Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          xYRB7Dow9tdDSugVIRlD3uI+lBXoKcHMD/EKGdIX9Z0=
Subject key identifier:   8B:AB:A0:48:3D:79:BB:22:72:4C:87:29:CF:29:6A:DB:43:15:D9:1A
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0B56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0B4D
Signing time:             Wed 22 Jul 2026 19:34:04 +0000
Manifest this update:     Wed 22 Jul 2026 19:34:04 +0000
Manifest next update:     Wed 29 Jul 2026 19:34:04 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: oQ9xS1c4LM/4Lpk4pLb3FEAyXHlKyYF3Gg302aAvXuQ=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: Kv1ZeZer4REIrfI8Hlm3MaeU0Dgip0iWzMyHWiW+bnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2902 (0xb56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Jul 22 19:34:04 2026 GMT
            Not After : Jul 29 19:34:04 2026 GMT
        Subject: CN=6a611b2c-78d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:7a:06:b9:4b:eb:6e:b2:62:c4:03:ed:69:
                    ad:38:ee:1c:d0:59:28:74:66:3b:79:84:b5:a6:ad:
                    04:8c:69:99:db:0b:fd:f3:72:9b:4d:5a:6b:3c:5f:
                    e8:10:27:22:66:9d:40:5b:1f:41:fa:da:49:28:62:
                    f1:7e:06:62:83:d8:54:61:e5:2f:5b:8c:68:7d:af:
                    fc:e2:a1:15:9f:01:11:d2:79:6f:bf:8b:79:66:af:
                    2e:b5:29:18:80:75:b7:37:90:42:39:a4:7a:ab:92:
                    a0:4e:c1:87:9a:44:cd:f0:15:fc:90:84:da:83:a9:
                    35:15:68:bf:3a:1b:e2:47:23:a0:8e:51:2c:2b:4b:
                    fc:8e:8c:04:3f:ba:c7:12:8d:09:07:f5:ef:25:61:
                    5a:ec:93:1e:50:b6:51:27:59:26:94:20:22:ee:05:
                    8e:2b:d2:93:65:71:d9:a0:be:35:3a:c1:16:6f:96:
                    1e:9c:ce:67:44:e0:9f:ba:ed:54:51:00:34:13:00:
                    86:89:24:f1:6a:fa:96:4f:3d:fc:8b:ff:21:11:62:
                    36:f5:0c:9d:53:fd:41:38:ea:5e:4a:30:78:ce:81:
                    be:23:10:8a:23:21:0a:37:bd:88:d2:e9:50:92:de:
                    90:ba:47:42:92:0c:3b:22:b0:c1:f7:8b:b0:9a:29:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AB:A0:48:3D:79:BB:22:72:4C:87:29:CF:29:6A:DB:43:15:D9:1A
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:91:ac:84:75:00:25:50:6c:b9:b5:2f:59:85:40:88:7e:23:
         88:3e:ba:1e:0b:c6:cd:17:cb:e9:0f:b9:d3:58:2f:19:91:48:
         91:8a:94:d0:aa:d3:33:62:a9:b0:06:a8:da:63:9d:c0:60:fc:
         39:3a:7c:36:4e:4d:f5:ab:f8:04:38:45:db:fb:c1:c7:1a:b3:
         2f:65:5f:c8:f1:15:6f:5e:d3:8b:a7:ce:46:8b:8c:2c:bf:20:
         94:bd:bc:d1:6b:db:ac:4e:00:59:da:19:5e:4b:54:c4:c1:f3:
         cf:7b:80:b9:e6:a9:90:13:8f:00:4f:4b:c8:ce:63:79:0c:ff:
         af:9c:e6:48:c5:6e:46:30:01:2a:72:9c:21:fd:7b:75:cd:f2:
         bd:03:27:53:19:1f:ea:3f:9b:92:88:2f:52:e2:e4:18:07:70:
         85:e7:70:c1:70:3c:b6:fd:77:bd:f1:db:74:43:fd:0d:1b:79:
         bb:a3:aa:61:bb:fc:07:88:38:80:1c:f6:21:7c:9a:14:ff:65:
         3f:06:81:75:21:15:5a:e7:35:9c:f0:0f:fc:8b:42:68:4a:62:
         3e:10:78:8d:75:9a:9e:27:18:8a:4a:8b:02:b6:04:a9:55:6f:
         ab:f2:39:06:ee:ae:ce:41:d6:46:36:f2:df:b9:2b:0d:3e:fc:
         f4:ad:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:26 2026 by rpki-client