Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          srNHSQ/qEqugx7ipzrrY6b3Py7DPrW+vagOuChjWqlU=
Subject key identifier:   0C:B8:4A:48:09:29:98:2C:00:16:34:48:F8:D7:0E:4F:47:1F:55:2A
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0B39
Signing time:             Fri 12 Jun 2026 19:16:50 +0000
Manifest this update:     Fri 12 Jun 2026 19:16:49 +0000
Manifest next update:     Fri 19 Jun 2026 19:16:49 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: cIB1FeCjhHG960lO9yTQ1Gc078+ELiXRwy+xcC6ARuc=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: Kv1ZeZer4REIrfI8Hlm3MaeU0Dgip0iWzMyHWiW+bnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Jun 12 19:16:49 2026 GMT
            Not After : Jun 19 19:16:49 2026 GMT
        Subject: CN=6a2c5b22-683f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:17:ac:0a:f5:90:07:a5:33:69:4e:4d:19:
                    b4:18:b3:59:17:c7:d3:5f:09:e0:fe:6b:bb:4c:f6:
                    c1:6f:8b:3c:f9:07:cd:44:a3:34:e9:2a:a3:35:05:
                    15:7e:92:62:93:4b:77:d4:7c:b8:ed:46:fb:0a:7d:
                    3e:7b:f5:67:78:02:d7:db:d4:04:61:b1:ff:ab:de:
                    d5:5e:2f:9b:48:cc:1c:49:3f:6a:ad:e1:10:b8:90:
                    35:a8:78:b8:6a:ab:49:5b:d6:21:50:a2:b9:a3:60:
                    8c:3e:03:e5:d4:df:97:44:8c:fe:96:72:66:8a:95:
                    59:81:0b:7e:67:49:ff:19:6f:a2:27:0e:46:0f:95:
                    bc:84:29:18:8d:a9:1d:d6:4b:2f:bf:a3:fb:c0:f1:
                    cb:43:ad:e7:e2:6c:a3:fc:c8:ef:97:14:d8:1e:e8:
                    5f:3d:07:61:91:68:a8:58:59:3a:14:ac:63:8b:29:
                    85:de:6c:87:22:2a:05:f7:5a:91:82:89:30:29:31:
                    be:9a:61:0f:19:d1:90:5f:7b:3d:83:40:b1:15:3f:
                    f9:43:ab:d4:99:e3:87:ce:5d:77:a9:dc:1c:ee:49:
                    e0:11:04:31:58:8d:da:18:eb:f5:c4:01:c0:be:d3:
                    64:f1:21:2f:f1:02:e8:d7:d1:32:7e:c5:78:fa:0f:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B8:4A:48:09:29:98:2C:00:16:34:48:F8:D7:0E:4F:47:1F:55:2A
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:bb:08:a1:f9:a6:6a:c1:d9:12:cc:6e:50:2f:7a:37:a6:
         ae:e1:5c:3a:29:0f:eb:04:7b:2f:b8:d2:71:1e:fb:07:73:ed:
         56:a2:c6:53:97:37:00:18:3c:ae:0c:60:68:61:44:ff:70:c1:
         7d:ea:49:91:e6:3d:d4:b1:8a:5f:c9:d1:e7:a5:cf:ea:5c:2c:
         4e:d6:17:e8:a1:48:e9:f7:66:42:1d:b2:0c:ff:e2:c5:2e:0d:
         fe:b8:88:aa:e2:61:ae:e8:43:ea:c4:70:e7:82:77:5c:7e:9a:
         7c:7d:f3:9a:ec:67:33:30:8e:31:b8:31:95:dc:1a:7f:86:71:
         f3:c6:c6:6f:70:a5:db:0f:ee:27:49:a8:ab:6b:4b:a2:91:e6:
         22:83:66:64:2a:a6:b7:43:9d:19:2e:2e:19:37:70:37:0e:e8:
         7a:d5:4b:ae:a3:d7:19:93:3f:d3:9f:3f:81:12:48:46:b9:b0:
         15:82:8b:0f:f5:17:e7:d9:3d:41:56:75:b4:92:4d:27:5c:ed:
         ae:04:05:bf:1f:1e:c7:1a:50:18:ce:90:99:eb:bf:2d:82:f5:
         16:47:9e:ad:38:a1:29:f9:9c:b4:c5:a7:84:bd:ba:3c:9c:51:
         cf:f4:79:7c:55:a6:c4:22:6d:db:0b:ca:6c:f6:20:d3:3e:41:
         cb:da:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:12 2026 by rpki-client