Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
File:                     ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json)
Hash identifier:          umAYajW4RHij4t8k6MX724lZQzjZBBK+pI2IUnwx/mY=
Subject key identifier:   87:1B:62:98:F3:0A:34:34:43:1D:15:07:5C:D4:1A:4D:63:79:D4:B9
Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
Certificate issuer:       /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
Manifest number:          05A5
Signing time:             Tue 12 May 2026 23:16:53 +0000
Manifest this update:     Tue 12 May 2026 23:16:53 +0000
Manifest next update:     Tue 19 May 2026 23:16:53 +0000
Files and hashes:         1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: LW9N1IGX62Cj+qqKYvaLH8hUJHyi4CNJbJWFQOLHO98=)
                          2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: 0SaqMb330usfcrtRPgjBAgbasyEjNprf9GgoNQTfu2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl
                          rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
        Validity
            Not Before: May 12 23:16:53 2026 GMT
            Not After : May 19 23:16:53 2026 GMT
        Subject: CN=6a03b4e5-1cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:c2:70:09:54:31:b2:6f:7f:18:22:cb:71:
                    25:94:4a:59:b8:c2:75:46:bf:f4:ea:04:6e:1c:43:
                    e1:56:c6:b3:71:95:56:7a:78:1f:ea:1e:39:7f:fc:
                    97:dc:73:96:7a:c8:0a:b0:16:8f:4f:af:f0:37:01:
                    76:f8:a4:a1:f4:d1:ae:60:0c:71:a6:7a:58:88:89:
                    70:57:42:ab:6c:96:3e:91:0e:d7:4d:cc:4a:28:20:
                    4d:43:1a:67:59:eb:f0:a9:93:68:04:50:63:8a:57:
                    f0:11:ad:de:b2:0a:16:91:43:7f:17:b3:4c:d3:e4:
                    9f:b5:9b:bc:c4:a5:38:a8:6f:c5:45:a7:f3:ea:1e:
                    f7:5e:67:cf:c6:31:da:89:62:64:e2:75:1c:91:c6:
                    05:41:6a:ec:31:d7:a3:b8:28:3d:e1:88:bc:4a:17:
                    ce:a4:ff:fc:88:b5:71:6c:ee:dd:f0:7a:20:2b:6c:
                    ee:f8:b1:09:00:9e:f5:d3:0f:8f:09:62:9d:86:66:
                    43:21:7a:b1:56:e4:f6:63:5b:49:53:11:03:a8:57:
                    e2:27:6e:75:e3:ec:b2:9f:cc:76:7b:62:2a:cb:02:
                    6a:0d:5f:98:7a:6b:d5:ac:2d:69:c0:2b:51:56:c9:
                    cd:b7:6a:1b:35:a0:88:b0:72:d9:ac:21:bd:fd:71:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1B:62:98:F3:0A:34:34:43:1D:15:07:5C:D4:1A:4D:63:79:D4:B9
            X509v3 Authority Key Identifier:
                keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:41:d5:c3:70:9e:60:3d:2c:7f:59:b6:52:b9:50:d8:a6:
         9f:90:d9:f4:34:80:b2:6a:e1:b0:c3:24:e0:ed:22:07:79:77:
         2f:26:01:d8:ec:fd:80:7a:7a:70:64:e3:72:d8:c9:dc:83:7e:
         19:cb:99:e3:f2:0f:9c:c3:70:5d:6d:78:ca:fa:10:aa:6d:c5:
         9d:04:87:ec:c4:1d:db:6d:0d:39:26:74:09:08:05:8a:49:16:
         f1:01:58:e6:62:70:99:10:97:0c:e8:c5:27:4c:f3:16:b4:28:
         cf:6c:31:96:d2:4d:a1:6b:eb:07:26:27:66:89:86:b6:b5:5a:
         18:24:87:c5:ba:22:0f:37:a4:39:e3:90:1c:7d:c6:65:1e:75:
         c6:2d:bc:f2:39:71:a1:e7:6d:83:c9:ad:cf:1e:44:c1:40:a4:
         e8:f0:eb:95:f3:24:29:24:6d:bb:0d:26:1c:60:61:d9:91:e9:
         00:d5:38:0c:94:f0:02:9c:40:5d:41:fa:56:9c:c4:fb:71:42:
         44:e9:49:9d:a8:51:83:0e:89:dd:e6:ae:85:a7:c7:38:40:b0:
         ad:37:4f:a8:b1:65:7e:46:b1:c0:83:3d:e2:89:ad:e5:ae:db:
         5e:db:a7:5a:24:66:3f:20:02:83:0a:88:e0:b1:57:60:ef:8d:
         d3:d9:16:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz
RjM3NTNBNDcwHhcNMjYwNTEyMjMxNjUzWhcNMjYwNTE5MjMxNjUzWjAYMRYwFAYD
VQQDEw02YTAzYjRlNS0xY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2jCcAlUMbJvfxgiy3EllEpZuMJ1Rr/06gRuHEPhVsazcZVWengf6h45f/yX
3HOWesgKsBaPT6/wNwF2+KSh9NGuYAxxpnpYiIlwV0KrbJY+kQ7XTcxKKCBNQxpn
WevwqZNoBFBjilfwEa3esgoWkUN/F7NM0+SftZu8xKU4qG/FRafz6h73XmfPxjHa
iWJk4nUckcYFQWrsMdejuCg94Yi8ShfOpP/8iLVxbO7d8HogK2zu+LEJAJ710w+P
CWKdhmZDIXqxVuT2Y1tJUxEDqFfiJ2514+yyn8x2e2IqywJqDV+YemvVrC1pwCtR
VsnNt2obNaCIsHLZrCG9/XENMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcbYpjz
CjQ0Qx0VB1zUGk1jedS5MB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1
MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew
dGZoaE55ZE5RbEVfTjFPa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVF1B1cNwnmA9LH9ZtlK5UNimn5DZ9DSAsmrhsMMk4O0iB3l3LyYB2Oz9gHp6
cGTjctjJ3IN+GcuZ4/IPnMNwXW14yvoQqm3FnQSH7MQd220NOSZ0CQgFikkW8QFY
5mJwmRCXDOjFJ0zzFrQoz2wxltJNoWvrByYnZomGtrVaGCSHxboiDzekOeOQHH3G
ZR51xi288jlxoedtg8mtzx5EwUCk6PDrlfMkKSRtuw0mHGBh2ZHpANU4DJTwApxA
XUH6VpzE+3FCROlJnahRgw6J3eauhafHOECwrTdPqLFlfkaxwIM94omt5a7bXtun
WiRmPyACgwqI4LFXYO+N09kW8g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:09 2026 by rpki-client