Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
File:                     OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json)
Hash identifier:          0fB1Wrsy4cEWHsNzZAMKjScKWmlLtKEnq0CyhWiJzjE=
Subject key identifier:   6A:8E:CB:B3:F3:CE:C6:3D:0F:D4:EA:D2:26:82:29:CE:8D:73:A0:17
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Certificate issuer:       /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial:       0B0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
Manifest number:          0AFA
Signing time:             Tue 06 Oct 2026 19:29:03 +0000
Manifest this update:     Tue 06 Oct 2026 19:29:02 +0000
Manifest next update:     Tue 13 Oct 2026 19:29:02 +0000
Files and hashes:         1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: KXq+h0akrzohiuqKT2j0eSIYtFAdvl1mQrTTMPZIWgo=)
                          2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
                          rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2827 (0xb0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
        Validity
            Not Before: Oct  6 19:29:02 2026 GMT
            Not After : Oct 13 19:29:02 2026 GMT
        Subject: CN=6ac54bfe-7428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:fb:93:2b:8f:b9:79:14:e8:a4:b2:8f:09:
                    dc:6b:a2:f3:80:e5:e0:c4:27:50:21:5a:da:90:c4:
                    38:5b:d2:9f:63:bc:83:9b:7f:54:e9:df:10:3a:cb:
                    74:e4:48:31:4f:cf:a1:1d:4d:2a:ec:80:a5:22:fa:
                    a8:99:88:2b:51:ee:0c:2a:15:ab:4e:20:03:fa:f9:
                    0b:4d:93:22:e2:49:b8:bb:ed:98:f0:3b:50:df:fd:
                    8d:6e:2c:ed:22:3a:d2:2e:78:ca:1f:f1:62:35:34:
                    b8:fe:57:42:ab:40:9b:7f:80:2c:65:aa:25:22:52:
                    8e:c7:65:f3:1e:5e:88:e8:a7:5d:f9:4f:57:b5:dc:
                    e7:ae:cc:2d:f3:48:fc:cc:a8:00:e2:e1:32:2f:b1:
                    39:7b:5b:45:9e:5d:c0:e2:6c:43:4b:37:ea:e3:ac:
                    f6:69:fb:4e:c3:00:a2:4b:d5:8e:70:00:03:80:fa:
                    94:73:87:3b:d0:f5:cb:84:ef:1e:98:48:e8:dd:d7:
                    a0:26:56:e7:e7:ee:1a:16:93:b9:e0:b0:6c:0e:c5:
                    ca:45:e3:94:75:ef:d3:7b:4b:7c:34:d4:6f:3e:02:
                    33:a6:ee:b8:c6:26:d4:72:25:54:1e:ea:49:8d:5a:
                    25:e6:39:81:53:da:ee:b4:26:8c:d7:62:fa:d4:f5:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:CB:B3:F3:CE:C6:3D:0F:D4:EA:D2:26:82:29:CE:8D:73:A0:17
            X509v3 Authority Key Identifier:
                keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:f3:31:6e:77:f9:4f:7b:a9:96:d6:fc:1e:83:91:b7:c3:
         1a:23:81:e1:a6:38:12:7b:0d:4d:bc:64:de:1a:55:1f:0d:17:
         77:8f:e8:c7:d4:e8:f1:c2:44:b9:80:b2:55:a8:82:64:90:77:
         dc:d6:11:e7:b3:cb:2d:d1:ca:d5:02:4d:61:ff:8f:62:ce:10:
         fe:a1:3b:ae:5e:fe:25:6c:94:3f:5b:e8:c4:05:d0:7f:6a:e6:
         72:6d:d1:26:aa:1a:c2:10:4a:d5:35:b0:e4:8e:81:32:c5:4d:
         6c:a1:b3:2b:6c:d2:0a:df:d8:c4:7f:4f:df:c3:a9:33:20:2a:
         b4:57:c8:45:61:f4:23:f9:04:83:50:c9:46:35:d8:4c:24:72:
         d3:16:f0:77:60:be:fd:83:af:29:64:6a:76:0e:9f:0c:8e:f7:
         01:ba:f3:2d:38:1b:d2:4a:c6:6e:c1:7c:69:63:81:5e:28:4e:
         12:28:52:bf:fd:22:01:30:bc:45:41:f8:69:ce:2d:17:e2:98:
         eb:c5:c5:f3:ad:5a:2b:ff:89:f5:71:3d:22:6b:60:e8:8d:d0:
         76:eb:22:d6:c7:52:8f:26:a0:eb:a1:2a:90:20:52:ba:18:6b:
         19:60:85:25:cf:de:fa:93:bb:a0:c3:dd:7c:24:1c:ce:e3:96:
         32:9b:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:44 2026 by rpki-client