Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File:                     Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier:          LG/aoLoofVMq61Jfeib+iDgHy/v4sx8fQZmce+XTNeQ=
Subject key identifier:   95:EC:05:7E:0E:09:3B:78:B4:47:36:1A:E5:73:0D:1A:47:C4:88:B5
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer:       /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number:          7F
Signing time:             Sun 15 Nov 2026 07:55:58 +0000
Manifest this update:     Sun 15 Nov 2026 07:55:58 +0000
Manifest next update:     Sun 22 Nov 2026 07:55:58 +0000
Files and hashes:         1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: wdPV+m5PGaxZ2CdAuRdUL9p1hFkBxDO8nfv3Ua91PIo=)
                          2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
                          rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
        Validity
            Not Before: Nov 15 07:55:58 2026 GMT
            Not After : Nov 22 07:55:58 2026 GMT
        Subject: CN=6af9658e-a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:2c:62:c5:66:94:88:e0:ff:53:9a:0f:1d:
                    c6:26:2e:08:33:91:88:0c:11:9b:8a:af:dc:5d:11:
                    28:a5:69:41:bc:60:43:7e:e1:e8:81:7f:fd:3b:58:
                    dd:e4:43:8a:ef:f4:b4:05:d9:bf:c3:0b:fe:4f:f2:
                    55:eb:dd:b6:00:ad:c5:a7:40:0e:de:97:e2:4c:fe:
                    c6:d8:68:35:cc:3e:45:c5:ca:91:09:36:23:4a:b5:
                    54:cb:c5:90:1e:54:20:6f:aa:85:8c:c1:9b:8b:f2:
                    fa:62:2c:e2:1c:08:0a:df:31:e2:f7:2c:7e:ac:5d:
                    9e:b3:d5:a4:74:54:cc:f3:cc:d9:af:64:22:31:39:
                    56:99:2d:f9:d0:7f:d6:0c:e6:45:84:00:d6:c3:db:
                    e9:45:0b:dc:8e:85:4e:29:d0:76:21:c8:f7:86:9a:
                    32:6a:c6:98:42:58:0b:bc:0c:2b:66:fd:e0:30:51:
                    99:82:eb:f2:90:90:b9:77:29:da:0d:6b:f7:7b:bb:
                    e8:a1:24:cc:b6:76:a8:3f:47:a8:6d:ee:aa:2f:57:
                    6f:26:0f:81:d1:bf:f8:3f:39:35:69:c1:69:af:be:
                    6f:70:4c:f9:eb:f1:0c:39:de:d1:00:01:4d:4b:0a:
                    d9:8a:ad:b6:7e:34:92:0f:de:5e:ce:9a:30:ed:77:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EC:05:7E:0E:09:3B:78:B4:47:36:1A:E5:73:0D:1A:47:C4:88:B5
            X509v3 Authority Key Identifier:
                keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:43:8c:0d:d4:37:62:88:2e:2f:fe:eb:4f:17:33:3f:ba:40:
         44:ed:75:14:0d:25:dd:83:ca:fd:ee:c5:bb:0a:01:7d:21:c5:
         3a:a7:9f:75:63:e5:26:74:51:e1:7b:50:78:09:39:73:54:ce:
         08:27:85:8a:74:76:55:67:82:34:7b:bb:f6:87:de:92:3a:87:
         0c:62:85:48:fc:e7:da:cc:48:cd:e9:0c:cb:06:a6:49:79:a8:
         df:cf:51:0d:49:17:2d:75:c1:f6:6d:df:a5:40:5c:87:ed:b7:
         05:95:cf:e9:e7:b3:db:24:eb:88:30:29:e1:db:29:20:68:19:
         65:24:8c:4e:9a:47:66:ac:3a:32:76:eb:ce:00:34:0b:52:8a:
         0b:d2:5e:00:40:f4:d3:f6:e6:71:3b:0b:8c:cb:df:e4:af:91:
         be:4b:44:8a:c7:2f:26:ba:a0:7e:0b:f5:d3:39:49:cb:09:e0:
         88:71:09:68:07:14:e8:23:5e:3b:11:68:2e:f9:da:29:a3:37:
         e8:dd:4c:0c:6b:fb:21:cc:be:5e:57:9f:98:d4:d5:96:16:7f:
         9a:c4:d4:ca:db:ec:f0:ad:6a:be:68:eb:40:cb:85:46:f2:12:
         1c:cd:90:a5:b9:34:48:74:4d:66:73:7a:f8:9f:20:a2:54:fc:
         55:be:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:14:00 2026 by rpki-client