Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
File:                     U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json)
Hash identifier:          i/cm4qdWmGFadFv3FnU0N0zdU5XoPcbgdz9jH2QEMy0=
Subject key identifier:   C7:04:5D:EF:56:C6:A8:E1:46:19:F1:C4:47:5A:19:28:BE:3B:25:E5
Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5
Certificate issuer:       /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5
Certificate serial:       08B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
Manifest number:          08A0
Signing time:             Sat 04 Jul 2026 20:46:37 +0000
Manifest this update:     Sat 04 Jul 2026 20:46:36 +0000
Manifest next update:     Sat 11 Jul 2026 20:46:36 +0000
Files and hashes:         1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 6x2Lql+cii8Y68DOTCNXdLslNoNvXPntxxDEJmKvBLk=)
                          2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl
                          rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 20:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5
        Validity
            Not Before: Jul  4 20:46:36 2026 GMT
            Not After : Jul 11 20:46:36 2026 GMT
        Subject: CN=6a49712d-2bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:d8:b4:2b:54:3b:1b:44:ba:46:cc:ff:ca:
                    29:b7:f1:8c:9e:e6:66:de:79:e2:f3:26:ea:3d:10:
                    f8:ef:1e:63:b5:c1:07:35:c0:b3:3b:88:c4:1a:79:
                    e0:5b:84:be:88:1b:48:42:72:d6:00:40:f3:f6:37:
                    7e:6e:e2:22:b5:50:ed:34:8e:7c:b0:4a:a3:a1:60:
                    58:8a:7e:2f:53:db:25:48:a5:e3:17:7d:35:30:8e:
                    26:a5:f5:0f:9d:07:00:26:fe:bb:77:4d:7c:d8:c5:
                    19:02:e5:3f:a5:b9:f7:3e:7f:64:f6:a0:20:92:54:
                    48:2c:8c:77:a6:40:83:a9:c1:21:e1:77:c0:b9:ef:
                    d3:68:0f:cb:96:d6:f3:ad:0c:7f:dc:13:a0:fa:17:
                    c0:43:88:e1:64:92:a6:56:14:31:8d:32:db:8f:3f:
                    23:e6:c6:8d:26:8a:34:be:e0:a2:b5:7a:e5:31:71:
                    3b:c7:b7:02:5c:f1:16:6d:d3:95:c6:a8:3f:16:41:
                    63:62:82:ac:8c:5c:b2:b4:5b:34:33:c8:f7:36:91:
                    a5:d7:75:6a:16:fd:ca:3b:9d:dd:e3:0f:1a:c8:b3:
                    88:35:59:b6:ea:37:77:1a:93:d3:55:9a:fe:91:8a:
                    49:52:37:27:c2:9a:d5:df:fd:53:29:68:0b:57:9d:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:5D:EF:56:C6:A8:E1:46:19:F1:C4:47:5A:19:28:BE:3B:25:E5
            X509v3 Authority Key Identifier:
                keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:40:be:a2:51:68:ad:0e:36:f8:66:a7:f7:fd:88:37:4f:d8:
         64:3f:f5:57:31:95:55:69:c9:64:63:77:79:e6:eb:d9:5c:f2:
         0d:17:cc:92:21:fc:d8:72:73:3c:cc:73:fa:16:83:04:66:de:
         9f:0f:74:fe:6e:df:ea:bc:cd:a1:15:08:20:03:3b:70:34:30:
         61:5c:15:2e:09:22:5d:dc:47:5b:91:7c:62:9e:e1:00:a5:56:
         bc:15:c0:87:63:d5:a7:26:d0:f8:5e:ba:eb:71:b3:3e:61:56:
         d8:5a:f0:2e:4a:71:52:c9:9a:99:fa:63:d5:fe:26:e7:d4:26:
         93:cd:11:92:72:42:68:a1:65:73:83:31:01:aa:83:d1:2c:9f:
         26:6b:39:f0:64:ed:20:92:c2:fa:4d:34:07:f6:0d:d6:6f:14:
         ca:f7:ae:21:5d:23:68:b5:96:03:aa:79:18:43:6c:6d:b4:83:
         cf:d2:a8:3a:d6:26:16:b0:98:8c:65:ab:ea:c5:cf:30:85:d0:
         25:40:e0:a3:f6:9b:43:48:a1:1c:eb:0c:6c:ab:5c:80:7c:6e:
         ba:c3:36:09:fe:34:34:f5:4a:fb:ca:a7:2f:e3:25:17:91:25:
         65:21:02:a2:e4:6c:a9:ea:f3:8a:af:be:81:a7:5b:82:4b:ee:
         58:d0:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:55 2026 by rpki-client