee:e6:de:46:bd:63:c5:6d:8d:07:64:92:36:
         21:8b:fc:e0:b9:db:bb:a5:50:dd:75:a0:41:84:14:1c:48:4a:
         e4:84:02:67:2d:90:bf:81:75:4d:77:66:45:e8:c4:f8:a7:02:
         02:25:61:5b:26:fb:5b:ec:68:59:e9:dd:e1:54:1e:a7:2e:af:
         0d:ca:a8:d7:63:fa:bd:ed:1b:c5:16:7c:eb:ea:be:7d:2a:95:
         34:95:72:81:96:86:e4:52:3f:17:e3:d1:7c:c0:8b:fa:33:31:
         2b:9a:b1:d3:c1:c5:dd:d0:ef:c9:a0:64:17:c1:29:da:b0:37:
         1e:07:f8:ad
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODU1RjExMC8GA1UEBRMoM0E5MDZDNjFFMTNEQjg5RTYxRENDQUYxMDM2QTMyQkVE
QUE4N0Y1RjAeFw0yNjA3MjkxMDE3NDVaFw0yNjA4MDUxMDE3NDVaMBgxFjAUBgNV
BAMTDTZhNjlkMzQ5LWI4ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD0P9M9q2dPPveCjhpqJvw/TSaBm1vwjEoGBccbdCGpFg9+4JFLGXGGqT62jsJS
1vbXtyxklZkYyZC/WYSlHh4dx12lwzn8W3qHEMHM9RCkwVbcQToUvYXVGf19njRY
OMIjgsFXE/N/4xba3KdKyJfLnG+7eTBtGYXNWuTk61LY/N/vu+nVKz0NmgYVd0Ox
yd9rtj0sjuIQgWD+4j8Ay5e1rOjHvbRe9XYxzKB+jQZCQonQJElDFGQiP6jWdMMl
m2YU2SGtx9NM5pOZ2ohn+AIiuhD4WFM1JWLkBdez+oJJ1qvP6/4B2I54rexmS9dF
EZZ9dxVTJeSJ9wobZCIvhYmXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOYaLXZ0g
U2rYDq7sSbrlFHsJV8cwHwYDVR0jBBgwFoAUOpBsYeE9uJ5h3MrxA2oyvtqof18w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NTVGLzYwRDc4MTU0NDI2
NzExRjFCNzYxNTdGRUEzODMzNzczL09wQnNZZUU5dUo1aDNNcnhBMm95dnRxb2Yx
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT3BCc1llRTl1SjVoM01yeEEyb3l2dHFvZjE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
NTVGLzYwRDc4MTU0NDI2NzExRjFCNzYxNTdGRUEzODMzNzczL09wQnNZZUU5dUo1
aDNNcnhBMm95dnRxb2YxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAKTx/d6pYPYZ+osaT6CF3Kq2224jHS8UrHM2kDGBT1EUoI7EG1ftdfQ8rWYKhk
tb4I5Wq2KbTLLg5799FDoHGgxqHuBiMdHlCfkoftE/do6J0ISlEpW3dn0BIFIHwm
8cICh0F/6aQwdpj0WgQ86c0AoWQv1baBhKC/K8mtcJf6n+D+ve7m3ka9Y8VtjQdk
kjYhi/zgudu7pVDddaBBhBQcSErkhAJnLZC/gXVNd2ZF6MT4pwICJWFbJvtb7GhZ
6d3hVB6nLq8NyqjXY/q97RvFFnzr6r59KpU0lXKBlobkUj8X49F8wIv6MzErmrHT
wcXd0O/JoGQXwSnasDceB/it
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:21:39 2026 by rpki-client