Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
File:                     EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json)
Hash identifier:          lCagdG7TRR5EtBWD876FlPGkt/+OmbD80fcB664cdIw=
Subject key identifier:   0D:CE:47:5C:FE:7A:FC:32:9A:AF:34:4A:64:CE:73:D4:6C:4B:3A:13
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
Manifest number:          0145
Signing time:             Fri 17 Apr 2026 04:58:18 +0000
Manifest this update:     Fri 17 Apr 2026 04:58:17 +0000
Manifest next update:     Fri 24 Apr 2026 04:58:17 +0000
Files and hashes:         1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: T84CNgHuV4EL3uEa4/thCwYd0ggSrPGElVMEhWcsTZA=)
                          2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: dgE0cigxPpAG74LnL82onQenU7J1/ApnhpaJl0lWoU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Apr 17 04:58:17 2026 GMT
            Not After : Apr 24 04:58:17 2026 GMT
        Subject: CN=69e1bdea-434d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:8d:26:88:8f:18:cd:bd:ba:5f:32:1f:8a:
                    63:f2:99:1c:6c:1a:f2:b7:72:51:a5:11:08:60:77:
                    29:37:35:8b:74:68:10:1b:3c:1f:43:6e:ba:09:50:
                    93:70:6f:a6:81:67:c7:27:88:e6:44:e2:cc:ad:7f:
                    31:37:37:af:af:29:6a:a3:4e:f9:76:1b:0d:a4:2d:
                    61:ee:2c:cd:95:c4:5a:94:e2:eb:f4:90:7c:90:c9:
                    c5:77:14:19:42:7e:ff:19:66:ed:09:13:e7:aa:8f:
                    0a:c7:83:13:ec:f0:1d:9e:69:ea:54:cf:c5:7b:36:
                    e1:9a:bc:01:6a:86:6e:25:24:7b:65:d6:72:92:6b:
                    85:eb:3f:6a:d4:4b:2d:ff:d2:b3:42:21:a3:f1:25:
                    c5:91:c7:86:b0:2e:99:9a:ed:39:94:e2:c2:00:d0:
                    f1:9e:ba:1f:33:ec:01:89:fe:5a:74:c9:67:ba:34:
                    0d:11:a4:94:09:12:b7:d7:97:d0:01:2a:76:1a:1f:
                    06:1c:4f:8d:67:15:65:16:7f:ed:f5:37:ee:7f:21:
                    8c:83:82:1d:5b:ae:8b:d3:1d:0b:19:b3:ba:d9:6f:
                    e2:de:95:c7:a2:ed:f6:0a:6e:f7:0c:37:2b:7b:f7:
                    e5:b7:aa:45:57:06:9b:46:bc:20:56:f2:2e:3a:86:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:47:5C:FE:7A:FC:32:9A:AF:34:4A:64:CE:73:D4:6C:4B:3A:13
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:fe:15:dc:c0:5b:d5:9d:c5:fc:8f:a3:45:dd:53:f4:ac:
         86:ee:29:a6:35:a6:bf:a0:20:f6:c5:d5:1f:8f:dc:cc:2a:fb:
         31:f6:db:a9:d0:f8:66:2c:b1:ea:ab:dc:79:ba:ab:b2:fc:25:
         8e:e7:36:12:11:70:fc:44:d9:00:b4:b1:c9:74:1d:8c:d2:a6:
         04:52:05:27:4d:58:ce:93:5e:6f:85:06:5d:d6:ba:97:38:03:
         a9:21:51:68:34:0c:18:7d:0e:ba:db:71:11:16:99:4e:ae:a4:
         30:ec:55:15:6d:7f:eb:b4:21:f1:26:f1:ee:5c:ac:75:43:6c:
         6c:5e:81:c3:74:78:5d:32:a8:f9:08:a9:c4:77:80:46:29:08:
         fc:a7:a8:3c:54:15:0a:ed:7b:a8:4d:76:93:a9:24:cf:a9:8e:
         c9:e4:1c:4d:2c:2d:b5:7f:c4:a3:1a:c1:b5:b3:21:16:28:90:
         98:d6:a5:de:c4:5f:e1:93:b5:5f:fd:05:aa:97:9d:20:0d:8e:
         4d:0c:7d:18:3c:ec:30:30:aa:2e:46:e4:4e:b1:ae:de:ee:e2:
         f2:e7:6c:ce:94:6f:26:38:79:56:3c:ac:b8:77:1a:f2:e1:2b:
         b2:18:de:39:a2:b6:05:30:b2:f7:9a:b9:18:16:cd:a9:db:fe:
         3c:f2:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:47 2026 by rpki-client