Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
File:                     OpBsYeE9uJ5h3MrxA2oyvtqof18.mft (raw, json)
Hash identifier:          Fm/lJ394y1ZtfipAAXweDFxRPUCbe0ShzR62iUjQOOI=
Subject key identifier:   5E:2B:B6:B9:1D:0D:77:24:92:64:F2:31:F9:21:9A:41:A9:6D:6F:67
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Certificate issuer:       /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
Manifest number:          58
Signing time:             Fri 09 Oct 2026 08:59:58 +0000
Manifest this update:     Fri 09 Oct 2026 08:59:58 +0000
Manifest next update:     Fri 16 Oct 2026 08:59:58 +0000
Files and hashes:         1: OpBsYeE9uJ5h3MrxA2oyvtqof18.crl (hash: VnBEWNgiBKA+V22rYULfokyzuacffZCChPDt1A9cgjI=)
                          2: 1B095A06869811F184DE0C3C6EA30FBC.roa (hash: f8BDbd1V8OOTxeth43R3JsquIgRX5kFT2OaagVfMyiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
                          rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
        Validity
            Not Before: Oct  9 08:59:58 2026 GMT
            Not After : Oct 16 08:59:58 2026 GMT
        Subject: CN=6ac8ad0e-37da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:c7:79:80:b3:12:3a:f7:74:fe:0e:2b:a8:
                    ef:15:5b:00:c7:bb:44:fb:70:c9:cc:4c:0e:ff:a7:
                    19:b4:8c:95:8d:c3:c2:79:4f:3a:78:6d:b4:d1:9e:
                    86:cb:19:3d:75:cc:33:8a:8e:58:2c:b9:eb:06:a3:
                    87:7d:d0:df:fd:52:99:ff:84:fc:5f:f5:0f:c1:82:
                    12:9c:08:1e:f4:eb:5a:c0:f3:04:6c:dd:17:9e:bd:
                    83:9f:7c:1c:cc:70:9c:c7:ca:22:5f:84:2b:e8:46:
                    ff:e1:15:df:2f:d6:04:7c:09:55:eb:b7:18:d3:dd:
                    f6:27:05:d2:e8:43:11:56:b2:3f:08:91:69:39:ef:
                    ff:84:03:fc:b1:78:32:9a:ef:cc:e9:ab:5e:18:4c:
                    65:de:97:17:63:08:28:a1:b3:23:fd:68:7f:20:25:
                    44:2f:1d:b2:cd:3b:23:9a:0e:9c:be:75:49:28:04:
                    c8:a5:9d:fa:fd:34:48:56:e0:f9:8e:15:48:37:c4:
                    4a:b8:ef:bb:89:68:79:0b:84:4f:b9:1a:97:10:7c:
                    3e:30:76:d5:a1:ff:f3:c6:da:b6:3f:90:91:00:0e:
                    16:74:0c:ce:a4:0c:6d:2f:00:30:53:be:79:fa:c3:
                    bf:5a:2f:a7:a2:21:53:19:f5:3f:70:e0:04:4f:13:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2B:B6:B9:1D:0D:77:24:92:64:F2:31:F9:21:9A:41:A9:6D:6F:67
            X509v3 Authority Key Identifier:
                keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c1:15:60:9a:05:ec:63:6e:23:49:f3:34:89:5a:4c:8d:79:
         5d:3e:1a:57:11:ff:1c:88:9f:45:34:cd:d1:2a:a5:7a:1b:4b:
         fe:39:e0:0a:67:9b:fa:69:80:fd:6d:1f:e4:b1:5f:9f:d8:b6:
         0b:8c:8d:1d:e8:c0:9d:50:94:74:12:6b:5b:2b:e3:00:1a:95:
         d8:a2:2a:a3:70:f0:00:e5:14:51:e8:38:2b:5a:57:ec:1b:4f:
         12:ab:fc:d0:82:22:13:8d:09:24:c2:d1:c1:22:a4:2f:64:00:
         36:65:ca:5e:a5:da:bb:1f:c6:3b:8d:e6:e8:8c:69:ee:d3:44:
         ef:c1:ea:82:fb:f7:dd:5f:2f:68:d8:b2:18:1c:a9:ab:f6:db:
         13:a6:13:04:85:30:e1:d5:10:b5:97:4d:93:14:51:2d:46:d7:
         a7:b8:d8:5e:2e:6e:86:4e:42:ab:97:37:1b:2e:77:b2:d7:a9:
         8c:5d:23:1b:09:b3:1e:1e:c6:73:32:ca:b1:5e:5d:3a:a8:ce:
         ff:29:53:d8:18:8a:23:42:29:51:06:74:c0:72:ae:5f:33:81:
         8f:5c:a6:52:2b:ff:68:07:70:7e:26:10:23:1e:21:8f:83:ee:
         2a:ea:61:b8:00:13:b3:7a:8b:d0:cc:f7:8e:41:cf:1c:f7:65:
         8e:b8:cc:02
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODU1RjExMC8GA1UEBRMoM0E5MDZDNjFFMTNEQjg5RTYxRENDQUYxMDM2QTMyQkVE
QUE4N0Y1RjAeFw0yNjEwMDkwODU5NThaFw0yNjEwMTYwODU5NThaMBgxFjAUBgNV
BAMTDTZhYzhhZDBlLTM3ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8jcd5gLMSOvd0/g4rqO8VWwDHu0T7cMnMTA7/pxm0jJWNw8J5Tzp4bbTRnobL
GT11zDOKjlgsuesGo4d90N/9Upn/hPxf9Q/BghKcCB7061rA8wRs3ReevYOffBzM
cJzHyiJfhCvoRv/hFd8v1gR8CVXrtxjT3fYnBdLoQxFWsj8IkWk57/+EA/yxeDKa
78zpq14YTGXelxdjCCihsyP9aH8gJUQvHbLNOyOaDpy+dUkoBMilnfr9NEhW4PmO
FUg3xEq477uJaHkLhE+5GpcQfD4wdtWh//PG2rY/kJEADhZ0DM6kDG0vADBTvnn6
w79aL6eiIVMZ9T9w4ARPEyqjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXiu2uR0N
dySSZPIx+SGaQaltb2cwHwYDVR0jBBgwFoAUOpBsYeE9uJ5h3MrxA2oyvtqof18w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NTVGLzYwRDc4MTU0NDI2
NzExRjFCNzYxNTdGRUEzODMzNzczL09wQnNZZUU5dUo1aDNNcnhBMm95dnRxb2Yx
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT3BCc1llRTl1SjVoM01yeEEyb3l2dHFvZjE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
NTVGLzYwRDc4MTU0NDI2NzExRjFCNzYxNTdGRUEzODMzNzczL09wQnNZZUU5dUo1
aDNNcnhBMm95dnRxb2YxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBgwRVgmgXsY24jSfM0iVpMjXldPhpXEf8ciJ9FNM3RKqV6G0v+OeAKZ5v6aYD9
bR/ksV+f2LYLjI0d6MCdUJR0EmtbK+MAGpXYoiqjcPAA5RRR6DgrWlfsG08Sq/zQ
giITjQkkwtHBIqQvZAA2Zcpepdq7H8Y7jebojGnu00TvweqC+/fdXy9o2LIYHKmr
9tsTphMEhTDh1RC1l02TFFEtRtenuNheLm6GTkKrlzcbLney16mMXSMbCbMeHsZz
MsqxXl06qM7/KVPYGIojQilRBnTAcq5fM4GPXKZSK/9oB3B+JhAjHiGPg+4q6mG4
ABOzeovQzPeOQc8c92WOuMwC
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:33:38 2026 by rpki-client