Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File:                     Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier:          LuKVEYVuLO1eoibOHKgIx1cxSStMt68FLPP9S84nrvg=
Subject key identifier:   46:06:AE:81:DB:C2:F2:F1:E8:07:57:DE:91:26:1C:6B:AE:6D:6F:D2
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer:       /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number:          58
Signing time:             Thu 03 Sep 2026 08:24:56 +0000
Manifest this update:     Thu 03 Sep 2026 08:24:55 +0000
Manifest next update:     Thu 10 Sep 2026 08:24:55 +0000
Files and hashes:         1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: yMirCxXK48ob23s0Gi+knT/ihtiIuKG4Gr/rzqKDHqk=)
                          2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
                          rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
        Validity
            Not Before: Sep  3 08:24:55 2026 GMT
            Not After : Sep 10 08:24:55 2026 GMT
        Subject: CN=6a992ed8-3a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:fc:62:1a:49:55:52:74:58:28:7a:b5:9f:
                    ca:ee:30:51:18:59:bf:74:81:24:57:74:56:d7:bb:
                    0f:db:71:0e:bf:a0:62:a3:b0:60:87:77:0a:3c:d5:
                    9b:ea:8a:4b:14:c9:a6:b9:fc:64:59:89:c8:89:76:
                    39:36:62:63:76:84:d4:6d:84:7d:38:3f:73:2e:ed:
                    c3:3a:3c:9a:61:af:ca:a5:f0:23:a4:76:df:aa:d4:
                    96:fa:46:1c:0e:12:db:0b:9f:1d:80:c7:da:c6:58:
                    c4:62:aa:5d:c5:6e:39:c8:2c:3b:2b:33:b0:e4:09:
                    af:4b:82:90:8f:97:b5:aa:21:ce:27:8a:0e:ee:b3:
                    06:b3:a7:19:53:b5:5c:69:36:8e:79:83:84:99:d7:
                    4b:8f:a8:4f:7a:92:a5:c5:8e:75:33:43:3e:32:6c:
                    6d:76:b3:0d:52:4a:e9:81:b0:6a:70:b9:23:1f:20:
                    8e:e8:06:a6:5a:19:f9:be:cb:77:28:46:d7:6c:24:
                    96:0b:cd:50:ba:d4:f6:a1:90:12:d7:e6:68:1e:4a:
                    75:52:18:e5:2d:1c:a7:1a:c3:7e:9b:5e:82:df:ea:
                    dd:34:f1:1f:c8:01:87:27:30:2c:ab:6f:43:4b:17:
                    3d:34:92:65:56:60:1b:62:80:af:dd:98:0b:a5:a1:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:06:AE:81:DB:C2:F2:F1:E8:07:57:DE:91:26:1C:6B:AE:6D:6F:D2
            X509v3 Authority Key Identifier:
                keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:cf:51:0a:ef:35:97:96:93:40:20:b9:c6:4b:3f:cf:5b:
         26:07:4f:78:6d:6b:46:a4:ef:50:ad:bc:6f:14:be:1a:c9:9f:
         b6:16:ba:35:4f:15:2a:16:27:14:42:fe:0e:4f:f6:92:7f:29:
         9c:37:4c:b3:96:eb:4c:b0:54:63:f5:44:32:25:61:4f:6e:81:
         09:d4:84:8e:e8:83:b8:0c:3a:40:7a:d6:0e:1c:31:8c:96:d5:
         d3:75:f4:90:82:84:54:a6:06:88:78:b2:8c:9e:9e:54:4b:70:
         f7:0a:8f:ba:56:0a:34:4f:6b:46:c1:6d:13:ce:c2:61:9e:44:
         b4:63:24:20:af:26:71:63:7a:6c:c4:b7:25:a6:91:81:07:9f:
         19:0b:5b:fb:33:46:89:c7:86:5e:eb:8e:59:4e:61:07:5d:bb:
         f1:38:c5:37:d7:4c:56:81:75:57:fb:3d:7f:3c:91:ca:cc:b8:
         67:cb:b3:42:49:f6:0c:61:38:86:2e:fa:7d:a4:57:1d:a4:c9:
         8a:93:35:31:62:74:e0:8d:16:d1:85:d5:17:8d:0f:03:ab:ad:
         1f:b1:c2:5a:e4:21:e6:9a:90:1a:76:9a:71:ae:e3:1f:af:ba:
         4e:ba:22:8c:02:2e:81:c7:d9:4d:46:7d:61:76:2d:f7:4d:38:
         bc:be:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:23:06 2026 by rpki-client