Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          YKbP511CoT+tzZgLJNf7WEcAx3DZShhWftfoikTvQ9o=
Subject key identifier:   74:7A:0C:7D:D8:80:54:D7:23:0D:9E:FC:71:B9:67:55:AB:78:81:F7
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07B0
Signing time:             Mon 30 Mar 2026 21:24:21 +0000
Manifest this update:     Mon 30 Mar 2026 21:24:21 +0000
Manifest next update:     Mon 06 Apr 2026 21:24:21 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: c925xoRe98LYSa1RQzYpySLchiq7efVvSCSPiCbnZ9w=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Mar 30 21:24:21 2026 GMT
            Not After : Apr  6 21:24:21 2026 GMT
        Subject: CN=69caea05-1b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:c0:0a:77:94:fe:19:d5:fe:42:8e:17:26:
                    39:dd:21:4d:e9:9b:dc:d9:c6:e7:c4:db:a7:5f:51:
                    62:16:dd:0a:9b:63:5e:cb:39:e1:cb:7e:b4:6c:b6:
                    4c:5d:78:f7:3e:6d:44:4c:f9:58:4a:ae:2d:db:01:
                    f5:bb:35:3b:0f:c3:45:71:f0:36:a2:f5:60:3b:28:
                    fa:85:bd:23:e6:6f:f7:66:f6:b5:a2:ea:a7:2d:f5:
                    fb:17:cf:88:ad:2b:6e:95:58:59:a8:f9:51:49:b9:
                    75:70:fa:29:dd:fc:df:f1:a2:c2:29:93:bb:f9:66:
                    0b:ab:f6:00:e6:02:61:4a:e7:e9:f7:d0:5c:e6:82:
                    49:c9:78:11:8b:9d:71:37:d4:12:80:3f:f9:f6:9b:
                    0e:88:18:36:8b:64:7a:3a:6f:34:4d:ce:35:8c:45:
                    33:1a:39:d1:1e:89:de:31:d4:d7:a0:f5:38:95:88:
                    04:fe:ad:9c:49:64:08:9f:83:a7:3e:15:12:2d:2a:
                    a7:dc:f8:0d:b5:c8:4e:aa:14:03:cd:8c:b9:e6:90:
                    c9:a0:94:c0:d4:17:83:81:ff:99:31:0c:0f:9c:08:
                    7f:40:ed:3a:d8:4b:20:23:20:0e:6f:f6:59:1a:54:
                    35:78:3d:a4:60:4b:f8:9a:89:8b:f4:63:ab:b3:b5:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7A:0C:7D:D8:80:54:D7:23:0D:9E:FC:71:B9:67:55:AB:78:81:F7
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:87:09:41:75:cc:f0:f0:01:cf:41:d9:90:f9:c8:28:3b:
         ab:6a:f3:10:bc:61:3c:1f:83:3d:fe:00:fb:4f:08:d0:42:2a:
         20:aa:f5:08:16:47:41:f2:2f:f8:35:75:c3:78:60:cb:1a:5a:
         20:c1:e7:96:35:a0:4e:f6:a8:68:43:2f:93:93:e3:7f:ec:0b:
         56:80:e7:b1:74:43:90:a4:da:67:00:d0:50:cb:4a:b1:a3:9d:
         de:eb:1b:3d:a8:f1:af:42:e2:05:f5:60:5b:67:4e:2a:5f:e8:
         28:89:8b:55:70:b3:a3:ed:45:41:e1:10:5d:a3:51:43:0e:0c:
         b8:4b:ce:f5:c8:5a:e3:a8:43:4e:4d:2c:2a:a1:f8:3c:40:fb:
         6a:75:2e:eb:2e:85:11:fe:ab:a0:2c:3c:87:82:9b:20:f1:92:
         41:85:6f:fe:e6:36:3d:64:e4:97:e5:d5:7f:60:b8:11:9a:18:
         54:9c:09:d5:be:f7:21:a2:df:f4:e5:b3:b2:45:51:9b:8c:10:
         9f:04:2a:96:7a:e8:43:3b:52:07:b2:3f:36:ec:f8:d2:52:12:
         19:af:96:1d:dc:02:00:76:ef:d6:71:d1:51:2d:6a:cb:5d:54:
         bf:38:25:5f:36:2c:be:fb:49:6e:ac:c9:8a:cc:87:e9:2d:bd:
         03:55:7c:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFDODIxMTAvBgNVBAUTKEEyOTdBMkIwOTMzODJFNDUwODZDQTA3Q0VFNkM5N0Iz
NkJFNEMyQ0QwHhcNMjYwMzMwMjEyNDIxWhcNMjYwNDA2MjEyNDIxWjAYMRYwFAYD
VQQDEw02OWNhZWEwNS0xYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubLACneU/hnV/kKOFyY53SFN6Zvc2cbnxNunX1FiFt0Km2Neyznhy360bLZM
XXj3Pm1ETPlYSq4t2wH1uzU7D8NFcfA2ovVgOyj6hb0j5m/3Zva1ouqnLfX7F8+I
rStulVhZqPlRSbl1cPop3fzf8aLCKZO7+WYLq/YA5gJhSufp99Bc5oJJyXgRi51x
N9QSgD/59psOiBg2i2R6Om80Tc41jEUzGjnRHoneMdTXoPU4lYgE/q2cSWQIn4On
PhUSLSqn3PgNtchOqhQDzYy55pDJoJTA1BeDgf+ZMQwPnAh/QO062EsgIyAOb/ZZ
GlQ1eD2kYEv4momL9GOrs7Vl/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHR6DH3Y
gFTXIw2e/HG5Z1WreIH3MB8GA1UdIwQYMBaAFKKXorCTOC5FCGygfO5sl7Nr5MLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM4Mi8xOEREQkZEMjNE
RTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExrVUliS0I4N215WHMydmt3
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wZWlzSk00TGtVSWJLQjg3bXlYczJ2a3dzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUM4Mi8xOEREQkZEMjNERTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExr
VUliS0I4N215WHMydmt3czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAopqHCUF1zPDwAc9B2ZD5yCg7q2rzELxhPB+DPf4A+08I0EIqIKr1CBZHQfIv
+DV1w3hgyxpaIMHnljWgTvaoaEMvk5Pjf+wLVoDnsXRDkKTaZwDQUMtKsaOd3usb
Pajxr0LiBfVgW2dOKl/oKImLVXCzo+1FQeEQXaNRQw4MuEvO9cha46hDTk0sKqH4
PED7anUu6y6FEf6roCw8h4KbIPGSQYVv/uY2PWTkl+XVf2C4EZoYVJwJ1b73IaLf
9OWzskVRm4wQnwQqlnroQztSB7I/Nuz40lISGa+WHdwCAHbv1nHRUS1qy11Uvzgl
XzYsvvtJbqzJisyH6S29A1V8rw==
-----END CERTIFICATE-----
Generated at Tue Mar 31 11:21:55 2026 by rpki-client