Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
File:                     Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json)
Hash identifier:          frwwWm6yicU7Twj2JXvFZmhEf0cHlDysFgCPlfVToaY=
Subject key identifier:   BD:4E:93:60:32:FE:C9:18:9D:24:27:5A:98:EB:C1:3F:74:F4:9C:27
Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59
Certificate issuer:       /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
Manifest number:          60
Signing time:             Sat 19 Sep 2026 08:07:53 +0000
Manifest this update:     Sat 19 Sep 2026 08:07:53 +0000
Manifest next update:     Sat 26 Sep 2026 08:07:53 +0000
Files and hashes:         1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: DWV90PDQHoXfUytj7oGpamKBhs6JPWqia0vUSvfr4hY=)
                          2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl
                          rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59
        Validity
            Not Before: Sep 19 08:07:53 2026 GMT
            Not After : Sep 26 08:07:53 2026 GMT
        Subject: CN=6aae42d9-e0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:99:d8:d8:74:8d:47:da:b5:17:a6:49:62:
                    c6:c6:30:05:71:8b:0a:ed:98:96:53:8b:cd:f2:81:
                    d1:d5:7d:ee:da:f9:83:46:45:2b:d0:28:fc:02:b1:
                    74:53:08:45:9b:1c:97:8e:c1:e5:8f:8c:b4:8c:ea:
                    2e:57:fe:b2:06:7a:12:7e:5e:9e:61:7c:7a:ac:6a:
                    cb:c9:6d:1e:0c:90:f8:74:8d:6e:00:31:70:2c:0d:
                    19:a0:f0:da:2e:0b:b2:15:97:da:d0:fe:ed:a3:ff:
                    f2:a5:1b:fa:97:09:09:7b:d5:71:ad:2c:0a:49:85:
                    4a:71:cd:f0:b4:6b:ee:ca:d3:97:eb:c9:23:cd:ad:
                    dc:f4:08:76:ac:27:17:d8:3a:ad:34:68:c3:bf:5b:
                    45:02:ef:b4:6c:ef:52:28:cc:5b:7e:99:42:89:fc:
                    fc:4e:da:54:92:0f:c7:c7:c9:77:87:36:9f:0b:19:
                    27:0f:24:af:96:7d:cf:27:68:95:89:2e:f9:a2:fa:
                    d7:08:e0:88:60:02:2f:a4:48:1a:b5:66:e6:ae:fb:
                    3a:c5:c2:d3:56:7b:26:29:f4:1e:7b:b0:c8:d1:07:
                    08:d8:aa:ea:2c:1c:0f:75:e2:75:fd:63:bb:c8:99:
                    fa:5b:72:fb:4c:bf:86:9d:6a:f0:87:8d:39:48:ed:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:93:60:32:FE:C9:18:9D:24:27:5A:98:EB:C1:3F:74:F4:9C:27
            X509v3 Authority Key Identifier:
                keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:94:45:0a:83:d7:8a:5a:a6:72:3d:2e:7a:c7:35:33:c2:
         68:d4:c6:25:90:fb:f4:73:9b:a2:9f:7c:b7:96:5c:8f:20:ab:
         f3:9c:1c:18:e6:a5:c7:6c:af:2f:e2:a4:45:1b:a9:f7:9b:a1:
         6a:cf:24:11:5a:57:4e:d7:e4:42:69:74:aa:38:73:28:ce:b8:
         78:27:a3:bb:cd:37:a2:5f:2f:af:ba:7b:11:e3:94:22:b2:24:
         12:40:55:fc:52:70:a5:df:6e:21:5f:08:6a:83:a2:bc:63:09:
         68:0e:7a:48:45:4f:f3:3a:8f:b5:33:d5:db:fd:b8:34:a7:0a:
         30:13:3c:7a:91:d4:9c:99:a2:da:c4:8e:37:91:71:77:d7:cc:
         a5:c0:51:60:e0:ae:19:9f:56:d6:99:ef:9e:a7:4b:1c:f6:aa:
         2f:a4:b0:15:c0:bf:26:df:23:68:f1:6c:dd:17:06:f9:09:95:
         a0:c7:1b:4b:c9:48:03:67:b5:4e:27:d7:bb:33:e5:eb:89:1c:
         9c:50:26:d7:2b:c6:c4:13:2e:82:11:aa:c3:64:b4:10:b0:8b:
         d5:90:37:5e:0c:1e:00:ec:08:04:5a:db:4f:a0:96:f0:11:2d:
         9d:d7:ac:94:16:71:1d:2a:cd:07:b8:e9:f6:aa:58:b3:d6:74:
         87:5f:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:08 2026 by rpki-client