Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
File:                     OpBsYeE9uJ5h3MrxA2oyvtqof18.mft (raw, json)
Hash identifier:          TCyM6Ask/soZyXr182IYtzmq9Cne4jj11yGKrK3L9c0=
Subject key identifier:   C7:C6:1E:9F:90:F3:D5:FE:CD:A1:7C:5B:C0:96:DF:AF:36:9C:EB:9B
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Certificate issuer:       /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
Manifest number:          60
Signing time:             Sun 25 Oct 2026 08:30:24 +0000
Manifest this update:     Sun 25 Oct 2026 08:30:24 +0000
Manifest next update:     Sun 01 Nov 2026 08:30:24 +0000
Files and hashes:         1: OpBsYeE9uJ5h3MrxA2oyvtqof18.crl (hash: zEYlSWAPj6o20VsmCyG6h9gvEkeQyIIhKLm/b3sQ/AQ=)
                          2: 1B095A06869811F184DE0C3C6EA30FBC.roa (hash: f8BDbd1V8OOTxeth43R3JsquIgRX5kFT2OaagVfMyiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
                          rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
        Validity
            Not Before: Oct 25 08:30:24 2026 GMT
            Not After : Nov  1 08:30:24 2026 GMT
        Subject: CN=6addbe20-9621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:0f:c9:f8:f8:a5:14:15:69:e3:08:77:47:
                    e4:c4:64:2e:40:b4:db:ca:59:49:1d:18:97:71:9e:
                    31:d3:2b:a0:26:ad:47:16:0b:5b:af:d3:46:64:a4:
                    07:58:f2:ee:53:f9:88:99:18:de:3b:c2:8c:42:62:
                    9a:37:2d:fe:17:ed:47:aa:6d:e7:38:58:cc:75:08:
                    6b:33:0d:8d:ce:12:fc:ca:59:56:2d:ae:13:84:00:
                    37:bc:a8:41:e1:cc:55:a9:aa:8d:9f:77:a8:3c:20:
                    77:82:b1:18:35:51:21:34:d2:9e:c8:99:06:59:e1:
                    89:9b:9c:9a:55:08:8b:64:74:98:48:b6:7c:0f:55:
                    4c:28:97:b9:44:06:70:bb:6f:35:7b:0c:30:a6:75:
                    df:96:4c:d0:ce:9e:4c:31:08:eb:d5:a1:0c:e5:ba:
                    f5:da:7f:f7:68:69:86:b1:04:35:03:72:dc:52:8a:
                    64:fe:24:72:69:10:ec:aa:aa:d1:ef:b4:1a:09:b6:
                    84:51:55:e8:d9:e7:35:8f:29:b5:22:68:b4:4f:e3:
                    be:fd:93:9b:61:84:93:22:2c:a1:bf:67:b3:42:36:
                    95:78:f2:e3:53:ea:3f:e4:1e:55:63:ec:04:37:45:
                    af:b7:03:4c:a2:f8:fc:44:42:9d:16:d8:7d:4e:ac:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C6:1E:9F:90:F3:D5:FE:CD:A1:7C:5B:C0:96:DF:AF:36:9C:EB:9B
            X509v3 Authority Key Identifier:
                keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:97:66:53:75:ca:0c:cb:62:a8:8b:da:33:9b:1a:73:d0:
         c1:91:d2:af:83:71:ee:2c:2e:6b:60:16:90:09:dc:17:9d:c0:
         43:b8:2d:3c:b9:e3:85:02:1c:21:44:31:ab:be:f7:b6:95:61:
         f2:28:40:e4:97:46:ff:e7:1d:f6:44:74:06:81:5e:ba:a1:36:
         f9:e4:51:c6:9b:d4:03:b0:55:fd:ad:bb:92:85:c0:42:4d:40:
         1d:47:39:81:e0:52:d9:c3:5d:38:e1:d0:17:36:0e:47:56:ac:
         da:93:f8:9e:be:6b:7f:27:af:57:e6:14:86:00:5e:6f:1f:07:
         21:31:92:6b:73:31:1a:83:52:03:2e:07:77:fc:ec:05:8c:86:
         8c:ad:e1:31:59:bb:92:1c:09:ac:a8:0d:4b:25:6d:9b:be:d2:
         13:c7:e9:0b:06:fd:32:7b:75:e9:df:8d:5f:5d:f0:fe:88:10:
         a2:d4:ff:dc:a3:c0:a0:73:1a:fb:46:ab:da:0a:77:a7:ba:ab:
         ce:22:83:dd:20:3e:c7:74:3a:f4:20:d4:db:90:b6:81:9f:12:
         b8:c4:ab:d4:01:20:a2:c6:c8:7e:27:69:4f:4c:ee:f7:da:46:
         63:32:ef:89:71:e4:57:75:04:60:ff:04:c7:5e:cf:40:9b:3f:
         ea:e6:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:41:08 2026 by rpki-client