Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          we4jUvI6hemT/Jc4TjpqpgN8H7Smj5mFWtqIBPEvomA=
Subject key identifier:   AF:94:FD:67:07:2A:D0:09:25:79:7C:00:C2:93:EC:E6:C0:56:09:70
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       04EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          04E6
Signing time:             Sun 10 May 2026 23:50:35 +0000
Manifest this update:     Sun 10 May 2026 23:50:35 +0000
Manifest next update:     Sun 17 May 2026 23:50:35 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: XLeQ35+aTLlkFLmfKl1mj2+1v31VwJyIB6MxNbgCYdc=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: 3aUq+4eZ5x7ZiH9oh0Xt34CXF6YQPCZXOEPkKr7X/Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: May 10 23:50:35 2026 GMT
            Not After : May 17 23:50:35 2026 GMT
        Subject: CN=6a0119cb-be06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:ff:6c:82:4a:f9:c3:3f:7c:4f:10:89:13:
                    6b:39:11:6a:65:d2:e5:5b:9f:4c:9a:0e:bd:4d:9a:
                    bb:83:70:84:9d:dd:f9:5c:5d:8a:94:7a:a0:45:97:
                    f1:b3:40:b3:52:81:4f:49:2e:f8:60:b0:81:52:74:
                    80:3b:67:4a:8d:dd:c0:10:bc:4f:17:f2:4b:2f:2c:
                    cc:96:86:0a:dd:8f:5d:3d:cc:f5:a0:3f:59:75:77:
                    58:d7:06:de:6b:31:6f:3b:b4:ed:4c:0a:d4:c6:0c:
                    6b:56:a3:e6:a1:6d:e6:c6:48:e5:01:2d:7e:f4:70:
                    dd:47:23:f0:30:b8:81:5c:ea:ff:bf:ab:65:cf:18:
                    69:73:50:a8:e6:1f:c1:69:49:d6:bf:ab:fd:60:3b:
                    ee:30:76:21:2d:2f:1c:8a:cb:70:73:4a:78:f6:b4:
                    d0:bc:6a:b4:03:66:8b:0f:6d:11:fe:21:4c:48:6a:
                    ac:5d:e9:1a:72:df:3b:be:d3:18:ff:3c:b1:1e:13:
                    3b:4e:86:18:72:0c:dc:26:5c:5e:49:1d:7c:1b:57:
                    f5:fb:8c:28:b0:86:b3:40:79:05:31:2e:7c:56:3d:
                    98:77:37:49:55:e0:7b:3d:b0:20:13:78:bb:59:c2:
                    28:d8:2c:82:07:97:9e:20:9b:e6:e9:7a:70:23:4a:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:94:FD:67:07:2A:D0:09:25:79:7C:00:C2:93:EC:E6:C0:56:09:70
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:71:d8:f4:c4:0c:a2:f8:c1:76:7e:48:05:e5:38:ac:52:63:
         80:6c:60:77:3a:5a:60:50:7b:a4:09:39:65:cb:2c:83:74:90:
         12:d2:62:a8:ee:d4:95:29:79:61:8d:19:c4:60:58:66:70:69:
         1a:bb:e5:1d:50:ce:bb:60:8c:23:1e:dc:58:d7:7c:94:68:e9:
         ec:c7:46:f3:7a:3c:09:a0:bd:fb:03:ee:5d:6f:37:0c:77:36:
         47:4c:9a:28:5d:f4:af:43:5b:bf:a4:91:a2:55:a2:87:fa:fe:
         5e:09:e7:8a:96:db:78:e0:17:4a:7e:76:7a:02:fe:89:88:9d:
         66:de:ae:6f:ae:65:4a:43:2a:bd:fa:09:66:15:e8:47:3f:ac:
         7c:cb:96:8e:9f:88:c0:0c:bf:ca:44:e0:45:ef:99:89:97:4f:
         eb:61:dd:48:1e:3d:60:24:88:5f:8c:43:61:4d:12:0d:54:c4:
         8a:e6:8d:ec:f1:f7:9a:91:ec:1e:42:05:8c:f6:a2:11:ed:3b:
         8b:b7:4e:b8:af:ae:69:b1:bb:c1:ea:9b:57:14:c7:c5:8a:51:
         f5:bf:f9:47:67:d4:12:67:c3:82:7a:ae:90:14:d5:62:0a:b7:
         f6:e3:95:f6:ef:52:cc:c6:30:49:63:e7:58:c1:67:83:56:39:
         36:e2:a4:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2
MDMwQzdERkQwHhcNMjYwNTEwMjM1MDM1WhcNMjYwNTE3MjM1MDM1WjAYMRYwFAYD
VQQDEw02YTAxMTljYi1iZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutT/bIJK+cM/fE8QiRNrORFqZdLlW59Mmg69TZq7g3CEnd35XF2KlHqgRZfx
s0CzUoFPSS74YLCBUnSAO2dKjd3AELxPF/JLLyzMloYK3Y9dPcz1oD9ZdXdY1wbe
azFvO7TtTArUxgxrVqPmoW3mxkjlAS1+9HDdRyPwMLiBXOr/v6tlzxhpc1Co5h/B
aUnWv6v9YDvuMHYhLS8cistwc0p49rTQvGq0A2aLD20R/iFMSGqsXekact87vtMY
/zyxHhM7ToYYcgzcJlxeSR18G1f1+4wosIazQHkFMS58Vj2YdzdJVeB7PbAgE3i7
WcIo2CyCB5eeIJvm6XpwI0oXqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+U/WcH
KtAJJXl8AMKT7ObAVglwMB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG
NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi
WmE2MEwyZko4X05nTU1mZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARHHY9MQMovjBdn5IBeU4rFJjgGxgdzpaYFB7pAk5Zcssg3SQEtJiqO7UlSl5
YY0ZxGBYZnBpGrvlHVDOu2CMIx7cWNd8lGjp7MdG83o8CaC9+wPuXW83DHc2R0ya
KF30r0Nbv6SRolWih/r+XgnnipbbeOAXSn52egL+iYidZt6ub65lSkMqvfoJZhXo
Rz+sfMuWjp+IwAy/ykTgRe+ZiZdP62HdSB49YCSIX4xDYU0SDVTEiuaN7PH3mpHs
HkIFjPaiEe07i7dOuK+uabG7weqbVxTHxYpR9b/5R2fUEmfDgnqukBTVYgq39uOV
9u9SzMYwSWPnWMFng1Y5NuKkpA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:23:43 2026 by rpki-client