Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
File:                     OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json)
Hash identifier:          WfO48N4CB8kmVzeUlrymI3dWJCeQne+NlKLMOqGz8dI=
Subject key identifier:   33:59:55:FD:DD:2F:AA:B1:5E:C1:00:8D:D3:F7:78:07:72:27:92:F0
Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A
Certificate issuer:       /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
Certificate serial:       0B07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
Manifest number:          0B00
Signing time:             Sat 28 Feb 2026 19:34:57 +0000
Manifest this update:     Sat 28 Feb 2026 19:34:57 +0000
Manifest next update:     Sat 07 Mar 2026 19:34:57 +0000
Files and hashes:         1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: d0KUOUGSGOKOfFZ1nagZsjubSkG69tfgh6pQwJ2/qB8=)
                          2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: RsV1HG0sblH5nYeZVkL9f/OZ/ev49KnYKTaHyjLrK0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2823 (0xb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A
        Validity
            Not Before: Feb 28 19:34:57 2026 GMT
            Not After : Mar  7 19:34:57 2026 GMT
        Subject: CN=69a34361-039d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:62:4b:21:08:5e:47:19:48:1f:f7:db:07:
                    67:fe:1c:42:6c:bf:c7:fe:11:6a:a3:07:2d:bc:9f:
                    87:ee:e6:24:cb:87:1e:37:94:cd:2a:58:86:78:c1:
                    3b:2c:b0:b1:67:f3:dd:af:b5:e7:8a:cd:6e:9a:74:
                    c1:24:fb:e1:55:d6:b6:a4:05:6a:e5:d6:77:07:06:
                    21:c6:36:d3:76:f9:05:e0:21:d1:86:04:70:86:06:
                    fa:2a:89:86:2b:bc:ae:98:67:6e:1a:25:a3:45:f9:
                    43:49:39:3a:cb:a2:97:d5:26:a7:c7:57:8f:97:e8:
                    cf:88:bb:7c:99:01:70:28:9c:98:c7:e4:b4:25:9c:
                    53:52:52:f1:df:7b:15:70:4d:b0:45:99:cc:cd:02:
                    9b:5e:81:49:f8:0f:52:b2:a8:5f:d1:69:56:58:24:
                    cf:57:c1:42:0c:9a:04:56:a8:0c:8f:42:73:fa:dd:
                    57:e9:bf:d4:f3:78:6d:35:57:d1:1a:07:df:be:a3:
                    22:cc:a2:0d:0c:d6:35:38:32:7d:ac:37:3f:be:24:
                    9e:b6:0b:b5:5c:37:94:6e:10:be:b1:95:40:ee:d0:
                    e5:af:df:33:74:b6:29:d3:33:4f:b4:df:7f:e5:0d:
                    6e:d5:db:b8:15:f3:fa:0c:ad:36:c9:94:81:a3:7e:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:55:FD:DD:2F:AA:B1:5E:C1:00:8D:D3:F7:78:07:72:27:92:F0
            X509v3 Authority Key Identifier:
                keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:a1:63:40:bf:e5:4d:a1:28:23:84:b6:9a:04:28:e3:92:
         7f:ba:08:2e:68:87:fa:35:ac:18:9e:16:08:1d:3b:2c:59:7b:
         6b:b0:4b:98:38:54:40:f1:2b:2b:f0:35:e2:5a:b5:70:44:09:
         16:35:e2:9a:88:0d:d2:7b:fb:83:69:f5:b5:04:80:7d:2e:d9:
         e6:38:01:2b:6e:51:44:e0:a8:91:3f:79:74:0e:83:93:fe:4d:
         91:a7:d5:f6:e3:89:00:6a:87:17:e4:c8:4d:58:8f:b5:0d:cc:
         57:7a:49:4b:eb:aa:41:d5:82:5d:84:d7:0a:56:f0:7f:d0:45:
         9f:88:26:ff:be:a1:a4:76:f5:97:39:a5:38:b8:8d:ff:64:5b:
         b4:64:78:70:4b:99:cc:9e:44:2b:7d:97:53:d4:ed:3f:9b:21:
         94:0a:04:32:18:d3:fd:06:ff:fd:3d:3e:8e:8a:ca:cf:e9:c4:
         bd:49:84:4e:99:ce:a6:a8:0e:13:31:f0:47:2e:10:8c:47:91:
         6c:d8:88:d0:e5:3e:69:28:9f:89:9b:b2:7f:94:35:41:63:ad:
         d5:7c:f2:d1:39:9e:70:78:1b:a3:57:fc:64:79:9c:a8:8e:24:
         04:f4:4f:5c:2f:61:03:dd:0c:51:f2:01:c8:26:12:d0:c7:63:
         3a:ab:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:26 2026 by rpki-client