Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          GdoXcInRRUD6N6LgDyiQS5xQEITR5vg7IgAX9/YB4Uc=
Subject key identifier:   AF:7C:1E:47:F0:BF:C7:94:B7:C4:DC:8D:8A:A3:E7:93:AE:FF:D3:00
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          052D
Signing time:             Tue 22 Sep 2026 23:13:15 +0000
Manifest this update:     Tue 22 Sep 2026 23:13:14 +0000
Manifest next update:     Tue 29 Sep 2026 23:13:14 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: AqU/WJGdgC1eRaZS8rZ/7I4mkIC5rvMFcsilOgEB3Wk=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: C4szlWcxl6UAzgUgX/rK3CXwcEmd+QBL2alZ4NdZAq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: Sep 22 23:13:14 2026 GMT
            Not After : Sep 29 23:13:14 2026 GMT
        Subject: CN=6ab30b8b-1acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:d6:51:ab:13:bd:c8:db:54:05:96:64:96:
                    28:b0:bf:2a:20:95:f9:81:f7:f2:74:c2:de:27:b2:
                    de:d4:c9:54:54:9b:b4:39:da:44:6a:76:0b:18:10:
                    f2:ed:a3:e6:c4:0f:1b:15:d3:7f:b7:0b:d8:42:e2:
                    9f:0b:6f:bd:ee:94:0b:98:cd:60:61:d6:43:7d:39:
                    c2:c3:67:41:78:f7:c8:b5:27:24:b2:be:63:75:28:
                    8f:4c:1b:0e:81:7b:36:5c:1e:8e:d6:10:48:aa:27:
                    56:1c:b6:02:20:cd:44:9f:cf:73:56:8b:23:4a:5c:
                    ef:39:07:a6:4d:ca:4c:e8:ff:81:29:99:16:27:11:
                    a4:2f:92:2b:c4:fb:a6:e9:43:72:eb:6b:43:9e:d6:
                    ce:c3:2d:13:bd:05:a5:7e:40:ce:44:b3:02:2d:09:
                    91:2d:24:6f:eb:91:03:9a:be:bd:77:01:7f:58:17:
                    36:dc:2d:86:cf:6a:bc:53:cc:67:4c:74:cc:29:c6:
                    a7:22:68:49:ee:d0:fe:67:b5:bd:a3:50:d6:e6:9d:
                    45:5d:49:f1:59:4a:7c:80:32:17:42:8b:40:61:49:
                    93:11:52:46:f3:c4:5f:ec:cb:9e:c0:2b:79:66:3e:
                    dd:b3:7e:41:97:1f:e0:94:02:50:9b:d8:89:47:2a:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7C:1E:47:F0:BF:C7:94:B7:C4:DC:8D:8A:A3:E7:93:AE:FF:D3:00
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:61:15:cf:f5:b6:5e:ae:fa:87:7c:82:45:ff:01:f9:5d:
         d1:8e:88:76:f3:0b:f6:51:ae:ac:1d:6d:48:d0:ab:4d:4c:d6:
         0f:d0:55:5a:a5:86:ac:97:19:b3:aa:13:be:61:1f:cb:20:9c:
         01:a5:b4:60:bd:94:82:18:26:cd:ea:dd:8e:9c:d1:3e:b2:6a:
         b7:b9:b9:e2:3a:79:fe:e6:de:d2:d4:94:e9:84:51:74:d6:36:
         43:0b:03:be:77:4b:dd:29:5b:cb:c1:1e:aa:83:58:03:61:61:
         ff:e7:4c:04:1c:36:82:9a:34:5b:f7:26:ef:2f:ad:9d:3d:d7:
         d0:bb:44:62:ef:30:8d:cb:2a:54:b2:47:6a:76:53:63:87:d8:
         43:ea:28:4f:be:6f:43:a9:df:9e:2c:46:28:90:e7:15:61:5c:
         57:18:be:b7:21:36:51:a4:7e:3b:ff:d2:32:5b:4e:2f:9d:de:
         b5:a4:4c:5f:8e:dc:48:f1:b6:c1:76:0c:d2:47:6b:b5:fe:73:
         00:26:64:9c:c7:ff:58:f3:42:e1:5d:36:9e:37:ca:7b:86:c1:
         55:6f:f2:a7:d1:00:8d:13:dc:40:63:c7:c2:3a:16:fd:f7:86:
         0a:85:60:fe:9a:d6:cb:c4:e1:c7:b7:0d:63:a5:f3:2e:ab:e0:
         aa:37:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:34:15 2026 by rpki-client