Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
File:                     iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json)
Hash identifier:          4Izyk4vrskJIhIe/BBkl1yjePDGZqyFga+05ibN2QL8=
Subject key identifier:   ED:D4:09:75:BB:E7:BB:75:F9:9B:CD:13:73:D7:E3:AC:E7:8A:0C:CA
Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
Certificate issuer:       /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
Manifest number:          A3
Signing time:             Tue 27 Oct 2026 07:35:21 +0000
Manifest this update:     Tue 27 Oct 2026 07:35:20 +0000
Manifest next update:     Tue 03 Nov 2026 07:35:20 +0000
Files and hashes:         1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: UugMT+dbkEB4rQat7Dmncnj0kc5/IIEudfyZvKAcebo=)
                          2: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=)
                          3: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
        Validity
            Not Before: Oct 27 07:35:20 2026 GMT
            Not After : Nov  3 07:35:20 2026 GMT
        Subject: CN=6ae05438-87d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:d5:22:30:80:ab:92:e1:82:1f:6b:0e:1b:
                    58:9e:07:d9:7a:47:95:40:6a:dc:15:51:e7:e1:0c:
                    86:9c:9e:23:bc:fc:60:99:43:a4:26:a3:26:20:c5:
                    71:f7:86:b0:12:d6:c3:df:0e:41:16:55:d3:0b:59:
                    e8:39:22:c8:0d:e6:16:52:0a:b5:e5:af:cf:35:fd:
                    9d:de:fe:51:cc:00:cb:a9:e8:ed:fa:2c:ff:76:c8:
                    fc:e2:66:85:3f:a3:7c:2d:05:df:12:d9:4e:05:fa:
                    c8:c0:67:bc:f6:63:b1:ac:78:b9:89:cc:b1:75:43:
                    13:b6:58:ec:e9:9a:ef:3a:c9:3b:4b:96:03:1b:36:
                    47:a3:ba:6e:ad:14:c9:4c:cb:f1:6a:88:3b:1b:61:
                    f0:5d:b0:e4:79:51:51:17:c5:7e:17:bd:38:59:c2:
                    5c:db:8f:5d:12:69:ab:fd:e4:8b:2e:08:10:7e:2e:
                    36:db:d1:ab:ce:aa:4d:86:0c:a3:91:06:3a:06:dc:
                    ca:9e:27:a4:82:17:c1:2b:57:c5:a6:b5:1f:0c:0b:
                    5b:a4:49:17:26:2a:6e:c2:82:77:7c:20:be:88:6f:
                    d0:1f:81:45:a9:ba:3e:f3:24:57:37:6e:c7:90:be:
                    68:be:9c:bd:89:62:a1:1d:93:06:67:73:b7:f8:26:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:09:75:BB:E7:BB:75:F9:9B:CD:13:73:D7:E3:AC:E7:8A:0C:CA
            X509v3 Authority Key Identifier:
                keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:73:89:95:cd:88:88:7d:11:88:ad:1f:65:c9:6d:51:e7:
         04:93:ec:eb:60:3f:af:78:68:d6:d0:fd:5f:f1:60:5a:66:32:
         46:86:23:da:5a:7e:d7:94:6c:e8:f3:b2:db:94:05:df:ac:36:
         a8:2d:0a:3d:77:bd:6a:7f:01:85:01:95:3c:72:21:40:cb:12:
         e7:a6:54:8e:84:9c:d3:a7:51:a1:4a:73:b6:fe:e2:25:ef:fa:
         65:f0:84:3a:53:b9:c8:82:ea:a4:83:4d:99:4e:01:1d:3a:2c:
         c1:42:8a:81:fe:b4:cb:24:e8:54:8c:e7:69:42:35:41:88:49:
         c8:aa:37:61:24:51:ad:87:86:50:40:c8:94:50:db:22:a3:5e:
         8c:eb:04:09:6c:5d:d2:68:d5:6f:f2:17:a2:7a:7a:ed:5b:03:
         df:a9:68:dc:d8:46:21:36:e7:31:f8:3a:39:80:63:c8:f1:11:
         1a:f8:f5:f5:49:1b:7f:5f:32:9f:34:6f:b4:6b:ad:62:02:3c:
         c1:46:88:cb:b0:04:73:4d:93:c8:84:dc:79:10:00:36:04:e8:
         46:29:1a:cb:15:ee:6d:27:06:75:b7:9a:e9:f4:33:13:50:62:
         d4:37:52:af:e9:08:91:ef:33:fd:f3:da:df:5e:d6:24:e6:d2:
         bb:f5:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:33:06 2026 by rpki-client