Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          +NC75jG6Up4blNfPYg6oqr9wsKa4GY0d5TTKy3A78x0=
Subject key identifier:   86:97:B2:49:07:9C:3C:A2:3D:EF:5E:7A:B6:DA:5E:F7:60:C6:6E:67
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07F1
Signing time:             Wed 22 Jul 2026 21:53:23 +0000
Manifest this update:     Wed 22 Jul 2026 21:53:23 +0000
Manifest next update:     Wed 29 Jul 2026 21:53:23 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: rf/eFnm99KDmTZdOJb0vffuom8f12/4jXDJiduv/Mws=)
                          2: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
                          3: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Jul 22 21:53:23 2026 GMT
            Not After : Jul 29 21:53:23 2026 GMT
        Subject: CN=6a613bd3-b194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a9:55:17:89:d4:7f:e1:2b:9f:4b:e9:cd:17:
                    94:61:13:6e:73:14:a1:eb:8c:33:5e:15:d9:a2:90:
                    2b:ae:2b:0b:fb:57:61:78:cf:47:7b:a6:b2:a5:32:
                    23:5f:ef:8b:68:1d:dd:e7:32:78:3a:a6:99:a4:b9:
                    7a:41:ae:36:4a:dc:c6:11:ac:02:be:33:87:e3:9d:
                    72:40:42:35:f2:27:d0:1b:b1:77:f6:06:6a:78:b2:
                    9f:36:a4:03:42:a1:78:a3:83:a8:5a:50:22:0e:bc:
                    c5:29:d5:d4:e9:f0:06:7a:04:09:0b:bb:9d:43:ab:
                    a1:a8:e5:18:a6:da:40:33:db:b9:ed:1b:63:c9:16:
                    15:9e:96:af:f8:e1:72:ab:73:e7:1c:6e:8f:69:1a:
                    15:ef:93:82:17:b6:f5:51:42:97:0c:d6:9e:38:ec:
                    37:3c:de:eb:63:7a:76:47:5c:1b:9a:96:b7:29:a9:
                    13:57:39:c2:96:7e:21:15:88:18:93:89:23:f5:b9:
                    9b:8b:b4:b5:40:a4:b8:47:d9:2a:14:93:83:1d:29:
                    8a:b7:99:ca:de:01:8e:7e:0e:b5:51:9a:6d:3f:17:
                    8e:56:cc:7c:51:e9:df:75:c0:8d:82:9e:e4:4a:fb:
                    85:98:ee:44:a0:52:94:c2:ed:6e:e7:0a:a2:c3:c3:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:97:B2:49:07:9C:3C:A2:3D:EF:5E:7A:B6:DA:5E:F7:60:C6:6E:67
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:ab:81:d1:f2:b1:1e:da:47:c9:b2:b8:77:f2:60:2e:4c:
         1d:0a:d2:ff:2b:b5:84:b3:34:01:99:3b:e9:f8:a8:91:b9:d5:
         1e:f9:20:0a:af:89:24:8c:8b:b0:7e:da:19:d8:0a:75:5f:37:
         e3:35:86:bd:1d:fe:bd:84:f4:25:82:74:e0:c1:b0:36:12:60:
         0f:c9:bf:78:57:af:1b:b6:8e:20:2f:e1:b1:87:e4:ca:8b:d3:
         f6:2d:a1:30:4b:fa:c8:3e:e3:9c:83:93:16:46:d0:46:c4:0f:
         c7:fe:02:fc:fe:a1:82:3e:bf:03:56:b8:5c:3c:f2:fc:31:f0:
         a1:da:59:87:32:41:d2:f9:93:b6:fd:55:a4:95:7f:c3:ae:7e:
         48:7f:77:09:88:37:76:af:34:d5:04:f7:b8:3b:e9:97:7a:20:
         a9:d1:60:2b:65:a2:20:50:23:d7:01:39:ee:04:b9:1e:f8:58:
         e5:b7:41:b0:3f:6b:87:97:7e:3e:c9:9e:66:1b:42:f6:af:79:
         4d:43:b6:90:a0:43:b1:b4:23:c6:57:66:46:57:ca:f3:fa:37:
         bd:86:b6:07:69:2e:49:66:8b:20:4e:74:b1:72:e2:d4:e2:eb:
         9a:cd:a7:85:43:99:3a:9f:53:88:a6:c6:81:bb:82:93:59:ef:
         78:ae:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:04 2026 by rpki-client