Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          pJn/FOJfzZ2PaszijDcA4I1i0/A7dmuj0LMVTqtcWww=
Subject key identifier:   F0:06:48:1A:1B:F7:BB:AE:1C:34:40:B0:8D:86:C0:BA:24:C1:89:D3
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       04D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          04CE
Signing time:             Tue 24 Mar 2026 23:32:25 +0000
Manifest this update:     Tue 24 Mar 2026 23:32:25 +0000
Manifest next update:     Tue 31 Mar 2026 23:32:25 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: ZpCk3WCdEcPrfZGfYEX524aiYFEgGq4OAxBrPT3rbnk=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: 3aUq+4eZ5x7ZiH9oh0Xt34CXF6YQPCZXOEPkKr7X/Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: Mar 24 23:32:25 2026 GMT
            Not After : Mar 31 23:32:25 2026 GMT
        Subject: CN=69c31f09-2e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:e7:0c:c0:a6:d0:ba:ca:8a:68:67:44:a7:
                    20:47:d2:d7:a5:6e:69:a2:48:ba:33:53:45:69:97:
                    1d:0a:d3:ce:d0:a8:03:18:45:8c:fa:33:aa:2f:62:
                    6a:14:ff:f2:19:c8:01:c6:c3:6b:8c:3c:03:7c:e0:
                    2a:30:84:1b:a2:5a:30:b8:b9:5f:2d:b1:d9:10:56:
                    d1:50:52:aa:63:63:a4:8e:88:5e:ec:5b:d7:36:a0:
                    e8:6b:a5:99:ba:60:9a:6f:bb:65:9b:17:a5:da:b4:
                    84:c4:1a:e8:25:95:ca:dd:ca:7c:17:1c:b4:d8:6f:
                    73:80:2b:96:dc:cf:a0:d6:e4:34:6d:d7:e4:4b:d7:
                    40:da:32:f4:37:67:ea:4b:c7:da:be:ea:82:05:0d:
                    d6:1c:64:11:ae:78:87:6c:aa:f6:4f:de:42:5b:af:
                    59:50:15:62:83:a5:6d:e5:64:c2:c6:98:a6:35:86:
                    8f:54:b8:dc:d6:93:1b:d1:e8:a9:17:82:6c:7d:a3:
                    8d:d1:08:2e:2a:00:4c:cd:ba:ef:f1:32:2d:64:a1:
                    23:c5:83:b6:19:67:f6:ba:3e:96:54:3f:0b:73:49:
                    71:2b:3e:93:f6:f8:05:d7:37:9b:9d:4d:ea:23:92:
                    b8:51:e0:9e:07:54:7f:7b:55:e5:3c:ac:ce:3b:2e:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:48:1A:1B:F7:BB:AE:1C:34:40:B0:8D:86:C0:BA:24:C1:89:D3
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:10:69:8f:f6:51:92:2a:bc:18:4a:96:c9:bb:f4:81:b6:
         72:49:89:1f:05:da:25:b1:35:63:ca:34:ea:d2:38:38:dd:81:
         f1:38:bb:55:f9:5d:11:fd:55:1d:d3:9b:cc:8c:09:e9:15:1a:
         0e:89:39:2a:be:3b:af:09:7d:58:05:fe:cc:8a:a1:dc:ed:82:
         be:c2:30:0e:3d:05:7f:cb:95:7d:74:90:67:31:a6:2b:cd:31:
         26:ca:00:a1:a0:ab:6d:9c:92:e8:f1:0f:dc:2e:e4:f2:9f:09:
         a9:ef:c8:17:cc:7b:ef:87:ec:83:5b:2e:7c:81:c9:9f:c4:25:
         ff:67:4c:d8:45:8d:bf:4e:db:08:39:a7:49:a2:e8:cc:8b:57:
         15:e4:d3:29:16:72:8b:34:21:6d:57:f8:8a:d2:30:cc:03:b7:
         bf:67:7a:a8:c4:17:0d:78:ca:6a:69:bf:24:88:2a:fd:bb:34:
         fe:5f:24:20:45:a1:bb:cb:48:2a:c5:10:a0:b6:a6:60:07:5d:
         a8:2f:b5:b5:05:db:6d:33:bb:a6:b9:6d:d2:b9:fb:d0:58:08:
         21:1c:8e:ae:05:25:67:56:5b:61:80:bd:4f:3c:0e:ef:29:27:
         90:f1:d2:fa:a8:35:82:62:3c:2a:f3:71:1f:52:e8:1d:69:49:
         e3:54:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:05 2026 by rpki-client