Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          4Gn73AxJQr0BQ9qTK5TKa3JCo2bEE0yYa/GOgwmmRxs=
Subject key identifier:   16:52:B0:9C:99:69:51:E0:B9:A4:65:45:B7:DC:40:AA:67:AC:F7:F5
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07B9
Signing time:             Thu 16 Apr 2026 21:20:31 +0000
Manifest this update:     Thu 16 Apr 2026 21:20:30 +0000
Manifest next update:     Thu 23 Apr 2026 21:20:30 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: HvV6nerj0Skq3fxOfwOhG878u8rVZ716Ym7LF0FiALU=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Apr 16 21:20:30 2026 GMT
            Not After : Apr 23 21:20:30 2026 GMT
        Subject: CN=69e1529f-4da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:ee:ea:56:ad:9d:44:02:51:40:3d:a1:7b:
                    8f:71:db:64:86:8c:7b:bb:ea:cb:e1:71:58:52:8c:
                    44:95:7e:2d:f2:a7:70:24:66:4b:de:4e:d6:2b:7b:
                    d7:f4:30:41:58:f9:d5:df:11:28:b1:3e:a1:ba:2a:
                    dd:49:e3:72:62:92:c9:9f:24:26:d2:7a:62:10:b8:
                    26:2b:70:f0:0e:7d:42:e1:94:f7:9f:0d:2e:59:18:
                    0b:26:a1:ef:49:fc:81:2d:3e:74:e2:00:ff:b3:b3:
                    66:5a:23:b7:cc:de:82:8d:ee:3e:ce:f9:f5:58:4e:
                    a2:58:c2:2a:d0:ec:99:ca:55:fe:ff:ee:8f:cf:ec:
                    25:36:a2:77:71:45:3c:1a:e8:ba:cd:94:9b:36:30:
                    5c:56:30:1b:2c:98:b5:b3:84:38:c5:19:33:da:4f:
                    ea:93:9c:94:e4:58:62:9a:b6:ed:b4:59:1a:0b:78:
                    3c:00:af:57:93:da:be:0e:31:1b:a0:06:34:c9:5f:
                    a7:a0:8b:8f:05:e1:68:63:79:6e:3f:81:4d:d3:ad:
                    63:cf:07:7d:66:c0:fb:f5:33:a8:0b:e7:62:bc:f1:
                    7a:e9:57:94:9b:39:32:6a:6d:bf:34:2f:b7:41:5a:
                    61:67:e2:6d:2b:52:ed:8a:73:b9:17:7f:d6:df:b3:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:52:B0:9C:99:69:51:E0:B9:A4:65:45:B7:DC:40:AA:67:AC:F7:F5
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:39:72:15:45:0d:c1:59:44:3f:9b:b5:20:1d:56:3a:67:e0:
         47:da:6d:09:f2:55:ac:a6:a0:ff:49:19:d5:4e:30:e3:82:b5:
         40:0c:a7:56:7c:dd:36:34:b0:b9:a0:88:09:a7:61:f8:d2:9f:
         48:7a:84:35:5d:c4:2d:53:9c:50:52:0b:2b:23:01:88:af:d1:
         3e:e5:2a:3f:5d:5d:07:dc:54:0a:5c:58:86:8c:c1:e4:72:bb:
         97:74:d8:90:7f:b7:be:1e:27:e3:97:1f:d0:e1:bd:08:fb:92:
         b2:5f:4f:b6:a1:0b:ab:53:0e:1e:4c:e3:9d:d3:db:ef:54:89:
         3a:44:ec:63:40:c5:f9:a6:99:ab:97:6c:31:9e:8d:29:9f:d5:
         87:73:d4:70:8b:64:6d:f3:75:6e:bb:cb:03:19:61:b9:63:84:
         6f:db:45:ed:e7:38:ef:57:d7:dc:01:be:2a:46:85:73:e4:e7:
         92:5d:1e:4a:18:39:f0:f8:8a:bd:e7:58:d4:51:14:f1:fd:de:
         06:a2:01:f2:fe:ed:a9:b1:d5:7e:95:57:10:db:cf:d9:ee:19:
         f0:dc:8b:87:31:ea:41:f5:01:fc:20:57:d4:e8:25:ab:d2:13:
         da:98:bb:ec:ff:98:c9:78:48:a2:f9:41:61:7e:7c:2b:d0:01:
         09:ea:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:10:51 2026 by rpki-client