Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          lQ4C8j2Blt0DM0kIrCEL133hPr7zUlshzyz0vGABDY4=
Subject key identifier:   37:03:94:FE:6B:7B:49:9D:F5:1C:8C:CB:2B:2A:04:33:AD:75:55:F3
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       0801
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07F3
Signing time:             Sun 26 Jul 2026 21:59:38 +0000
Manifest this update:     Sun 26 Jul 2026 21:59:38 +0000
Manifest next update:     Sun 02 Aug 2026 21:59:38 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: Ww7+QYy7tzxNELRywVxHwhWaek1ggylJfwg4Km+6w/4=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
                          3: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049 (0x801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Jul 26 21:59:38 2026 GMT
            Not After : Aug  2 21:59:38 2026 GMT
        Subject: CN=6a66834a-4cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:2d:fd:64:77:3f:70:e6:cf:e0:9a:45:fc:
                    22:6b:34:a7:e9:3e:4b:64:72:25:d0:ec:cf:4f:87:
                    fe:a0:40:ff:42:ce:e9:cc:16:4e:58:a4:2c:d3:56:
                    e3:35:ef:84:5d:ac:1a:a2:8d:fa:5d:e1:38:5b:37:
                    76:1e:cc:dc:de:79:e0:48:a5:be:9f:36:42:f8:71:
                    84:d2:c9:6a:bf:99:d0:03:3a:42:bf:8b:a4:99:52:
                    8f:9b:af:b1:fb:f4:2a:a7:3a:87:6d:1f:df:6d:45:
                    82:39:25:af:29:34:96:1f:31:10:13:7c:d1:c3:69:
                    0b:a8:f5:5c:5e:f6:b8:81:59:80:c8:19:99:9b:57:
                    9a:29:a6:83:5f:97:06:71:5f:27:c6:5b:d5:19:b1:
                    26:63:f0:bb:7c:53:db:17:84:79:5c:12:fd:58:1b:
                    b7:d1:ea:96:0a:9c:e6:b9:5b:4b:c1:f1:2c:85:72:
                    66:61:89:4d:07:69:89:d5:6d:83:a6:57:be:35:da:
                    c9:35:67:a0:e9:27:cd:7d:3c:91:8f:dd:c8:b1:c6:
                    59:e4:ec:47:cc:d7:d2:57:69:bd:6c:66:7d:7b:4b:
                    75:f7:f9:b8:6e:10:0f:4b:c2:64:83:6a:c4:6c:46:
                    89:71:bc:53:3e:15:e9:c1:78:8b:0a:2a:c1:97:a6:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:94:FE:6B:7B:49:9D:F5:1C:8C:CB:2B:2A:04:33:AD:75:55:F3
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:09:06:df:c3:03:bf:dd:8e:6c:fe:60:23:41:4e:90:bc:7d:
         b9:27:f4:8b:2f:df:ea:16:bd:34:35:c0:92:74:4e:c8:83:40:
         ac:85:9c:da:65:ae:65:cf:46:43:46:86:2c:41:b0:90:6e:dd:
         b5:55:46:3f:e5:27:c6:86:e3:5e:12:09:15:45:4a:93:a5:9b:
         13:b3:29:9c:49:f9:12:70:78:b3:7c:e1:28:b2:10:4d:46:7a:
         27:c0:93:85:2e:c0:63:c0:2d:4a:2e:0a:fe:c0:e6:b9:31:c2:
         78:ce:9c:dc:f6:76:b5:68:3b:8d:13:5e:a9:21:68:c2:01:dd:
         ba:5a:f2:52:6a:62:4b:fb:0d:4e:8d:31:88:df:ef:9b:60:47:
         bb:5a:39:ad:ec:6a:59:67:dc:3b:3f:05:49:e9:21:48:58:15:
         e3:cd:9c:6f:4b:c0:2f:3b:61:65:ac:df:63:fa:c2:05:eb:64:
         6f:3a:1c:c1:a3:1e:fb:f7:08:9a:17:82:a6:c7:46:26:3b:8f:
         54:4b:be:e5:b5:7d:48:e3:5a:15:a8:19:0e:40:8e:10:0e:c7:
         b0:d5:29:08:b4:1b:0e:42:37:b1:6e:14:dc:8d:79:6f:05:ec:
         1c:9b:37:79:5a:e2:0c:ea:53:54:df:c4:75:e4:2a:d2:7f:b5:
         45:e2:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:44:04 2026 by rpki-client