Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File:                     Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier:          HYAoUqyML0ZwHARxBcfkqyw0mrlk3QeWmYfEp3FuRss=
Subject key identifier:   23:7C:E7:8C:EF:CF:EB:A2:1D:80:5F:A6:8E:43:CC:74:70:F1:70:FD
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       04E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number:          04DB
Signing time:             Sat 18 Apr 2026 23:43:39 +0000
Manifest this update:     Sat 18 Apr 2026 23:43:39 +0000
Manifest next update:     Sat 25 Apr 2026 23:43:39 +0000
Files and hashes:         1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: O0tuGzHYMXNwnO/RspEKVfCm9odLILg9fklDYMRq3pw=)
                          2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: 3aUq+4eZ5x7ZiH9oh0Xt34CXF6YQPCZXOEPkKr7X/Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: Apr 18 23:43:39 2026 GMT
            Not After : Apr 25 23:43:39 2026 GMT
        Subject: CN=69e4172b-33d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:42:e4:05:12:80:08:c1:d5:5d:17:7c:02:
                    e5:63:91:f3:b1:40:9a:48:55:4e:56:0a:f8:d6:e6:
                    72:94:34:88:98:f0:4e:6f:2a:18:87:2c:c6:f0:0d:
                    73:c3:f0:63:e7:e9:03:10:67:79:d4:3a:bf:11:42:
                    3f:e8:60:41:44:5e:69:68:ea:d2:89:9c:6f:7f:51:
                    31:e3:4c:be:89:af:a2:88:0f:b2:c6:28:56:47:b5:
                    83:f9:a4:51:cb:fa:d9:73:34:75:25:6b:6e:4d:ca:
                    38:e2:68:76:5d:e0:a7:6a:ea:b4:0d:13:42:ce:8d:
                    03:5f:4d:1c:b0:f9:f6:65:26:ff:e5:b3:2d:a5:5e:
                    c4:a1:43:f2:5b:9b:a3:48:7e:d4:36:64:76:4e:be:
                    2a:c8:c9:2b:5b:0d:02:78:5b:c9:e1:34:a8:43:65:
                    2e:e4:4e:dc:c3:d8:71:42:f0:2c:43:e2:51:59:96:
                    ee:b5:c5:87:42:a0:30:fb:27:d5:73:54:68:cb:ff:
                    21:87:42:3d:c0:af:1a:0c:5f:de:08:da:38:bd:ce:
                    20:d6:2c:54:50:d9:67:5f:f5:a6:05:fe:a1:e2:58:
                    94:93:ca:58:49:5c:8d:13:ed:c7:b7:f1:2c:2d:6a:
                    71:70:0a:4b:4c:91:34:3b:7f:56:0c:0b:75:6c:5a:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7C:E7:8C:EF:CF:EB:A2:1D:80:5F:A6:8E:43:CC:74:70:F1:70:FD
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:a4:cb:56:4e:9b:de:5e:d2:06:95:72:85:6f:d3:52:bf:
         a0:c5:c4:64:f4:5e:cc:47:67:87:f6:e8:88:aa:f6:b6:3b:55:
         e6:eb:07:46:d2:eb:bc:e6:13:00:3f:4f:ad:e1:7a:fd:c8:77:
         32:c8:92:01:b9:79:ff:ab:1d:2b:6c:10:51:f8:ff:4c:47:e5:
         70:3e:0e:0b:ae:49:b0:f9:a0:13:0d:e3:78:f8:5d:65:36:3d:
         51:ee:72:0a:ed:9d:63:e0:c9:38:22:a5:c9:4b:e2:97:b1:84:
         41:b7:50:da:b1:c4:3d:9b:50:13:c0:6a:bf:df:d1:a3:0c:95:
         5b:47:2c:6c:ba:7b:8e:3a:f9:88:7f:8c:0b:88:09:a3:c8:9a:
         87:78:57:67:3f:4a:72:95:ab:3e:7b:35:e6:8d:0c:93:b1:9a:
         da:d3:4f:0c:57:21:20:ca:37:4f:9b:3d:f0:1a:f3:84:a1:fd:
         08:5b:77:d5:99:e6:39:cb:f7:11:45:69:00:91:05:4c:51:fa:
         6c:75:1f:10:08:21:c0:c5:ac:4d:fe:eb:18:a6:82:82:4a:78:
         00:c0:fb:eb:1b:42:c4:17:ff:7c:3f:d2:b8:d9:7d:ec:61:ca:
         15:7c:25:ec:24:d6:20:71:ff:08:28:47:40:6a:3d:0a:3f:c7:
         20:63:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:27 2026 by rpki-client