Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File:                     Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier:          XYFd7yq29m8DURgTd74RyCtTEvBxAZ8Q82gT7OUsxYM=
Subject key identifier:   6C:30:82:17:37:A1:DA:50:27:AE:5E:4D:A3:C0:CA:18:11:50:7C:4D
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer:       /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number:          25
Signing time:             Mon 25 May 2026 08:51:47 +0000
Manifest this update:     Mon 25 May 2026 08:51:47 +0000
Manifest next update:     Mon 01 Jun 2026 08:51:47 +0000
Files and hashes:         1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: 92BX3THNEi+mzg6q+VfIXy7K2fepVKFlpO/umosui1E=)
                          2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
                          rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jun 2026 08:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
        Validity
            Not Before: May 25 08:51:47 2026 GMT
            Not After : Jun  1 08:51:47 2026 GMT
        Subject: CN=6a140da3-2fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:7d:75:d5:92:8d:7f:6f:96:64:64:d0:5f:
                    b7:4b:06:c6:f5:7a:7a:fd:48:9c:7c:dc:82:bf:f7:
                    9f:e3:e3:2a:0e:69:69:67:f2:10:fb:ca:9b:e5:b1:
                    fa:d2:c9:59:d9:5d:3e:6d:0d:27:af:e4:cf:d5:8a:
                    8d:e4:52:51:ab:bb:ba:5c:c5:dd:4e:65:31:45:c8:
                    dd:0b:7a:30:77:95:6d:82:16:20:f1:c7:4b:e8:b5:
                    aa:3a:d7:95:1b:f7:08:b8:13:03:7c:7b:b7:51:be:
                    f6:45:36:8f:c2:23:28:cc:a7:66:a0:d0:c1:46:06:
                    1a:6e:9c:17:b5:1b:69:4f:09:a9:16:6c:c5:e8:90:
                    da:45:f4:03:7e:17:fa:41:c8:0c:2f:8e:b0:00:04:
                    bc:ed:b2:a7:7e:7c:0b:9a:d5:ae:49:e9:53:2f:71:
                    0e:bd:de:15:28:67:c6:67:99:7f:aa:35:a8:b7:af:
                    b8:f6:6b:27:89:c6:64:c4:3c:54:2c:56:ed:70:7f:
                    3d:2d:08:9f:9f:76:9d:dd:fa:d6:94:8a:fb:d1:14:
                    ba:1b:2f:80:8c:bc:80:08:8d:4a:13:32:4e:ff:2a:
                    8c:96:04:d8:81:c4:18:a8:84:52:2d:e9:56:59:d7:
                    ad:40:6a:47:c8:fc:3c:8e:67:5f:5d:be:49:a9:2d:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:30:82:17:37:A1:DA:50:27:AE:5E:4D:A3:C0:CA:18:11:50:7C:4D
            X509v3 Authority Key Identifier:
                keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:db:6b:88:84:83:29:f3:e3:ea:05:b2:e1:e3:c9:aa:58:
         e0:b1:ac:3c:46:c4:8d:c3:dd:83:68:03:6d:eb:ac:31:b3:2e:
         88:3c:f3:20:76:15:ac:f0:76:36:fa:dd:d4:a2:f6:67:ff:48:
         09:5f:1e:d7:fa:92:9b:2e:4c:94:7b:c3:f6:c5:b0:c4:a6:51:
         8e:d9:a4:5e:9d:dc:e7:6c:0d:4b:c6:0b:e1:e1:94:8a:6b:61:
         a5:3b:70:8d:c1:e0:7b:7f:c3:5c:49:4f:60:ba:e1:b6:14:44:
         f7:42:f2:d8:ba:4a:e1:6f:6b:15:16:c1:38:e7:e4:75:ba:29:
         5d:fd:3b:ce:29:b4:7c:43:93:97:7f:d6:94:7e:67:c8:0e:60:
         e0:f1:d2:e6:35:25:a3:45:d2:74:3b:12:6d:90:18:56:10:89:
         1d:ed:48:9f:14:4f:76:de:ec:31:95:71:96:29:d2:d7:35:62:
         85:09:f4:ad:f0:d5:7e:5b:e8:3c:f5:1e:82:79:b5:a8:64:f8:
         e3:dc:99:9d:6b:59:80:03:ef:ee:cd:62:81:47:32:f6:27:c5:
         0c:33:7c:a3:c6:d2:2f:91:c9:a5:a1:a9:8f:a7:2d:66:f7:bc:
         26:07:78:ba:19:89:3c:b2:63:b3:ec:e1:ac:e6:01:58:b9:3d:
         47:35:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 12:41:42 2026 by rpki-client