Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
File:                     oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json)
Hash identifier:          dQ3bydZpwm9D/DDM/TLvR5rQ8rr9z2S9+8GoMFgp5Nk=
Subject key identifier:   B0:2A:9A:92:A3:77:B1:51:45:3A:10:F2:AA:FA:54:07:25:C4:33:A5
Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
Certificate issuer:       /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
Manifest number:          75
Signing time:             Thu 23 Jul 2026 04:56:38 +0000
Manifest this update:     Thu 23 Jul 2026 04:56:37 +0000
Manifest next update:     Thu 30 Jul 2026 04:56:37 +0000
Files and hashes:         1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: 6jCPMhszzRdQ+AdZLsID1jz1xibJPdO75xAPrYbhIco=)
                          2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
        Validity
            Not Before: Jul 23 04:56:37 2026 GMT
            Not After : Jul 30 04:56:37 2026 GMT
        Subject: CN=6a619f06-f1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:7b:c0:00:30:f6:f0:e8:53:a6:25:59:da:
                    5c:5b:0e:84:62:ad:58:a0:e5:94:0f:f5:2c:d1:82:
                    2e:ab:5b:09:de:04:83:db:a6:b7:11:05:1b:65:00:
                    bc:2b:2f:e0:7c:64:a5:f7:e2:d4:ed:e1:3b:b4:f6:
                    8c:cb:14:fb:26:06:4d:ee:05:f6:93:e9:92:48:48:
                    57:f1:37:d0:0d:a0:99:ba:8c:b4:f4:67:5f:7c:8d:
                    29:5d:5a:02:61:68:ae:98:f8:48:41:30:2f:73:fa:
                    d2:0f:df:86:22:33:87:87:2b:54:09:c7:a3:f4:95:
                    a2:99:3b:f3:88:18:a6:94:ec:2a:2f:7b:af:cc:2e:
                    d3:b2:f5:11:5c:b1:06:77:f7:b9:7b:8a:ab:93:d1:
                    1d:cb:06:79:4e:d4:c9:b7:91:fd:f9:e8:d3:69:e8:
                    cc:26:73:d2:c8:85:e8:7e:6a:f6:47:9d:a7:c6:54:
                    c4:62:ff:e0:fc:61:a0:12:f3:24:6a:51:ab:83:1d:
                    2d:f5:60:f8:29:57:8a:75:cc:9c:eb:50:05:cb:d2:
                    71:13:3d:f4:e6:10:14:5b:3a:f1:25:9b:d6:80:75:
                    4f:e6:4a:4d:31:d3:07:71:1c:65:88:01:81:68:6a:
                    fe:68:0f:05:e3:df:6f:e9:8e:e8:b5:46:3a:70:09:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:9A:92:A3:77:B1:51:45:3A:10:F2:AA:FA:54:07:25:C4:33:A5
            X509v3 Authority Key Identifier:
                keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e3:24:7d:ed:3c:fe:62:a3:e1:49:a7:9f:90:c9:b4:8d:8a:
         16:9b:d9:d8:a0:63:f1:aa:42:ff:1f:e3:c7:31:8e:9b:fd:6e:
         67:40:cc:fd:25:b7:49:b4:42:2a:2c:c3:8a:25:e0:4b:e3:7a:
         6f:96:19:68:6a:21:b2:b3:75:0f:23:e7:ec:b1:ed:58:d1:f2:
         cc:7e:9c:a9:e5:b4:0e:73:46:8a:07:61:a1:28:d6:ba:6e:e4:
         f6:0b:8f:f2:db:a2:8f:71:3c:66:e3:9b:65:0d:05:fc:10:a7:
         dc:d7:ed:6f:ba:40:09:3c:bc:3d:cf:b3:53:2f:ed:c4:a6:dc:
         24:5b:00:ab:dd:1e:06:82:ae:c1:32:22:40:1f:0a:9d:72:e6:
         ee:e5:67:8f:5b:48:d1:59:13:61:4a:58:e1:ae:d8:b3:32:6f:
         42:fc:3d:06:92:56:b9:41:76:33:16:0f:bd:0f:87:e5:b0:b3:
         93:aa:30:f8:f9:f7:ec:d9:1c:d1:4f:bb:89:42:39:c2:71:8c:
         96:8a:9d:39:37:e1:24:83:52:78:6a:e7:d5:c1:1d:2c:13:74:
         67:47:50:e8:a9:dc:ed:be:b3:56:ad:b7:70:6c:50:a7:0d:06:
         e1:86:8d:25:09:cc:62:ca:7b:93:56:56:be:c1:8a:79:70:4d:
         9d:95:f8:7c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QjI5NzExMC8GA1UEBRMoQTBGQ0JFOUJDQjQzMjhBOUU4QkNDQTFGNUUxNDk2QUND
MkNFMkVEOTAeFw0yNjA3MjMwNDU2MzdaFw0yNjA3MzAwNDU2MzdaMBgxFjAUBgNV
BAMTDTZhNjE5ZjA2LWYxZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx6HvAADD28OhTpiVZ2lxbDoRirVig5ZQP9SzRgi6rWwneBIPbprcRBRtlALwr
L+B8ZKX34tTt4Tu09ozLFPsmBk3uBfaT6ZJISFfxN9ANoJm6jLT0Z198jSldWgJh
aK6Y+EhBMC9z+tIP34YiM4eHK1QJx6P0laKZO/OIGKaU7Cove6/MLtOy9RFcsQZ3
97l7iquT0R3LBnlO1Mm3kf356NNp6Mwmc9LIheh+avZHnafGVMRi/+D8YaAS8yRq
UauDHS31YPgpV4p1zJzrUAXL0nETPfTmEBRbOvElm9aAdU/mSk0x0wdxHGWIAYFo
av5oDwXj32/pjui1RjpwCWTLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsCqakqN3
sVFFOhDyqvpUByXEM6UwHwYDVR0jBBgwFoAUoPy+m8tDKKnovMofXhSWrMLOLtkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3L0JCRjI4RERBRDk5
NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvb1B5LW04dERLS25vdk1vZlhoU1dyTUxPTHRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC
Mjk3L0JCRjI4RERBRDk5NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tu
b3ZNb2ZYaFNXck1MT0x0ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCd4yR97Tz+YqPhSaefkMm0jYoWm9nYoGPxqkL/H+PHMY6b/W5nQMz9JbdJtEIq
LMOKJeBL43pvlhloaiGys3UPI+fsse1Y0fLMfpyp5bQOc0aKB2GhKNa6buT2C4/y
26KPcTxm45tlDQX8EKfc1+1vukAJPLw9z7NTL+3EptwkWwCr3R4Ggq7BMiJAHwqd
cubu5WePW0jRWRNhSljhrtizMm9C/D0Gkla5QXYzFg+9D4flsLOTqjD4+ffs2RzR
T7uJQjnCcYyWip05N+Ekg1J4aufVwR0sE3RnR1DoqdztvrNWrbdwbFCnDQbhho0l
CcxiynuTVla+wYp5cE2dlfh8
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:36 2026 by rpki-client