Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          YHCqRrdTPiSMdYcUFJmKADAwlbIdDHHzLruowGlCIIs=
Subject key identifier:   76:F3:86:E1:00:42:3D:77:B0:9D:4B:FB:F3:9E:A3:73:8C:07:F6:2F
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0B1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0B16
Signing time:             Sat 04 Apr 2026 19:07:57 +0000
Manifest this update:     Sat 04 Apr 2026 19:07:56 +0000
Manifest next update:     Sat 11 Apr 2026 19:07:56 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: D71Mbfs30z7g6iUl3FpCu36ClTgeVwUBiV6oGz78h1M=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: Kv1ZeZer4REIrfI8Hlm3MaeU0Dgip0iWzMyHWiW+bnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847 (0xb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Apr  4 19:07:56 2026 GMT
            Not After : Apr 11 19:07:56 2026 GMT
        Subject: CN=69d1618d-211d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:5b:ac:f0:21:d3:fa:af:d4:c4:c0:98:94:
                    00:a9:d4:03:71:f5:b9:4f:52:10:36:45:90:68:6a:
                    fa:cf:28:f6:4a:ee:1a:e9:f5:b2:10:4b:e3:a7:e8:
                    30:79:07:c4:1c:2b:2a:f9:39:d1:10:e4:c3:2b:83:
                    f4:12:29:aa:59:0f:fb:89:ec:02:95:2d:94:34:92:
                    83:b6:78:3f:5e:93:21:70:13:f0:6f:a4:54:d0:68:
                    93:74:e5:63:89:75:92:96:1a:2f:53:cc:a2:88:f0:
                    09:c7:c5:a9:03:27:80:79:b7:7f:a7:3c:0d:d0:24:
                    ec:1a:ca:c0:18:7d:ed:52:6a:ed:f3:c3:c0:9a:d5:
                    4c:dd:5e:4f:d4:44:85:be:76:10:07:c5:6c:c5:a6:
                    2c:6c:6b:b8:94:b6:14:c4:9c:3c:fc:06:cc:48:b2:
                    50:1a:68:98:b5:5b:09:c6:6c:fd:bb:d1:1a:c1:88:
                    e4:55:95:30:4b:73:34:98:cc:cf:ef:4a:e6:d7:14:
                    6b:b9:49:59:1a:f0:2c:8a:5b:46:ac:6e:26:04:35:
                    5a:f4:d6:ba:a9:e4:a0:d3:d2:0d:91:f4:36:f0:91:
                    4e:3a:7e:c9:17:67:83:da:04:4c:91:8a:fd:00:37:
                    77:0c:98:2b:75:e4:f4:d7:a5:30:21:f2:db:2b:7d:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:86:E1:00:42:3D:77:B0:9D:4B:FB:F3:9E:A3:73:8C:07:F6:2F
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6d:2f:3e:57:f1:82:f4:cc:07:0f:dd:3a:6f:8a:f9:96:f5:
         df:ca:8b:e6:bf:1b:52:7d:b8:8b:19:7f:f1:87:75:87:1c:3c:
         c5:24:10:d4:4f:72:d6:f8:83:31:2f:9a:54:bf:0c:3b:41:11:
         ae:50:8b:1e:b7:21:04:fc:b4:36:34:5c:b4:18:dd:4f:d2:6b:
         7d:f5:1d:15:0e:dc:a0:96:c4:5f:41:26:c2:95:1a:ff:47:3c:
         eb:df:b8:cd:31:cb:01:4d:a5:ec:df:54:44:17:8b:a0:e8:27:
         d4:55:89:f4:61:8d:f9:14:a4:6c:29:ac:6b:99:08:95:53:96:
         12:49:6d:be:85:7b:89:cd:f4:b3:0b:90:41:1c:b1:3b:9d:a1:
         40:a0:12:7d:3c:6a:95:4a:54:69:44:62:ca:ef:82:80:51:00:
         4b:f2:a5:41:bf:d1:b7:e1:93:e8:bc:81:f2:66:44:dc:81:62:
         21:31:13:a9:70:68:d2:96:5b:8c:fa:9c:a0:7d:1f:fc:c9:5c:
         8a:26:1d:2d:44:c8:db:ad:c7:e4:b4:1a:0a:03:17:0d:aa:90:
         06:84:e7:cc:0f:d7:13:d0:76:16:08:2c:72:c2:77:1f:97:2a:
         af:95:71:1d:0f:03:55:b1:71:17:f4:70:fa:25:e8:d0:9a:47:
         f7:9e:71:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE
QUY4RDc4MUEwHhcNMjYwNDA0MTkwNzU2WhcNMjYwNDExMTkwNzU2WjAYMRYwFAYD
VQQDEw02OWQxNjE4ZC0yMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxe9brPAh0/qv1MTAmJQAqdQDcfW5T1IQNkWQaGr6zyj2Su4a6fWyEEvjp+gw
eQfEHCsq+TnREOTDK4P0EimqWQ/7iewClS2UNJKDtng/XpMhcBPwb6RU0GiTdOVj
iXWSlhovU8yiiPAJx8WpAyeAebd/pzwN0CTsGsrAGH3tUmrt88PAmtVM3V5P1ESF
vnYQB8VsxaYsbGu4lLYUxJw8/AbMSLJQGmiYtVsJxmz9u9EawYjkVZUwS3M0mMzP
70rm1xRruUlZGvAsiltGrG4mBDVa9Na6qeSg09INkfQ28JFOOn7JF2eD2gRMkYr9
ADd3DJgrdeT016UwIfLbK318uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbzhuEA
Qj13sJ1L+/Oeo3OMB/YvMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG
NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6
QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVG0vPlfxgvTMBw/dOm+K+Zb138qL5r8bUn24ixl/8Yd1hxw8xSQQ1E9y1viD
MS+aVL8MO0ERrlCLHrchBPy0NjRctBjdT9JrffUdFQ7coJbEX0EmwpUa/0c869+4
zTHLAU2l7N9URBeLoOgn1FWJ9GGN+RSkbCmsa5kIlVOWEkltvoV7ic30swuQQRyx
O52hQKASfTxqlUpUaURiyu+CgFEAS/KlQb/Rt+GT6LyB8mZE3IFiITETqXBo0pZb
jPqcoH0f/MlciiYdLUTI263H5LQaCgMXDaqQBoTnzA/XE9B2FggscsJ3H5cqr5Vx
HQ8DVbFxF/Rw+iXo0JpH955xuA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:11 2026 by rpki-client