Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
File:                     EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json)
Hash identifier:          dE1J4FyQOqqIWB6xPLkzJsFH5HivFyIiYsFSGMdiz5k=
Subject key identifier:   76:05:43:7B:03:2A:C6:54:ED:E4:37:90:02:30:47:6A:1A:A8:1A:CF
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
Manifest number:          0166
Signing time:             Tue 23 Jun 2026 05:05:33 +0000
Manifest this update:     Tue 23 Jun 2026 05:05:32 +0000
Manifest next update:     Tue 30 Jun 2026 05:05:32 +0000
Files and hashes:         1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: G4yPIyx6rJ29ocuPv/vqLcgRlA2vqZeLlrg2Bxcpj4g=)
                          2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: dgE0cigxPpAG74LnL82onQenU7J1/ApnhpaJl0lWoU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 05:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Jun 23 05:05:32 2026 GMT
            Not After : Jun 30 05:05:32 2026 GMT
        Subject: CN=6a3a141d-5d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:cd:83:a9:d3:ef:0c:39:55:b8:2c:e9:6b:
                    e2:69:cc:f5:1f:4e:bd:10:4c:e1:10:6b:a2:e1:f1:
                    eb:ea:08:0f:64:2f:9f:96:af:71:dc:c3:8c:04:45:
                    d8:0f:43:cc:0b:4d:6d:93:0f:45:5a:ef:bb:ad:f2:
                    a0:02:a1:76:ce:ab:f6:7d:f5:d6:78:77:f0:ad:8b:
                    b1:db:d7:ec:23:a3:7c:2d:b9:c3:4a:91:df:79:87:
                    8c:e1:15:45:34:c1:d2:f3:ec:47:08:f6:40:a0:ca:
                    18:90:df:11:4c:62:ac:58:9d:d1:6c:f6:69:ec:2d:
                    30:a0:28:74:c7:bf:db:d1:f4:b1:d5:df:af:64:90:
                    f6:0d:98:52:00:99:b3:91:95:b8:f5:b0:c5:f0:bd:
                    33:74:0d:0d:ab:87:65:a5:bd:a4:6d:5d:d1:86:d6:
                    6c:5b:fe:65:f6:ee:98:f1:3a:f0:81:58:97:1d:be:
                    9f:05:32:d6:cc:88:0a:8a:d9:b0:da:ee:e6:8d:a6:
                    28:33:c8:d6:70:66:8c:4b:52:eb:10:76:c0:85:ed:
                    ab:32:2f:9b:62:a0:88:1c:ca:dd:6e:e8:ad:85:c1:
                    95:04:7a:42:a0:45:ef:80:a3:11:83:f5:b4:f2:05:
                    77:42:8c:40:eb:cc:a6:87:3a:97:6d:35:c8:3b:06:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:05:43:7B:03:2A:C6:54:ED:E4:37:90:02:30:47:6A:1A:A8:1A:CF
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:80:4c:a0:63:22:fe:45:b4:13:ca:43:4b:83:04:87:38:65:
         b1:1e:28:89:da:68:98:89:21:21:38:0c:8d:e5:7b:52:2a:f5:
         72:9f:86:e3:99:40:40:0b:97:0c:92:16:a0:6a:c7:2e:30:19:
         59:1f:3b:1e:f3:ac:85:23:2e:29:6b:84:3f:60:d8:53:5c:28:
         58:b0:02:22:a6:b8:58:bc:72:a6:4e:f7:6a:84:5c:b5:94:c2:
         47:a5:8e:8f:d4:7b:2d:be:30:b4:b5:a2:84:9b:fd:38:8e:34:
         e2:aa:20:d0:cd:e5:e1:10:cd:dd:7e:f2:6b:6f:71:a9:0e:3e:
         0c:ff:aa:98:ea:dd:76:73:3c:31:1e:25:2b:c9:50:76:46:c9:
         0b:03:8f:2e:88:4f:20:f8:8d:be:b0:ce:cb:40:a3:2d:26:3d:
         3c:74:c6:24:47:f0:ea:61:79:d6:97:b4:db:ce:4b:97:dc:b9:
         4d:7f:37:e2:bb:84:7c:cc:ca:38:94:78:37:fa:9e:79:6e:d9:
         64:60:b6:e9:ef:cc:51:67:e9:f7:b6:c8:b8:29:cc:96:0a:f5:
         2a:35:3c:e6:94:c0:09:df:94:e5:ce:9f:1b:21:bf:bc:5b:98:
         58:20:32:8f:94:2f:04:c6:af:3d:36:32:fb:81:58:4e:1b:92:
         7b:3f:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:57 2026 by rpki-client