Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          A6yh+4kN07VPnw93B18Knvm6NQRlREQ8ysRKSUdP21Y=
Subject key identifier:   77:FB:39:D6:DD:2B:EE:88:DB:85:6C:1F:83:01:C0:29:44:6C:9D:92
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       053C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          0535
Signing time:             Thu 08 Oct 2026 23:42:30 +0000
Manifest this update:     Thu 08 Oct 2026 23:42:30 +0000
Manifest next update:     Thu 15 Oct 2026 23:42:30 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: UkQ7Zhbsk5Wh3zwC03v1WefHvG/KJd/DRYW2XtIt5r0=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: C4szlWcxl6UAzgUgX/rK3CXwcEmd+QBL2alZ4NdZAq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: Oct  8 23:42:30 2026 GMT
            Not After : Oct 15 23:42:30 2026 GMT
        Subject: CN=6ac82a66-9c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:10:dc:c0:bc:1d:4f:a4:8e:bc:02:68:bb:
                    65:54:9f:9c:ba:1b:bb:ba:5f:e4:7e:23:65:66:fa:
                    7c:37:1c:06:d8:63:f4:d5:29:48:bb:da:dd:e4:75:
                    93:e2:46:c2:15:39:9f:40:ee:d1:6c:7c:5d:bf:fc:
                    d8:ba:c3:45:38:f0:a9:6c:e8:2e:68:85:0d:5f:5a:
                    5a:43:ca:2b:56:f0:2c:c5:5c:eb:cf:82:0a:d3:5b:
                    53:1a:1b:48:99:c9:86:e4:e4:63:52:58:08:e9:5a:
                    ae:4e:f7:a5:bb:7a:3c:a8:1f:15:50:30:76:76:f0:
                    74:b5:60:37:db:bf:57:11:9a:8c:e2:ff:26:3d:11:
                    5a:73:14:86:ec:7d:40:56:2d:53:ef:43:bb:5a:9f:
                    e7:e1:bf:23:81:c5:a6:68:1d:35:81:c8:5e:3f:dd:
                    d0:07:95:3b:3f:0d:3b:44:c8:c8:1b:ae:97:4e:4e:
                    c4:cb:f1:ca:2b:38:ec:4c:83:7d:b6:53:47:64:3a:
                    f2:d4:88:b0:1b:cd:e8:96:c6:dd:c7:73:77:8f:4e:
                    b6:59:bc:d1:00:b1:6b:71:46:b6:5c:e4:db:30:c3:
                    39:ef:3d:bb:5d:d3:a8:09:92:5d:2c:86:59:40:92:
                    55:d4:f7:26:6d:2d:d8:68:9c:1f:35:c9:36:11:df:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:39:D6:DD:2B:EE:88:DB:85:6C:1F:83:01:C0:29:44:6C:9D:92
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:69:63:48:5f:3f:d6:44:2d:73:a4:38:d2:7d:45:0f:c3:6c:
         75:55:41:d4:7f:d3:9c:96:6c:40:ca:00:18:0f:45:25:2f:cc:
         ff:0c:92:5f:e5:ac:67:b2:aa:d9:5e:76:d5:a8:cc:f4:9a:00:
         86:19:ed:69:52:d0:ed:6a:c3:0e:18:dc:91:fb:ad:5a:d0:d7:
         3e:7c:cb:30:c5:c6:d1:15:ca:a3:a8:0c:2f:f1:16:29:a4:0c:
         1a:b0:e4:82:91:e6:be:fc:aa:f1:dc:e2:73:c0:64:de:4a:ec:
         92:38:07:48:45:9c:14:da:55:8d:b1:59:fa:21:62:5b:16:85:
         21:c0:9f:4a:26:45:0f:e5:75:53:86:bf:d9:a5:44:2d:6e:4b:
         3f:63:57:90:24:6c:3a:11:30:1d:7b:d7:eb:8b:98:a4:cf:07:
         79:29:82:63:e9:28:1c:41:0b:58:b3:f6:f0:86:a6:d4:15:d5:
         6d:1c:25:f1:4a:b6:12:46:ed:4e:5b:34:26:91:ce:05:02:30:
         e9:88:05:e2:94:54:27:f8:13:16:2f:7c:26:d1:d0:de:30:98:
         a6:07:66:6c:8a:d3:14:6b:d8:65:cb:98:c1:98:b2:bc:9d:f3:
         b5:4d:90:0f:32:35:3f:02:97:ea:df:a3:95:39:bc:55:27:1b:
         f8:c4:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:56:06 2026 by rpki-client