Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File:                     pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier:          0q4JgONxwDDymjwyHSBy27Hlr+EVYe/Q4uxYHzxloPY=
Subject key identifier:   D0:30:AE:C4:14:F1:CE:67:D1:23:8A:4F:62:82:20:39:45:C5:5D:9F
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer:       /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number:          0186
Signing time:             Mon 20 Jul 2026 21:56:13 +0000
Manifest this update:     Mon 20 Jul 2026 21:56:13 +0000
Manifest next update:     Mon 27 Jul 2026 21:56:13 +0000
Files and hashes:         1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: ufxEtu/W6S3hLd9B4/Fr1C6yg5diAJjHcWqqqdkzUnE=)
                          2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
        Validity
            Not Before: Jul 20 21:56:13 2026 GMT
            Not After : Jul 27 21:56:13 2026 GMT
        Subject: CN=6a5e997d-872b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:95:7a:93:9d:d5:3f:1c:ca:97:d1:83:d8:
                    cb:05:ac:31:ca:4c:53:f3:a8:93:9c:41:7f:56:ee:
                    e8:dc:e8:6f:f1:54:63:5a:47:45:11:d5:fe:2d:35:
                    09:f1:0a:78:3f:6b:41:d8:91:b0:05:94:a0:2d:79:
                    a3:2a:cb:38:5f:e1:38:11:01:f0:71:7c:c6:85:ac:
                    13:fd:ce:29:fa:f7:17:dd:66:0a:b7:c7:34:70:a0:
                    13:6a:24:35:c6:f7:21:d5:28:7d:69:c7:d8:90:af:
                    e2:9c:7b:43:41:18:46:18:05:51:e2:d6:26:0f:00:
                    6a:47:84:72:0e:fb:52:d8:08:c4:44:c8:68:45:d7:
                    84:e7:89:3b:1b:48:34:2e:e8:d3:a6:c7:cd:9f:56:
                    48:4d:e0:20:bc:d3:03:08:16:36:c3:6a:1c:55:7c:
                    3c:1a:6c:da:9b:b0:30:d4:fe:4f:6d:5d:09:1e:dd:
                    97:61:3c:8e:9f:46:1c:df:30:9b:5a:33:f9:33:95:
                    ff:e0:67:ef:17:ff:3d:63:af:80:2d:00:a0:92:2d:
                    e3:d0:b9:cf:44:1e:1b:6f:1f:8b:08:23:5e:a5:d3:
                    6c:6b:20:96:6b:1b:67:77:e2:57:6d:38:53:ce:fa:
                    70:28:a0:9d:ed:f2:68:74:b5:f0:76:e8:5d:3b:00:
                    74:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:30:AE:C4:14:F1:CE:67:D1:23:8A:4F:62:82:20:39:45:C5:5D:9F
            X509v3 Authority Key Identifier:
                keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:08:52:0e:56:2d:ee:08:7e:81:3d:21:dd:12:96:fa:10:a3:
         84:12:ed:6a:1f:03:2b:58:a2:5e:18:42:7c:e0:e5:03:84:f7:
         04:32:1e:0d:7c:b0:62:cf:64:7f:6c:dd:7b:80:6d:5e:6b:06:
         8b:58:eb:18:cc:46:27:2d:1b:22:74:6e:27:8d:a6:e0:7e:86:
         b0:7a:1f:cf:b2:2a:60:ef:bf:5b:d6:7d:6d:b7:9a:63:72:0d:
         01:24:a4:43:5d:65:8c:20:1f:db:f5:96:f7:e9:d4:fe:ba:55:
         72:31:6a:ac:10:b9:9d:6e:cd:f7:3e:ec:b4:a5:19:dc:a7:fe:
         41:2f:65:01:b9:25:3d:2a:53:3a:bb:42:17:7b:22:ef:01:6d:
         b2:c9:36:40:57:8b:56:8a:6b:42:d0:ca:8c:06:0d:cc:07:6f:
         f4:dd:9b:d7:61:a3:54:e5:ea:09:b8:00:c7:32:00:b2:af:a9:
         a1:1b:42:20:5c:0c:c3:f6:c9:6c:f0:cd:83:94:e2:d4:09:eb:
         6e:83:d8:27:99:48:50:87:ca:9d:c6:d8:89:31:c2:f6:d7:27:
         58:0b:17:50:06:33:b3:cd:8f:48:9d:dd:2e:d3:1e:08:4f:5f:
         44:6c:fd:4c:49:37:73:c3:af:42:38:4b:56:56:fe:86:12:34:
         8c:5d:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:12 2026 by rpki-client