Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          Qe9x3rm4KZFsHZRpjyofs/q6KXAdLXqLmijCnII1010=
Subject key identifier:   88:8B:01:C3:6E:D9:EC:DB:0E:AD:0C:03:FE:EE:59:38:E7:8A:CF:2D
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0B76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0B6D
Signing time:             Tue 22 Sep 2026 19:00:47 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:46 +0000
Manifest next update:     Tue 29 Sep 2026 19:00:46 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: bbHHM7wxqeGDJjwaTJrmu7rt1T/kdjxvfAz6aG2Sesk=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: Kv1ZeZer4REIrfI8Hlm3MaeU0Dgip0iWzMyHWiW+bnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2934 (0xb76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Sep 22 19:00:46 2026 GMT
            Not After : Sep 29 19:00:46 2026 GMT
        Subject: CN=6ab2d05e-dd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:c9:d6:8c:23:68:83:bd:cc:61:de:89:32:
                    4d:43:e3:65:f3:f3:ba:b5:58:4e:1a:6a:ae:ea:a9:
                    90:cb:38:3a:87:b3:7e:88:a1:45:3f:03:b4:65:1a:
                    c9:4e:e4:fa:ec:07:ec:98:92:3e:e0:90:ce:77:53:
                    ab:14:56:98:07:a6:41:49:c1:5c:08:c1:de:b4:22:
                    2e:9e:3e:06:58:4e:41:c8:7d:75:93:cf:fc:4b:d7:
                    9f:03:b7:f4:cd:2f:d5:0d:ba:10:cb:7f:7e:50:e6:
                    88:99:fa:84:18:8d:b0:fb:10:0b:ff:b7:81:2d:14:
                    58:6e:78:6a:dd:4d:e4:77:5b:37:72:c9:2e:3c:b6:
                    0b:c2:65:be:d8:e3:85:f1:ce:4f:39:32:e7:e6:f8:
                    3a:0c:3c:9c:a0:4d:1b:1d:7d:23:8c:9c:05:6d:67:
                    18:6b:ed:ea:de:74:fd:ad:b4:67:00:62:d3:2b:0d:
                    92:49:43:c2:08:b2:31:b9:57:45:f2:83:b8:ab:58:
                    e3:66:01:a5:ad:6d:af:71:18:12:12:60:11:ba:f3:
                    4f:59:ef:9d:ff:c8:8b:2b:c9:4b:94:e9:7b:7f:24:
                    dd:df:91:eb:0b:af:fd:c5:62:cc:e2:8a:49:ce:51:
                    6d:69:bb:43:ff:9d:1e:82:bd:51:d9:c4:9e:30:b7:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:01:C3:6E:D9:EC:DB:0E:AD:0C:03:FE:EE:59:38:E7:8A:CF:2D
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:15:b3:2b:0e:f2:ca:01:0f:39:70:bd:52:77:07:1a:6d:e4:
         aa:40:c4:06:dd:bb:cd:4c:28:21:77:45:9f:bf:d3:d3:e4:4c:
         14:92:5d:b3:7c:98:21:6f:be:ad:24:d1:86:15:c9:6a:8f:6f:
         cc:c1:04:c5:74:df:0f:ef:89:1d:74:46:b0:ab:71:69:89:6d:
         21:62:1b:de:23:47:e1:16:dc:32:6a:c4:6a:ee:c9:7e:3a:5b:
         08:1f:f7:9f:22:0a:d8:df:20:c4:a6:fb:1b:9c:59:3f:b6:ea:
         87:b1:ab:a9:20:d6:b3:5d:66:85:6c:82:f8:ca:29:00:0c:de:
         15:fe:34:44:b2:69:d0:49:66:98:a1:63:22:97:de:e6:6a:32:
         b3:82:87:78:2c:26:3d:8a:c4:b3:62:08:d2:ef:09:f5:89:4d:
         33:5d:1e:d3:44:85:5b:21:2a:2f:cd:37:d4:20:a7:97:3d:2f:
         d7:9d:3c:d3:d6:2a:10:fc:fd:4a:07:39:49:d5:ef:db:90:52:
         eb:84:41:92:8b:99:4c:61:d8:bc:29:3a:5f:52:18:e4:ae:0f:
         8d:3d:d4:a3:43:22:d9:0f:08:1b:ba:c0:ff:b2:a6:87:7d:3e:
         a9:38:55:4a:d8:8c:cf:57:05:62:8d:07:a8:f4:c3:63:c4:6b:
         e9:08:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:24:40 2026 by rpki-client