Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          fob16eCv6M9xvGMy24gBxoeFbKW7oaSgS7TvMpHFJ8Y=
Subject key identifier:   33:8B:EF:08:A4:34:2A:5B:7E:18:20:BC:6E:50:9D:15:BB:8B:DC:0F
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07DD
Signing time:             Fri 12 Jun 2026 21:23:59 +0000
Manifest this update:     Fri 12 Jun 2026 21:23:59 +0000
Manifest next update:     Fri 19 Jun 2026 21:23:59 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: 2XhKWvc6rOg2uDadkzxAfuTchnY7trPNsHeepGe74U0=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
                          3: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Jun 12 21:23:59 2026 GMT
            Not After : Jun 19 21:23:59 2026 GMT
        Subject: CN=6a2c78ef-6165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:17:1f:ee:fb:c1:7e:56:21:c0:1a:24:80:
                    3f:d7:30:a0:d8:60:70:af:b8:d5:f3:12:28:86:6d:
                    04:4d:51:40:98:6c:54:eb:fe:3d:ed:51:ac:57:c6:
                    59:9e:e6:cc:8f:04:71:d6:c7:a0:4a:31:cc:f2:e6:
                    50:b9:10:39:ac:24:cb:33:97:4c:56:a2:84:5b:97:
                    a4:f3:71:f7:98:a3:63:76:3f:5c:fe:de:44:a3:f6:
                    56:a7:7d:74:19:5e:19:65:12:82:ef:f9:56:59:2d:
                    d1:b7:a2:3f:34:90:e8:93:45:2b:fe:f3:b3:88:eb:
                    69:04:d6:e2:df:98:02:03:a8:c4:d9:3c:2d:65:5f:
                    05:e7:3c:fe:e2:a8:58:d8:f2:ea:34:8a:fb:45:b4:
                    3c:51:44:7f:15:f6:13:70:86:4d:7b:88:e1:b2:42:
                    12:48:6e:dd:7e:2e:5b:fa:ad:39:2d:75:cc:fb:3f:
                    34:c8:2c:3b:fa:da:03:ed:8b:10:d5:68:b8:14:f3:
                    c8:17:53:36:b0:3a:b0:df:22:d3:40:94:5c:18:6b:
                    79:f8:a6:1c:89:db:7b:ea:e7:c2:93:1d:40:89:c4:
                    09:5b:88:01:4c:16:d1:18:cd:0c:4e:c9:ae:73:d9:
                    16:9e:fd:15:b8:95:65:35:4d:54:2f:4a:43:cb:42:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:EF:08:A4:34:2A:5B:7E:18:20:BC:6E:50:9D:15:BB:8B:DC:0F
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:76:c3:70:f6:9e:50:ba:97:64:e0:ba:e9:16:e6:22:04:79:
         49:0a:a8:72:3d:c4:b5:8b:5e:1c:f5:23:93:bc:18:6a:75:c7:
         ac:c0:a0:8a:5c:21:2d:35:75:eb:9b:d6:44:c7:4d:55:fe:c0:
         3c:5d:0d:e9:db:1c:a5:7b:26:ba:9c:1b:65:88:e6:9d:e3:4c:
         01:56:7d:92:5f:ab:bd:a5:4d:d2:d7:3f:17:b1:43:12:e5:21:
         4c:63:f2:73:9f:59:ea:ad:36:de:2c:bb:1a:c4:93:00:4b:97:
         86:e8:60:a9:4a:53:51:9f:3f:ae:c5:fc:67:9d:46:92:ce:bc:
         f5:7f:99:97:61:46:6f:08:b2:3f:74:32:c9:60:d1:e0:69:4c:
         ac:91:6c:81:4c:fd:59:5a:58:5c:f4:6e:3d:da:5f:b8:8a:c1:
         02:05:cc:df:ce:6d:eb:60:36:31:5d:4c:fb:51:2e:a9:98:b1:
         89:e6:85:54:e7:0a:59:6f:c4:ba:90:34:22:ae:72:0c:69:4a:
         44:93:40:c7:4a:29:c5:34:dc:1b:57:00:c9:46:03:75:d8:12:
         02:0a:dc:dd:bf:85:27:df:67:26:e1:67:58:78:89:78:d8:bd:
         3e:5f:06:a7:7d:90:16:3a:95:b7:40:cf:ee:ce:c3:bf:d5:1e:
         b6:61:94:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFDODIxMTAvBgNVBAUTKEEyOTdBMkIwOTMzODJFNDUwODZDQTA3Q0VFNkM5N0Iz
NkJFNEMyQ0QwHhcNMjYwNjEyMjEyMzU5WhcNMjYwNjE5MjEyMzU5WjAYMRYwFAYD
VQQDEw02YTJjNzhlZi02MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpcXH+77wX5WIcAaJIA/1zCg2GBwr7jV8xIohm0ETVFAmGxU6/497VGsV8ZZ
nubMjwRx1segSjHM8uZQuRA5rCTLM5dMVqKEW5ek83H3mKNjdj9c/t5Eo/ZWp310
GV4ZZRKC7/lWWS3Rt6I/NJDok0Ur/vOziOtpBNbi35gCA6jE2TwtZV8F5zz+4qhY
2PLqNIr7RbQ8UUR/FfYTcIZNe4jhskISSG7dfi5b+q05LXXM+z80yCw7+toD7YsQ
1Wi4FPPIF1M2sDqw3yLTQJRcGGt5+KYcidt76ufCkx1AicQJW4gBTBbRGM0MTsmu
c9kWnv0VuJVlNU1UL0pDy0LKuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOL7wik
NCpbfhggvG5QnRW7i9wPMB8GA1UdIwQYMBaAFKKXorCTOC5FCGygfO5sl7Nr5MLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM4Mi8xOEREQkZEMjNE
RTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExrVUliS0I4N215WHMydmt3
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wZWlzSk00TGtVSWJLQjg3bXlYczJ2a3dzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUM4Mi8xOEREQkZEMjNERTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExr
VUliS0I4N215WHMydmt3czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVnbDcPaeULqXZOC66RbmIgR5SQqocj3EtYteHPUjk7wYanXHrMCgilwhLTV1
65vWRMdNVf7APF0N6dscpXsmupwbZYjmneNMAVZ9kl+rvaVN0tc/F7FDEuUhTGPy
c59Z6q023iy7GsSTAEuXhuhgqUpTUZ8/rsX8Z51Gks689X+Zl2FGbwiyP3QyyWDR
4GlMrJFsgUz9WVpYXPRuPdpfuIrBAgXM385t62A2MV1M+1EuqZixieaFVOcKWW/E
upA0Iq5yDGlKRJNAx0opxTTcG1cAyUYDddgSAgrc3b+FJ99nJuFnWHiJeNi9Pl8G
p32QFjqVt0DP7s7Dv9UetmGU8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:27:58 2026 by rpki-client