Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          dR/7vAHdzPrxkbcS01JXFlbPxVWMUmwfMqGtxfXnVu4=
Subject key identifier:   43:FB:2C:F9:7E:CA:F8:93:DA:11:FB:4C:F9:E4:C2:0E:93:D3:0F:11
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          07CD
Signing time:             Tue 12 May 2026 21:28:31 +0000
Manifest this update:     Tue 12 May 2026 21:28:31 +0000
Manifest next update:     Tue 19 May 2026 21:28:31 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: LYi2oW9+HFKnpfIvwXPMUUfBa2UsS+kugB5GBxRrdmw=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
                          3: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: May 12 21:28:31 2026 GMT
            Not After : May 19 21:28:31 2026 GMT
        Subject: CN=6a039b7f-afd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:fd:83:da:27:25:89:3c:d3:05:dd:fe:7b:
                    6c:19:22:07:27:14:80:aa:e9:6d:06:3b:86:62:2f:
                    3d:a0:b3:7e:1b:7a:13:cf:fe:c6:a4:ed:13:3c:31:
                    ce:28:2a:08:39:1a:3d:12:18:58:e5:ff:dc:8e:1e:
                    7d:de:ec:51:80:0a:43:81:cb:b5:c7:49:c3:56:c1:
                    8c:49:81:b8:1a:37:b0:ed:50:c6:52:ce:5f:5f:35:
                    62:8b:51:bb:2b:cf:7d:0c:ec:db:c7:27:dc:84:af:
                    d3:da:76:a0:0a:8f:8c:17:b6:90:e6:e7:6c:aa:c5:
                    c2:d3:c0:29:52:93:3b:d1:62:4d:71:9a:e3:06:d2:
                    58:31:ee:50:db:b8:43:e4:6b:e9:b5:59:85:cb:6e:
                    b9:c9:7d:c4:aa:08:24:a2:1c:cc:87:00:f1:e5:d7:
                    d8:8f:43:62:e8:bc:da:e0:3a:f5:fa:5e:eb:f7:32:
                    ef:50:74:03:8b:f1:ae:14:82:10:5a:2a:54:ff:31:
                    52:1e:d5:3e:f2:d3:16:b9:93:3c:29:da:45:59:40:
                    74:ad:34:87:33:8b:77:7e:84:d1:0c:15:53:ad:7c:
                    5a:af:35:e5:13:55:26:4c:2f:8f:19:6d:df:0b:e1:
                    c2:5e:42:70:ef:ad:e9:39:df:69:36:74:e1:1b:b5:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FB:2C:F9:7E:CA:F8:93:DA:11:FB:4C:F9:E4:C2:0E:93:D3:0F:11
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:52:f1:02:45:c6:f2:65:7e:4d:23:93:1d:e0:d3:37:b2:
         ef:40:da:d8:3b:48:97:19:06:8f:d8:f7:53:f8:08:3c:3f:4c:
         78:cc:5f:b5:7a:5b:ce:92:a8:1b:34:13:97:b5:b1:52:e5:a2:
         63:de:9d:e6:87:b5:cf:10:fa:e4:96:b4:06:e1:a1:d1:59:97:
         af:25:1d:08:71:58:06:3a:b6:ca:c8:ca:b1:3b:02:5f:8f:d3:
         bc:fb:23:38:d8:fa:38:1b:06:65:b3:a9:d4:bd:df:11:8a:da:
         13:5c:55:6c:75:f0:ab:e4:0c:f9:74:ea:3b:a2:70:33:87:6b:
         e0:0f:de:40:87:73:64:97:88:60:f8:b3:93:bb:88:11:cd:03:
         fa:98:ce:1b:07:81:9a:88:da:6c:37:56:08:d4:f6:44:83:62:
         f6:d3:05:ce:be:36:91:1b:35:84:5f:62:9d:72:d7:84:37:7c:
         5f:91:af:8b:8b:2a:4a:b0:75:76:9b:86:e5:da:0a:a9:6e:c6:
         a6:9a:d5:09:df:0e:1d:22:29:2a:65:3f:65:e5:f4:91:50:7d:
         f4:d1:75:2e:bb:68:a2:4a:9e:83:6b:ee:2f:d0:d3:0f:44:e9:
         9c:3e:cb:0f:47:54:03:12:5f:43:d1:1d:a3:13:b2:cc:0b:60:
         b9:67:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:46 2026 by rpki-client