Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          lnRP+JGOmIzEOo+6347jDMr/IWqVHNfK2ocqJoOucdQ=
Subject key identifier:   AA:04:3E:3D:6F:93:F1:D8:DF:98:1A:DB:2A:7F:9C:09:38:67:91:EC
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       054F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          0548
Signing time:             Sat 14 Nov 2026 23:16:21 +0000
Manifest this update:     Sat 14 Nov 2026 23:16:20 +0000
Manifest next update:     Sat 21 Nov 2026 23:16:20 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: h9pcjA0umaX/jN1gQWAtSB3wZ4zKPPSaDDov9CxQJ7w=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: C4szlWcxl6UAzgUgX/rK3CXwcEmd+QBL2alZ4NdZAq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: Nov 14 23:16:20 2026 GMT
            Not After : Nov 21 23:16:20 2026 GMT
        Subject: CN=6af8ebc5-4409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:8e:2b:52:5d:e4:6c:5b:d8:d7:2c:81:84:
                    c1:4d:84:5c:28:4d:ab:a3:4b:e8:3d:56:7c:ca:a2:
                    5a:cb:e8:61:d1:25:bb:97:da:69:c1:d1:dd:c9:2c:
                    48:2f:f5:12:7c:5b:d9:8a:4f:d7:df:a0:82:12:31:
                    13:65:3d:fb:97:fb:74:e0:48:16:06:65:89:6e:34:
                    cc:fd:8a:0f:61:5d:60:19:dd:35:f3:40:62:d3:9d:
                    6c:87:e3:0c:db:f8:18:1a:b6:4d:92:70:75:ad:8f:
                    d3:8d:4d:7c:b4:85:ab:49:5a:1e:69:9e:1c:66:3d:
                    c1:8d:e0:0b:6d:a0:aa:2c:f5:b7:06:56:2c:b2:05:
                    40:15:86:eb:42:27:e0:67:96:ed:f1:9b:2f:30:98:
                    5b:45:4d:23:0d:b4:8d:bf:67:ac:95:35:1f:1a:d6:
                    cb:b9:54:6a:a3:5d:0d:2e:b0:49:bc:7b:4a:7a:2f:
                    f7:dd:2c:2a:a3:38:cc:62:0d:0d:ac:be:37:18:f0:
                    53:5f:64:93:a6:4c:ba:1a:f8:cc:2e:8f:91:b8:9d:
                    e0:42:0f:27:d2:ba:74:61:f5:df:37:c4:a6:57:72:
                    b6:60:21:ec:2b:eb:2d:c1:48:60:7d:e4:46:0c:12:
                    d0:1b:2b:39:c1:e2:26:62:11:26:df:fe:d6:7b:a0:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:3E:3D:6F:93:F1:D8:DF:98:1A:DB:2A:7F:9C:09:38:67:91:EC
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:ae:f2:e0:1f:6b:57:f7:30:eb:d1:c3:79:f3:f6:29:73:
         eb:5a:8d:5e:c8:0a:33:77:a8:d2:8e:2f:ac:13:a2:b8:6f:1f:
         3c:37:5d:ec:ef:14:5a:94:55:3f:1d:5b:3e:f6:f2:52:e8:f5:
         4e:51:f4:43:00:92:27:c8:7f:b8:76:8e:b0:3a:e4:0b:6f:09:
         1a:39:ee:fe:0c:6f:91:df:7c:16:23:53:cb:0a:3e:03:c4:75:
         c1:41:e4:cd:24:60:c4:e0:13:aa:99:75:73:2a:30:0a:97:48:
         f3:a1:6b:e6:5f:d5:4f:48:7c:67:65:01:26:f4:77:c3:f9:79:
         65:66:9d:f5:3c:55:aa:a7:f4:a3:ea:4d:39:f1:50:93:b1:12:
         48:5d:9e:da:21:84:10:e8:bc:ec:b7:9c:1e:93:a0:94:0b:fd:
         9c:a4:d9:cc:c6:ce:c7:0f:be:a6:37:d7:d1:cc:8e:c7:6e:69:
         96:26:7f:1a:a6:34:30:1d:52:bd:ae:24:66:32:d7:06:0d:07:
         e4:21:09:eb:11:57:93:f3:55:4d:81:09:c5:5e:d9:c6:97:c5:
         8e:d2:6e:72:96:fa:22:2c:c1:8c:3f:65:49:53:4d:40:1d:e0:
         1d:1e:b2:64:67:9b:33:2f:65:37:a0:9b:88:be:2d:d2:22:04:
         3d:0e:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:18:31 2026 by rpki-client