Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          6FgfBASdi9dLmA7hOU//C/7iosLXFJSuyjz0Q3oId/g=
Subject key identifier:   9C:6A:30:E0:97:49:4F:47:7F:A3:41:5D:A6:1D:12:F9:AF:F4:8D:AE
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07CE
Signing time:             Thu 14 May 2026 21:27:38 +0000
Manifest this update:     Thu 14 May 2026 21:27:38 +0000
Manifest next update:     Thu 21 May 2026 21:27:38 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: 6ltjVBYfPoX288ZBToYZOr0TWGbBwl2oObTVuAkWSOM=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
                          3: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 21:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: May 14 21:27:38 2026 GMT
            Not After : May 21 21:27:38 2026 GMT
        Subject: CN=6a063e4a-001d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:e5:8a:7f:8a:01:4f:e0:b8:62:8a:6c:46:
                    d7:24:94:52:a9:fa:5b:0c:8c:82:1b:21:3b:1d:ee:
                    8f:3c:8c:4e:68:b4:ae:d3:c2:41:37:46:c7:a8:76:
                    db:61:7d:15:b7:28:ad:3f:27:d9:98:4e:21:d1:26:
                    44:7e:8d:5e:c6:82:59:9d:4f:4e:4f:97:f9:c1:c9:
                    1c:20:83:8c:f8:43:62:35:27:e1:3e:67:a7:4c:d2:
                    76:1a:ce:11:f7:59:12:fc:8b:0d:c5:01:2d:88:01:
                    49:40:a1:b7:04:15:a8:b9:34:72:c5:a0:45:6e:93:
                    10:be:a8:f9:63:21:89:c7:17:5f:91:f6:b0:3d:0b:
                    da:67:56:f0:b2:90:2b:79:ba:82:8d:dc:8c:58:48:
                    44:f3:32:5d:e9:f9:b1:8e:9f:64:72:72:9c:3d:e1:
                    02:5a:f0:c8:67:31:18:19:57:2f:18:88:79:ae:83:
                    44:2e:60:03:6d:72:97:8c:4b:68:47:81:5f:b7:e1:
                    10:ca:e9:ad:0f:c4:03:b7:a0:a8:cc:85:c9:71:b2:
                    7b:27:cd:d0:43:86:21:5b:ac:de:9b:72:93:3b:44:
                    ab:d4:8e:4e:cc:d2:ab:65:70:39:a6:da:d2:97:12:
                    9e:b0:e6:5d:cb:5b:69:08:ed:53:26:5f:1a:64:e6:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:30:E0:97:49:4F:47:7F:A3:41:5D:A6:1D:12:F9:AF:F4:8D:AE
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:fb:01:71:50:ff:e1:5b:c3:71:70:97:9d:2d:1a:ef:1e:
         73:23:89:f1:4c:16:d6:74:47:d9:49:bb:45:ab:8c:4c:89:fb:
         3c:a1:6e:68:e2:e9:9c:fe:76:47:c9:ab:db:06:48:f4:24:aa:
         86:16:d4:fb:16:78:04:3b:3d:ed:18:a8:7e:95:4e:11:dc:f3:
         8e:7b:8b:6a:16:a0:6a:74:57:f3:ef:cf:ab:e0:c2:e0:51:76:
         ae:f3:24:50:73:09:e9:00:e5:02:07:49:99:8f:f3:a0:2a:92:
         2b:02:63:fb:ca:98:20:ac:12:a3:2b:c7:7a:1a:7b:8d:23:47:
         49:ca:33:3c:f5:70:f0:42:23:bc:6d:cb:36:82:ca:1e:2a:e3:
         9a:99:d5:9c:80:b7:0e:1e:3c:63:d0:28:50:2b:b7:96:63:55:
         23:81:51:3c:eb:6a:d5:b1:92:29:c2:ed:e2:dc:cc:9d:5e:78:
         d4:6c:34:ee:89:64:ae:e9:23:21:bc:bd:3a:2f:f2:fd:50:fd:
         7a:6c:b0:58:f3:27:e8:9f:6b:2b:43:1d:ad:80:e4:e2:78:22:
         92:2d:9e:1b:dd:0d:47:c3:58:55:c7:e7:49:80:ab:83:77:ec:
         fc:78:4b:52:2a:05:ce:75:c5:64:9d:89:8a:da:12:e1:89:ba:
         6d:4f:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 05:06:55 2026 by rpki-client