Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
File:                     EOplMmUQJQKUQ84SQ1fTPSisJMA.mft (raw, json)
Hash identifier:          diekrYDssSPewkZttQ8eYudR62y7tKN3xpBEKtnhRGc=
Subject key identifier:   76:33:BC:95:5D:A9:CE:4D:BA:76:0C:94:C5:73:07:13:E2:F7:76:C2
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
Manifest number:          013A
Signing time:             Fri 27 Mar 2026 04:54:43 +0000
Manifest this update:     Fri 27 Mar 2026 04:54:43 +0000
Manifest next update:     Fri 03 Apr 2026 04:54:43 +0000
Files and hashes:         1: EOplMmUQJQKUQ84SQ1fTPSisJMA.crl (hash: ygeyPp19I8OIhcis2JpOMHwlrhlnop8WhzzIglmNgnI=)
                          2: 55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (hash: dgE0cigxPpAG74LnL82onQenU7J1/ApnhpaJl0lWoU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90, serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Mar 27 04:54:43 2026 GMT
            Not After : Apr  3 04:54:43 2026 GMT
        Subject: CN=69c60d93-57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:c9:83:ea:ad:24:b1:76:e6:5b:8f:69:28:
                    80:ea:06:4f:8d:78:1a:ec:34:97:96:44:63:4e:86:
                    b8:01:85:ba:3a:93:11:e1:ac:57:cc:f2:7d:92:cb:
                    43:7c:0f:17:46:d3:d3:9e:14:87:d7:dc:bf:a2:83:
                    19:7b:e1:96:74:c7:91:07:6d:c3:43:6d:a1:83:27:
                    37:ed:5b:d7:92:2b:cc:83:74:72:38:94:62:09:83:
                    d3:77:25:38:7c:31:03:3e:d6:4d:1b:11:b2:67:8b:
                    f4:5e:83:16:79:45:ff:90:90:fd:ad:66:8f:33:71:
                    51:ce:2f:e8:da:53:3b:6f:ec:2d:6d:26:ec:d6:47:
                    6c:90:ca:28:88:88:18:99:ed:dd:26:e9:45:63:06:
                    8b:5b:68:63:49:f1:5c:0c:d5:f0:b8:64:1c:ee:0c:
                    c8:f2:95:20:da:38:ad:54:e7:3c:af:6b:cc:67:79:
                    bb:ef:c9:a8:93:2f:da:fb:34:ac:6d:d6:f0:89:c7:
                    eb:97:98:f5:48:0b:2a:03:92:00:04:8b:a1:b1:f5:
                    2d:a0:7a:cf:ff:05:81:a8:bf:3e:6b:b3:bd:38:ac:
                    f9:d4:25:68:29:97:c6:17:dc:1d:9b:e7:1b:a8:2b:
                    4a:55:b2:bf:34:fa:bb:d5:2d:b3:c3:d4:71:df:c9:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:BC:95:5D:A9:CE:4D:BA:76:0C:94:C5:73:07:13:E2:F7:76:C2
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:58:5f:8f:b7:4e:f4:e4:e8:73:96:df:69:90:23:92:96:
         76:58:61:28:9e:dd:4b:79:94:8c:ef:8b:1b:26:74:98:4d:cd:
         cc:fd:dc:9a:ad:dc:ed:5e:af:8c:2f:d1:72:db:97:76:87:ca:
         a3:d8:ff:88:3d:e8:8e:54:4c:29:b0:03:b7:cc:4e:78:ed:f8:
         70:4a:27:a4:2d:0f:39:d3:1d:1c:6b:d2:73:15:d2:fa:fd:26:
         74:4e:8c:cd:64:e7:fb:fc:e2:de:59:d5:4f:1c:28:c8:15:bd:
         77:f3:a5:97:e0:54:52:9d:aa:b0:a4:83:e4:2a:83:d7:e8:c2:
         1c:93:a4:45:64:ef:3e:aa:ff:fe:2e:90:2b:d1:19:06:7b:65:
         eb:c8:dd:2f:7a:24:95:6b:6f:9d:2f:9f:1b:31:5b:9b:d1:10:
         c3:57:24:1f:d7:20:14:ea:5c:21:d0:d6:3d:57:54:de:0d:21:
         4b:48:01:37:d4:56:f2:77:7c:80:95:0a:ea:0f:4f:dc:b4:55:
         6b:e5:5a:f5:1e:0d:f5:2a:b4:61:3d:bd:5e:88:ea:da:ee:c6:
         0b:dc:e5:15:6b:e7:8e:c5:be:af:a5:03:02:00:df:42:f4:56:
         38:d0:af:39:2e:02:96:60:6f:dc:19:d7:9b:08:5d:cc:27:bd:
         fa:b9:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:00:01 2026 by rpki-client