Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
File:                     Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json)
Hash identifier:          8jyICFcXeXemwO1D5tUCdDvaIBEq4+GdZxKqV8l7AWc=
Subject key identifier:   9D:C3:37:28:DF:D6:37:F2:DF:D6:4E:12:C1:94:2E:6E:62:43:4B:B5
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Certificate issuer:       /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial:       2735
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
Manifest number:          2713
Signing time:             Fri 02 Oct 2026 15:45:57 +0000
Manifest this update:     Fri 02 Oct 2026 15:45:57 +0000
Manifest next update:     Fri 09 Oct 2026 15:45:57 +0000
Files and hashes:         1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: jkEKQIkOxj8GOsGWMp1mQ8YUoyJaur59VIEEyZek4fw=)
                          2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: QRRhuAl7YibzJPA8Ga+QrtXP8zPTQ5rh/V7GQPe8TdU=)
                          3: Jzi6lUO2TxLyzR5rqhMwzJhLbfg.asa (hash: MfGu3Kzvwc4Vw78aVRhg90nrwuPR1tXQTTGiW1svhzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10037 (0x2735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
        Validity
            Not Before: Oct  2 15:45:57 2026 GMT
            Not After : Oct  9 15:45:57 2026 GMT
        Subject: CN=6abfd1b5-7df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:cb:e5:86:c3:5f:72:91:0f:c4:b1:7a:2f:
                    01:5e:9d:c8:9d:48:eb:13:92:2f:a4:87:0f:a7:8b:
                    03:b8:4b:a1:89:1d:44:6a:18:d5:4b:35:71:50:fe:
                    7e:61:3b:d9:19:f4:19:86:42:3c:ce:21:43:91:20:
                    24:63:7e:85:83:07:b0:a2:8e:7f:ab:02:74:77:fd:
                    d6:69:97:bd:e3:83:5a:ba:93:c1:08:7c:c4:a0:4e:
                    c5:36:0d:03:d8:37:ba:11:3c:f7:48:b8:68:62:18:
                    a2:5e:71:17:df:80:1d:da:38:96:30:39:ff:81:b1:
                    1e:be:92:63:03:1f:77:a3:d1:74:50:d5:b1:1a:e0:
                    61:98:64:ba:78:95:37:42:a9:e4:64:57:3e:20:3a:
                    28:bf:6e:c3:43:56:5b:dd:e6:6a:7e:08:fc:ac:e8:
                    d4:26:42:f9:69:35:56:84:ec:b1:85:9c:34:b9:79:
                    c8:3f:e9:0d:30:46:3c:d6:d8:1c:85:20:2b:a2:54:
                    21:93:e5:2a:be:9d:af:07:9d:f1:11:fc:0c:58:09:
                    5e:a9:e0:84:05:0e:e7:24:41:96:84:3b:03:76:75:
                    e3:97:14:ea:12:31:10:74:c1:77:86:48:6b:55:74:
                    cc:0b:2e:f2:a6:ed:a7:de:9d:cc:db:ce:02:49:78:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:37:28:DF:D6:37:F2:DF:D6:4E:12:C1:94:2E:6E:62:43:4B:B5
            X509v3 Authority Key Identifier:
                keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:55:5c:4b:84:98:e9:36:91:c5:0b:d9:c5:15:98:fc:9a:
         6e:90:e9:45:a2:af:ad:70:33:19:47:0f:ca:c2:5f:c5:38:a6:
         b7:66:1e:13:3f:26:28:2e:12:a4:45:06:11:0e:89:24:a7:bd:
         85:0f:04:a9:54:b5:a2:e8:0a:71:45:a7:32:20:0b:c6:bc:ef:
         eb:be:d0:bb:b3:0f:65:7e:8e:d2:f2:f4:61:58:6a:c5:cc:c0:
         d2:57:d3:f1:b7:2a:a1:7d:a9:44:d7:c2:4d:70:31:cb:42:7a:
         b1:8d:19:1f:cd:03:25:c7:03:8e:83:89:fa:c7:a4:b7:47:63:
         8e:39:c9:83:8b:d2:47:23:52:e0:be:fe:f6:09:ea:c7:10:ef:
         19:bf:7b:e8:66:7a:65:69:bc:d3:cb:a3:92:cd:8e:9c:ad:53:
         7a:b5:52:d6:45:73:47:ab:1b:60:f2:f7:6e:e1:d3:38:eb:3f:
         54:37:e8:f8:f2:89:7d:0d:38:9f:a9:7e:6c:4e:67:f7:ad:2f:
         11:76:48:fd:29:7c:4b:b5:98:a0:8f:6b:7a:a9:a2:38:d9:4c:
         0f:12:1d:31:65:49:8a:a4:dc:08:81:fa:ef:fb:58:cf:37:77:
         84:02:82:90:33:04:30:94:91:00:36:65:63:45:54:94:70:b7:
         0c:42:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:12:21 2026 by rpki-client