Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
File:                     ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json)
Hash identifier:          Jdispi1mDtmVQEkWl/UcZZKG7t0vQkF8h0ccZEX0ZwY=
Subject key identifier:   E7:D1:FF:98:13:4E:37:E0:C7:6E:E0:AF:FF:22:CB:CB:51:19:54:00
Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
Certificate issuer:       /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Certificate serial:       05C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
Manifest number:          05BA
Signing time:             Mon 22 Jun 2026 23:11:02 +0000
Manifest this update:     Mon 22 Jun 2026 23:11:02 +0000
Manifest next update:     Mon 29 Jun 2026 23:11:02 +0000
Files and hashes:         1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: wJEJyIW/jV27cJTipvGvBc9Fw2O/WBh4xf0K7hnP8BY=)
                          2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: 0SaqMb330usfcrtRPgjBAgbasyEjNprf9GgoNQTfu2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl
                          rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
        Validity
            Not Before: Jun 22 23:11:02 2026 GMT
            Not After : Jun 29 23:11:02 2026 GMT
        Subject: CN=6a39c106-9b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:82:51:31:4c:b1:3d:f2:37:fa:8a:7d:9e:
                    82:37:bb:34:4d:b9:4f:da:b8:b8:08:ea:e4:e1:31:
                    7d:29:ea:43:c7:45:e2:46:5d:4a:eb:4d:e8:80:16:
                    e1:0f:c0:44:b0:5f:0c:68:fe:08:07:d4:07:6c:99:
                    00:a3:58:db:b4:25:c9:21:ac:60:a5:99:54:80:ac:
                    eb:cd:85:e8:e6:fc:e4:0a:84:59:2a:c1:af:0d:c7:
                    b0:7f:bf:5e:e6:4b:4e:3d:66:c2:3d:5f:c9:64:ed:
                    bd:c1:b7:05:03:16:a5:59:b7:b8:87:a4:ed:c6:1f:
                    e8:ad:a6:af:df:31:8b:00:fb:b5:63:62:65:4a:c9:
                    0b:85:dd:c2:f6:40:93:05:03:a6:f2:92:5f:3d:cd:
                    3c:31:49:28:31:ca:ca:f7:16:4f:7e:d8:87:b9:a4:
                    c6:06:26:77:a0:6f:e6:7b:47:47:e7:a4:bf:42:52:
                    92:14:5b:51:1d:1f:91:45:24:51:4c:d2:39:7e:0d:
                    9b:2c:f2:ea:21:ea:55:92:12:5b:3d:80:02:0f:f8:
                    79:d1:f4:12:a3:a2:6e:75:d9:d1:24:3a:4d:18:af:
                    19:65:ce:8c:17:b4:d1:d0:34:ad:46:06:6f:d8:f3:
                    6c:71:45:5d:af:3a:8c:7b:27:b4:c1:9b:27:a8:40:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:FF:98:13:4E:37:E0:C7:6E:E0:AF:FF:22:CB:CB:51:19:54:00
            X509v3 Authority Key Identifier:
                keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:af:b1:ba:14:fd:57:5f:7a:ca:bf:fa:0b:e7:0c:df:1f:
         8b:36:63:e4:41:09:18:f3:82:37:25:1f:c6:ce:e3:a5:49:3d:
         d2:ca:dc:c7:72:a0:98:c5:75:f2:99:0f:db:ab:59:a5:3e:13:
         91:0c:ef:d1:55:e7:7e:3c:69:23:b3:63:59:8a:c4:e4:38:21:
         20:37:ed:ba:7a:af:1e:be:8f:83:0a:dd:1a:4d:75:7e:a0:60:
         94:f2:1c:7b:94:64:6a:11:1a:3f:24:c1:1a:e3:3d:1f:20:cf:
         8c:dc:cf:b5:6d:28:84:32:29:d0:1a:25:dc:f6:9c:77:79:c1:
         d2:42:40:91:a5:e2:a0:84:c0:cc:89:8a:fd:48:dc:24:d3:04:
         18:07:28:23:c0:82:b6:64:bd:55:25:fe:1f:32:fb:04:49:d2:
         65:2b:cb:64:20:27:2e:26:40:7f:2b:2a:91:f1:01:93:9f:2f:
         b6:de:77:63:cc:7c:73:d5:2f:0f:bb:45:d5:0f:82:1d:ef:95:
         24:a4:69:6e:b4:80:ef:8c:4f:13:aa:eb:40:59:79:1e:3a:28:
         95:eb:b1:4d:5f:de:6a:9b:82:2d:ed:4d:96:cf:b0:52:5d:80:
         85:b4:fd:ad:4f:b1:ef:3e:b8:76:14:f6:0c:af:d2:22:78:2c:
         18:76:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:22:48 2026 by rpki-client