Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File:                     opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier:          Z6uKDikfgHXWyPkINeSVi2J8tzVrWQ7OmDwpuUD+eqI=
Subject key identifier:   1F:05:A8:5A:C7:D5:34:F9:C3:12:62:9D:D2:13:5A:4B:20:14:69:D5
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer:       /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number:          0811
Signing time:             Tue 22 Sep 2026 20:59:26 +0000
Manifest this update:     Tue 22 Sep 2026 20:59:26 +0000
Manifest next update:     Tue 29 Sep 2026 20:59:26 +0000
Files and hashes:         1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: Q6xZptNJEvkhHnclImOl+qcS9h7WJ/f+E9epD8nEC+E=)
                          2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
                          3: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
        Validity
            Not Before: Sep 22 20:59:26 2026 GMT
            Not After : Sep 29 20:59:26 2026 GMT
        Subject: CN=6ab2ec2e-daf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:f8:07:1f:af:36:e7:39:ec:80:b3:9e:d0:
                    d6:e2:98:68:2c:06:f0:8f:d3:3e:de:99:9e:31:05:
                    61:00:4b:ce:e3:f0:78:b6:30:56:35:eb:71:c6:2e:
                    36:56:a2:e6:a7:59:a7:c3:8d:8b:d1:0b:9a:15:0e:
                    4d:40:74:58:8e:80:dd:a8:2d:8d:56:88:09:ca:59:
                    20:a6:16:8d:21:c2:6f:65:2e:4e:83:db:d5:e7:6a:
                    d6:cb:6d:fa:e7:57:df:bf:2d:9b:40:4c:0b:61:9d:
                    e2:0c:1e:fb:86:f1:3a:65:85:94:49:76:d5:60:3d:
                    ab:49:9c:4a:40:0f:02:6f:a7:e8:a7:bb:cc:77:57:
                    7d:fd:e0:bd:9b:90:59:df:73:f7:57:45:d7:a3:15:
                    c6:c4:fb:af:f3:eb:47:68:54:d9:aa:6e:48:8b:f1:
                    e9:05:14:71:6c:47:e6:ce:64:ca:56:d5:36:80:a3:
                    e8:6b:64:1a:81:d0:b5:72:1d:26:9e:d3:12:46:a7:
                    78:8f:30:b8:4b:c8:1a:95:72:27:e6:51:2a:2b:42:
                    1e:e3:d4:d2:53:44:07:a3:2f:d2:2c:1a:26:c8:34:
                    95:a3:68:0d:d8:f2:3d:f0:71:44:d3:af:2c:ef:b2:
                    b0:be:b9:0f:51:ba:a6:0c:06:b6:9a:dd:62:b2:b2:
                    d3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:05:A8:5A:C7:D5:34:F9:C3:12:62:9D:D2:13:5A:4B:20:14:69:D5
            X509v3 Authority Key Identifier:
                keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:34:07:55:36:00:45:70:6c:95:bd:65:37:55:c6:a2:a4:b7:
         0f:19:41:a5:98:c5:6a:b5:d8:15:ab:df:24:13:6b:c2:5e:5f:
         90:41:30:cb:be:2a:1a:40:d8:46:55:33:42:7a:64:ee:6f:3b:
         60:3c:d7:3c:ea:69:7c:a1:bf:9a:7a:9a:62:0c:fe:2e:fb:25:
         79:e3:f3:0e:ff:d3:03:79:20:f1:7f:f5:5b:42:28:84:c6:2d:
         1c:a0:b4:df:f1:54:97:94:bf:54:a4:11:58:f7:e4:94:19:58:
         d8:8f:d8:a0:14:84:67:f3:13:ab:d3:9b:e0:d9:5e:e1:14:64:
         7f:10:34:1d:8c:d3:c5:2b:fb:79:eb:15:28:cd:d6:a8:46:e9:
         3d:b8:08:d9:4a:7b:fe:4f:78:38:a2:6b:c7:0b:33:29:43:0b:
         82:c0:ec:03:93:2d:07:f5:ed:58:e9:16:21:7f:f8:48:4f:aa:
         34:3e:63:9b:0c:1b:c5:33:5a:45:4b:b6:b6:21:33:39:82:1e:
         2f:6f:90:70:22:10:59:ca:50:28:df:93:34:b6:af:61:b5:5d:
         77:74:7a:8a:0e:ac:ec:5e:2f:cf:c7:83:db:a1:04:af:a6:5c:
         15:48:48:65:86:a7:38:97:6f:45:50:d0:f5:ee:87:6c:a2:23:
         58:5b:99:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFDODIxMTAvBgNVBAUTKEEyOTdBMkIwOTMzODJFNDUwODZDQTA3Q0VFNkM5N0Iz
NkJFNEMyQ0QwHhcNMjYwOTIyMjA1OTI2WhcNMjYwOTI5MjA1OTI2WjAYMRYwFAYD
VQQDEw02YWIyZWMyZS1kYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkH4Bx+vNuc57ICzntDW4phoLAbwj9M+3pmeMQVhAEvO4/B4tjBWNetxxi42
VqLmp1mnw42L0QuaFQ5NQHRYjoDdqC2NVogJylkgphaNIcJvZS5Og9vV52rWy236
51ffvy2bQEwLYZ3iDB77hvE6ZYWUSXbVYD2rSZxKQA8Cb6fop7vMd1d9/eC9m5BZ
33P3V0XXoxXGxPuv8+tHaFTZqm5Ii/HpBRRxbEfmzmTKVtU2gKPoa2QagdC1ch0m
ntMSRqd4jzC4S8galXIn5lEqK0Ie49TSU0QHoy/SLBomyDSVo2gN2PI98HFE068s
77KwvrkPUbqmDAa2mt1isrLTAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8FqFrH
1TT5wxJindITWksgFGnVMB8GA1UdIwQYMBaAFKKXorCTOC5FCGygfO5sl7Nr5MLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM4Mi8xOEREQkZEMjNE
RTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExrVUliS0I4N215WHMydmt3
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wZWlzSk00TGtVSWJLQjg3bXlYczJ2a3dzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUM4Mi8xOEREQkZEMjNERTgxMUVCQTM1RDUwMUZDNEY5QUUwMi9vcGVpc0pNNExr
VUliS0I4N215WHMydmt3czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhDQHVTYARXBslb1lN1XGoqS3DxlBpZjFarXYFavfJBNrwl5fkEEwy74qGkDY
RlUzQnpk7m87YDzXPOppfKG/mnqaYgz+LvsleePzDv/TA3kg8X/1W0IohMYtHKC0
3/FUl5S/VKQRWPfklBlY2I/YoBSEZ/MTq9Ob4Nle4RRkfxA0HYzTxSv7eesVKM3W
qEbpPbgI2Up7/k94OKJrxwszKUMLgsDsA5MtB/XtWOkWIX/4SE+qND5jmwwbxTNa
RUu2tiEzOYIeL2+QcCIQWcpQKN+TNLavYbVdd3R6ig6s7F4vz8eD26EEr6ZcFUhI
ZYanOJdvRVDQ9e6HbKIjWFuZnw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:42:28 2026 by rpki-client