Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
File:                     oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json)
Hash identifier:          lbc1jsuA3hJums9MSAW6PUZAP9xUNK9RTn87b/UFBak=
Subject key identifier:   EA:16:CF:98:44:DB:FB:70:07:B6:AB:4C:D8:24:D7:7B:F3:5C:CC:D1
Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
Certificate issuer:       /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
Manifest number:          5C
Signing time:             Mon 01 Jun 2026 04:37:34 +0000
Manifest this update:     Mon 01 Jun 2026 04:37:34 +0000
Manifest next update:     Mon 08 Jun 2026 04:37:34 +0000
Files and hashes:         1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: Ic7g5vrbZlS323hDf5IdnKx1Yk6ZI5FqgGcGvNZq4I8=)
                          2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
        Validity
            Not Before: Jun  1 04:37:34 2026 GMT
            Not After : Jun  8 04:37:34 2026 GMT
        Subject: CN=6a1d0c8e-bbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:60:f9:f9:45:13:46:78:b9:d2:df:aa:92:
                    6f:8e:45:7e:e3:43:4b:3a:73:3d:25:48:51:d8:8e:
                    3f:da:71:86:68:d2:92:84:9b:c7:fd:97:f9:85:fc:
                    2d:b1:cc:86:eb:dc:9d:4b:d2:8a:ce:f9:b0:81:9f:
                    73:a1:7a:eb:8a:76:d0:e3:0d:58:7d:8c:b6:09:e4:
                    6b:12:9d:b5:7d:32:70:47:66:6b:03:00:25:7d:d4:
                    d8:ed:62:86:32:d1:87:9a:02:fd:d9:55:c6:4b:2e:
                    8a:1b:bb:87:72:65:1d:3e:fe:ce:02:ca:7f:2e:b2:
                    74:61:89:59:e0:ae:3d:62:0a:9e:0b:4b:6a:ff:f2:
                    f5:d5:e1:8f:12:b4:6a:e1:60:bc:00:7f:1b:4d:6b:
                    40:d5:50:2c:ca:99:8e:1f:08:15:a8:20:5f:1f:79:
                    90:e2:64:e9:b3:47:9a:62:5d:5e:90:2d:9d:64:80:
                    8e:6b:09:47:7b:f2:13:b6:0d:7c:55:3d:ca:b3:fc:
                    c2:5b:e2:8a:fe:eb:fe:65:c7:f3:f9:0e:de:6f:af:
                    c0:4e:49:16:b6:58:b7:55:31:4c:36:fe:da:53:52:
                    0a:ee:b9:56:2b:87:25:3e:2f:41:26:f9:b7:82:19:
                    33:46:b1:5a:bf:8e:95:ed:7e:53:b2:14:39:84:87:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:16:CF:98:44:DB:FB:70:07:B6:AB:4C:D8:24:D7:7B:F3:5C:CC:D1
            X509v3 Authority Key Identifier:
                keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:4b:4c:7f:7a:ea:fb:e2:0d:08:4e:c6:97:f1:7f:03:75:
         95:ca:d6:e2:df:22:9f:e8:79:00:72:b0:00:b0:ad:28:bb:4e:
         5b:99:4f:f6:1e:9b:0b:71:3b:81:df:02:d4:c0:d5:1f:d2:fb:
         f0:c9:5c:3b:2a:00:a7:7d:82:c3:d7:b4:15:3c:9a:a2:82:48:
         bc:e5:cf:f9:32:74:31:0b:2b:d0:92:eb:6c:04:69:7f:eb:13:
         77:c9:91:f3:e0:97:3c:9f:e2:db:d8:04:ce:52:65:ee:db:d6:
         58:75:5c:f1:18:b2:64:f4:3b:35:12:37:90:9b:1e:16:d8:61:
         25:48:1b:33:e0:c5:0f:c3:14:57:23:e9:b9:59:a8:60:46:5f:
         7e:df:00:e1:09:2b:fa:fb:ce:55:4a:fd:7d:73:40:bb:d2:49:
         00:9a:bc:8e:a6:34:5c:9b:73:3f:d1:01:a5:bd:f2:20:9a:b2:
         d8:d3:80:85:b1:1a:f1:80:fb:bc:58:1d:69:07:01:0b:45:77:
         69:c2:d7:d1:48:39:a0:d6:94:b7:79:f8:48:6e:61:38:7b:95:
         ab:1f:c4:66:e0:63:82:47:2c:18:9a:b2:41:4c:bc:62:f0:7f:
         e7:80:fd:c9:46:b7:c4:85:4d:d1:f3:51:91:42:82:82:fb:31:
         e5:e5:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:57 2026 by rpki-client