Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          PS3QnxLbrFEmkI7nQbs+HIbvlbTjTqU5y+wRa09/sCo=
Subject key identifier:   D4:AE:1F:16:E4:D9:AF:17:27:CF:B7:59:61:5F:ED:09:B1:46:1F:0D
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07A1
Signing time:             Mon 02 Mar 2026 00:56:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:56:38 +0000
Manifest next update:     Mon 09 Mar 2026 00:56:38 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: qAf+PKjatz/AioJofrj86cLJ73EcSHlycRKlcaEJ7lQ=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Mar  2 00:56:38 2026 GMT
            Not After : Mar  9 00:56:38 2026 GMT
        Subject: CN=69a4e048-6b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:f3:80:c7:df:d2:4e:ee:6a:4f:91:d7:65:
                    e3:6c:80:61:87:50:ee:a8:0e:e3:04:b4:09:23:6c:
                    85:bc:7b:93:97:36:a0:f0:2f:9c:8b:1d:ff:0d:2d:
                    ce:02:06:0a:bb:9d:03:8d:75:09:e1:c0:4a:c8:85:
                    34:a2:5c:6a:8c:b6:7e:dd:37:24:48:3d:ef:45:62:
                    86:56:ae:ae:e9:78:17:29:13:cb:62:d4:56:00:2b:
                    ea:cb:23:16:35:49:cc:90:62:06:ef:43:80:f8:df:
                    26:a3:b1:af:40:66:90:ed:65:89:4b:95:61:a7:5a:
                    c1:17:7b:94:18:92:a0:1f:44:71:a8:7d:27:4e:0d:
                    c5:6c:60:93:a8:dd:5c:0a:7f:88:8a:dc:8f:da:6b:
                    b5:5b:9f:05:10:7f:97:c6:3e:1b:e4:fd:72:c1:d2:
                    51:46:f3:58:47:09:6b:d3:3c:5e:47:5a:6b:55:7a:
                    be:20:31:94:1e:ac:70:b3:cc:73:8c:63:f3:87:cc:
                    90:32:da:e8:b6:fb:bf:57:c3:10:b9:66:53:fd:2e:
                    06:93:4c:0a:22:e4:66:30:3b:c1:b8:df:a7:0a:3c:
                    d6:be:5b:72:5c:18:b7:aa:1b:27:d0:b5:d1:45:35:
                    3a:ba:84:6d:ee:90:2e:32:00:da:cf:b3:10:6a:ec:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AE:1F:16:E4:D9:AF:17:27:CF:B7:59:61:5F:ED:09:B1:46:1F:0D
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:27:a7:84:66:23:fc:f0:4f:f1:39:f9:dd:e6:6e:e6:5e:
         5f:a6:78:2f:fd:8d:f1:8d:b4:38:da:0c:19:56:50:aa:e5:71:
         4e:78:f4:bb:6e:6a:ea:2a:3b:12:52:8f:d6:e6:73:3c:45:22:
         0f:6a:25:bc:0d:7d:de:8e:e3:6d:f8:7d:9b:de:c6:74:8f:d7:
         d6:33:0e:83:f5:d5:64:e9:27:01:80:9d:38:54:b7:8e:d4:86:
         39:27:d3:21:7e:c2:76:8d:1e:2d:ab:e4:c2:41:ec:44:1d:46:
         6b:e8:23:85:84:ec:82:f9:a6:d8:f3:bb:a0:52:8c:e4:6d:fe:
         54:0b:ce:58:17:71:32:c3:62:5f:75:3f:64:33:09:52:0b:85:
         99:86:35:d9:5b:98:94:03:6d:33:ca:1e:5d:44:e6:a3:4d:3a:
         69:c0:b3:fc:b2:d1:8e:be:3e:d6:a8:62:53:02:7c:0b:48:66:
         01:1c:cd:ec:72:0d:3e:d1:05:cf:32:0a:17:7a:2c:6d:24:9f:
         09:ba:d5:33:b2:35:a4:59:af:1a:c2:83:73:8a:12:be:9c:db:
         4c:03:d7:de:c3:5c:ed:a9:e8:db:fc:ea:83:5b:2e:36:8d:f6:
         fa:0b:dc:43:94:20:1e:b1:dc:fd:7a:96:ef:b2:c5:c4:cc:ad:
         d6:9f:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:00 2026 by rpki-client