Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
File:                     OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json)
Hash identifier:          DKQzBuH3kLzAmFznffJ+ZP/N30d4dl1TLcAHTfh3IQE=
Subject key identifier:   58:E6:71:3F:35:28:5C:52:6C:77:8B:51:B3:B9:0D:B2:A3:B3:17:BD
Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA
Certificate issuer:       /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
Manifest number:          97
Signing time:             Mon 27 Jul 2026 09:32:49 +0000
Manifest this update:     Mon 27 Jul 2026 09:32:49 +0000
Manifest next update:     Mon 03 Aug 2026 09:32:49 +0000
Files and hashes:         1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: d7+91OZrNyINr2f9E1aYUQ9a0Ut/qj0maM/D7Jv07p8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
        Validity
            Not Before: Jul 27 09:32:49 2026 GMT
            Not After : Aug  3 09:32:49 2026 GMT
        Subject: CN=6a6725c1-8cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:04:76:a6:45:9f:cd:bd:b1:7e:39:43:8b:
                    40:1d:1b:8d:59:29:2c:c5:7c:8f:46:83:40:c2:60:
                    57:41:27:b1:32:bd:87:66:bd:3c:6f:0f:bd:ff:be:
                    4e:cb:34:4f:03:ad:30:19:d4:1d:6a:ea:52:eb:8f:
                    61:fe:c8:66:63:00:01:04:49:9d:d1:ee:77:c7:82:
                    ec:45:bc:55:5f:5b:3a:b0:3b:6f:9d:99:5c:05:1f:
                    c3:64:ad:39:30:4d:c2:ca:8f:ee:22:a4:97:84:13:
                    7a:7b:9d:11:68:c6:e0:5a:7a:cf:14:82:77:99:b0:
                    7e:30:b4:a4:96:87:c6:26:a1:d0:98:34:0d:79:b1:
                    2c:01:ed:43:90:4f:25:23:0d:29:2a:f1:1d:c1:09:
                    a3:50:f6:5b:8a:86:b2:6e:4f:a4:f0:47:be:3a:41:
                    f6:ac:35:1e:00:93:43:22:b3:9c:3d:01:fb:25:f4:
                    37:bd:46:57:bf:06:a4:33:bc:dd:ad:3d:bd:b1:fe:
                    8d:c9:bb:79:75:5a:26:fb:0f:fe:3a:e0:f9:54:a6:
                    08:56:f5:14:d4:e7:40:82:9b:7c:d1:b4:2e:fe:a4:
                    2c:2e:55:d4:7b:2a:6c:8c:5f:1d:76:30:0d:31:5b:
                    c3:2b:d4:f6:d5:96:ae:7d:83:2f:0f:58:fe:d2:1d:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:71:3F:35:28:5C:52:6C:77:8B:51:B3:B9:0D:B2:A3:B3:17:BD
            X509v3 Authority Key Identifier:
                keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:35:a6:7f:9f:87:d8:75:d8:41:50:7f:4e:58:db:d2:fc:50:
         50:f8:85:2a:13:7c:05:54:77:06:82:24:32:9b:1c:49:74:c4:
         43:d2:81:e2:1e:33:25:f4:ea:5f:34:da:8e:91:03:cc:2e:d3:
         19:98:53:da:11:d7:39:95:28:d0:21:14:7c:61:44:47:d5:9a:
         fc:79:79:c3:35:fc:dc:e0:48:15:c1:64:03:fa:9e:3f:2f:06:
         18:d1:be:7c:72:01:01:bb:54:57:d7:a0:94:b5:d0:67:87:d5:
         75:d1:79:50:19:dd:34:7f:dc:85:7d:9a:42:a5:d8:42:3e:20:
         f9:2f:4b:09:d9:d9:9b:7f:98:4c:a0:b0:c0:3f:7c:b0:aa:6b:
         cb:90:74:b4:3f:9d:56:92:36:1f:ab:04:98:27:02:42:59:8d:
         86:33:50:5d:06:c0:c7:fc:9b:2f:9c:47:f9:cd:f0:1b:01:2d:
         b6:54:a5:d9:9f:cc:cc:75:7f:a8:99:a3:81:2d:72:44:d6:3d:
         c4:a4:14:15:42:e6:ed:14:02:2d:a2:15:c2:0f:1f:db:ae:25:
         62:82:2c:93:9a:c3:1d:3b:b4:3b:6c:b6:0a:4b:f8:f0:31:17:
         b0:d5:7c:1c:92:cc:40:3e:a7:e1:1f:83:4a:62:6b:0a:af:8d:
         f0:9d:8f:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBRUUxMTAvBgNVBAUTKDNBOTcxRjQyRkZCMDZCMkEwNkM5NzkyRkQ0RjA4NTEz
NkQxNDJCRUEwHhcNMjYwNzI3MDkzMjQ5WhcNMjYwODAzMDkzMjQ5WjAYMRYwFAYD
VQQDEw02YTY3MjVjMS04Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8QEdqZFn829sX45Q4tAHRuNWSksxXyPRoNAwmBXQSexMr2HZr08bw+9/75O
yzRPA60wGdQdaupS649h/shmYwABBEmd0e53x4LsRbxVX1s6sDtvnZlcBR/DZK05
ME3Cyo/uIqSXhBN6e50RaMbgWnrPFIJ3mbB+MLSklofGJqHQmDQNebEsAe1DkE8l
Iw0pKvEdwQmjUPZbioaybk+k8Ee+OkH2rDUeAJNDIrOcPQH7JfQ3vUZXvwakM7zd
rT29sf6Nybt5dVom+w/+OuD5VKYIVvUU1OdAgpt80bQu/qQsLlXUeypsjF8ddjAN
MVvDK9T21ZaufYMvD1j+0h02eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjmcT81
KFxSbHeLUbO5DbKjsxe9MB8GA1UdIwQYMBaAFDqXH0L/sGsqBsl5L9TwhRNtFCvq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEFFRS8yMUUzRjM2NkEz
RUMxMUYwQjhFOTdGMzdDNEY5QUUwMi9PcGNmUXYtd2F5b0d5WGt2MVBDRkUyMFVL
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUstby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEFFRS8yMUUzRjM2NkEzRUMxMUYwQjhFOTdGMzdDNEY5QUUwMi9PcGNmUXYtd2F5
b0d5WGt2MVBDRkUyMFVLLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkjWmf5+H2HXYQVB/Tljb0vxQUPiFKhN8BVR3BoIkMpscSXTEQ9KB4h4zJfTq
XzTajpEDzC7TGZhT2hHXOZUo0CEUfGFER9Wa/Hl5wzX83OBIFcFkA/qePy8GGNG+
fHIBAbtUV9eglLXQZ4fVddF5UBndNH/chX2aQqXYQj4g+S9LCdnZm3+YTKCwwD98
sKpry5B0tD+dVpI2H6sEmCcCQlmNhjNQXQbAx/ybL5xH+c3wGwEttlSl2Z/MzHV/
qJmjgS1yRNY9xKQUFULm7RQCLaIVwg8f264lYoIsk5rDHTu0O2y2Ckv48DEXsNV8
HJLMQD6n4R+DSmJrCq+N8J2Pqw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:28 2026 by rpki-client