Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File:                     3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier:          CuiXTqS0vyyN46UY3do0TdI8UaI/9UbJ+djqYhPrHgQ=
Subject key identifier:   EF:80:24:65:C2:0C:20:CC:C1:0B:27:DF:E5:78:7C:4C:77:F6:30:68
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number:          0176
Signing time:             Mon 21 Sep 2026 04:43:38 +0000
Manifest this update:     Mon 21 Sep 2026 04:43:38 +0000
Manifest next update:     Mon 28 Sep 2026 04:43:38 +0000
Files and hashes:         1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: 0A+NqYHAzrVZ5mDklJgD01EIT8PNdog8FF0HJG63IMk=)
                          2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
                          rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: Sep 21 04:43:38 2026 GMT
            Not After : Sep 28 04:43:38 2026 GMT
        Subject: CN=6ab0b5fa-bd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:a5:3c:3e:cd:48:21:7a:8c:66:25:d8:4f:
                    84:75:ee:39:4b:fc:25:e1:43:0c:25:a8:47:dc:bd:
                    2d:bc:11:e4:8e:77:08:fe:f3:df:ed:34:4f:e4:25:
                    08:c1:a5:2e:28:d3:47:32:a3:35:7a:11:80:5e:a6:
                    f8:1c:f6:7e:76:bb:9d:88:01:44:c9:3c:d9:61:4d:
                    fd:c7:89:22:5e:29:a7:b3:d0:31:b3:b6:4f:9c:84:
                    c9:82:57:94:cb:fd:45:a4:f0:fb:33:8a:ad:5d:c9:
                    99:3a:1a:f1:23:ea:3a:8b:a1:e1:0a:99:d4:ad:77:
                    e5:2b:3c:3e:8f:28:ab:da:b1:8d:21:19:e4:70:0b:
                    29:48:cf:40:48:20:95:92:7f:e7:0b:76:b8:fd:a7:
                    a9:20:93:cb:d4:a1:2a:0d:ec:70:89:16:89:4f:9b:
                    2e:a4:83:0c:8e:32:3f:e5:15:05:4a:00:f5:57:11:
                    99:3f:7c:0f:f5:fd:fd:5e:05:60:4c:e1:80:3c:4d:
                    24:28:fe:1c:ba:50:77:70:24:64:41:09:0b:a2:42:
                    4b:38:ea:3c:38:a3:af:95:44:4f:93:cf:14:3f:5a:
                    d3:8f:5c:57:b2:a3:9c:27:79:95:d5:ec:47:f0:50:
                    1d:6b:a4:63:26:cd:76:c5:00:5c:9e:aa:39:f1:b2:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:24:65:C2:0C:20:CC:C1:0B:27:DF:E5:78:7C:4C:77:F6:30:68
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:f5:11:b0:d4:6b:b4:76:63:e4:85:ef:ee:6f:21:b5:90:
         89:c0:5b:7c:56:ef:ab:33:45:d3:a1:36:cf:ee:a6:e1:f4:6b:
         2b:42:7a:bd:b4:5d:f9:7e:af:ba:a9:d0:bd:c1:41:85:e8:3b:
         a1:17:26:6f:5e:bf:73:bf:92:2b:47:0f:35:fb:e6:14:95:7e:
         63:ee:97:97:eb:0d:04:65:3f:a5:39:89:2a:a3:eb:a1:17:86:
         5e:d3:51:b0:8f:0c:b4:13:d8:79:ee:5e:7e:80:a0:fe:6e:d0:
         2f:d6:d8:af:c4:75:d2:f7:39:e6:f4:26:14:a3:0d:78:74:05:
         75:32:cb:43:76:88:8b:85:4e:84:6c:b2:72:2b:dd:de:7c:f6:
         fa:5a:bd:e1:b5:9d:ca:0b:c6:42:d1:67:56:71:69:b0:68:1d:
         15:d1:58:8b:e1:a7:df:5a:ee:74:43:a4:6a:a9:ef:2e:f8:3f:
         ca:c3:62:5d:ec:d9:55:b9:79:6b:fb:bf:c8:6c:e7:86:7b:48:
         84:ff:63:03:67:da:4b:08:15:f4:5c:6a:7a:3c:24:67:7a:87:
         22:65:41:21:5e:c4:9d:21:8b:4a:2a:6b:83:39:f9:d4:56:0b:
         df:f9:2c:8c:46:a7:b9:0d:7e:76:fe:bd:bd:88:ff:fc:63:c1:
         50:ee:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:25:59 2026 by rpki-client