Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          TZVoiHlD60oIyWXtKJxf0KoTO25IffjIto/HEKNdgzs=
Subject key identifier:   63:88:8D:C3:7F:59:82:57:7F:6D:50:D5:D6:D8:A8:5C:43:8F:EC:CD
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0B47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0B3E
Signing time:             Mon 22 Jun 2026 19:14:58 +0000
Manifest this update:     Mon 22 Jun 2026 19:14:58 +0000
Manifest next update:     Mon 29 Jun 2026 19:14:58 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: BQYzDqUwg8YSijUZ8rIYvcCzylW/CdCco91Y6yf6Dy8=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: Kv1ZeZer4REIrfI8Hlm3MaeU0Dgip0iWzMyHWiW+bnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Jun 22 19:14:58 2026 GMT
            Not After : Jun 29 19:14:58 2026 GMT
        Subject: CN=6a3989b2-fd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:18:56:a6:8f:98:03:0e:44:85:53:ba:ea:
                    84:90:21:db:9e:24:7d:ac:a5:56:11:d7:31:1c:08:
                    1e:31:14:a6:73:1a:93:fb:81:1a:e1:dd:bc:da:8e:
                    9b:3f:f1:67:73:00:96:5a:34:92:19:64:34:b5:e1:
                    0a:7b:8e:69:3b:05:77:f2:72:b9:8d:8e:50:75:08:
                    56:5a:b5:44:97:d0:ad:a7:57:db:0f:a4:de:ac:27:
                    8c:be:b8:44:5b:bf:c3:05:a4:a9:86:22:60:40:71:
                    bc:32:a7:71:cb:a1:75:14:e0:00:8b:35:d5:59:69:
                    3c:37:8c:a7:30:7b:ab:df:a7:e9:10:5c:78:99:dc:
                    ee:bc:37:14:66:17:88:ff:b1:98:db:b8:e5:38:dc:
                    a2:75:0c:00:88:66:2d:c4:82:1b:d9:7d:93:9d:9e:
                    04:ce:f5:67:b5:4a:fb:b8:7b:ed:e7:00:a8:ce:fe:
                    47:af:75:e8:69:e3:0b:8b:00:5c:6c:42:7e:57:87:
                    5a:75:10:d7:48:eb:60:71:72:81:ca:e6:fd:e3:cc:
                    fe:7b:b0:ff:aa:c4:57:8e:d0:3f:19:77:5f:51:7a:
                    eb:11:11:bf:53:1f:ae:ec:88:a8:4d:ec:8f:dd:c0:
                    a8:91:ac:74:c1:4a:1d:5d:09:f3:ff:60:2d:22:80:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:88:8D:C3:7F:59:82:57:7F:6D:50:D5:D6:D8:A8:5C:43:8F:EC:CD
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:cf:92:83:9d:70:dc:ba:5b:cd:0a:55:f8:45:66:95:67:
         f1:96:ff:c5:aa:46:7f:86:f6:47:cf:f8:6e:65:e3:d2:09:bf:
         75:51:ba:af:ed:a7:25:ca:b5:df:bf:cb:f2:d2:d6:d4:02:45:
         c1:7f:1e:5c:0b:6b:69:1e:c7:f2:a4:01:a1:00:b4:f1:22:f7:
         84:c8:2f:bc:a2:f3:43:98:98:d3:a5:de:d9:d7:3c:8c:06:93:
         94:9d:2b:0b:aa:d6:da:4e:64:02:a8:31:65:52:39:83:76:90:
         ab:e9:7a:17:59:74:b3:55:67:66:48:b3:e8:0e:f7:65:f9:24:
         73:cb:ef:42:55:f4:8d:c3:ae:5b:16:f9:45:72:95:1f:96:78:
         c0:5a:bb:4f:4f:7c:95:70:c7:f9:07:e5:2d:d7:3f:b4:a5:cd:
         95:f6:ad:39:36:3d:4e:d0:52:bb:df:b7:6d:96:2e:81:dd:80:
         5b:d8:69:6e:2c:fd:dd:77:70:d5:49:a2:21:eb:e6:67:e5:9c:
         b3:1e:36:78:cd:e1:8c:93:6c:72:3e:5b:ed:d8:83:d5:48:95:
         9b:30:a2:ff:40:2c:cc:dd:13:c4:9e:46:6f:55:37:72:db:04:
         c9:8e:f1:7c:6b:29:d6:75:6b:e8:5e:ae:09:07:2a:e9:9e:30:
         c0:c4:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:07 2026 by rpki-client