Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
File:                     Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json)
Hash identifier:          kxL6gKIwtOYnshz78AoHjnxfqHJZVubEfAEjGdkyfGI=
Subject key identifier:   F3:E3:98:D6:15:0B:36:6C:91:FD:80:BF:F2:0E:AF:BA:DB:AD:E5:C4
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Certificate issuer:       /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial:       2739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
Manifest number:          2717
Signing time:             Sat 10 Oct 2026 15:39:35 +0000
Manifest this update:     Sat 10 Oct 2026 15:39:35 +0000
Manifest next update:     Sat 17 Oct 2026 15:39:35 +0000
Files and hashes:         1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: Gh3eYvlaHEiF6IITMqaPhiz7onZclufo+JepXraN7vA=)
                          2: Jzi6lUO2TxLyzR5rqhMwzJhLbfg.asa (hash: MfGu3Kzvwc4Vw78aVRhg90nrwuPR1tXQTTGiW1svhzk=)
                          3: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: QRRhuAl7YibzJPA8Ga+QrtXP8zPTQ5rh/V7GQPe8TdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10041 (0x2739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
        Validity
            Not Before: Oct 10 15:39:35 2026 GMT
            Not After : Oct 17 15:39:35 2026 GMT
        Subject: CN=6aca5c37-9aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:d8:fa:b0:e1:a5:41:46:88:4b:93:64:53:
                    e5:2f:07:69:c1:ff:58:b1:e1:fa:18:36:90:d0:96:
                    db:f9:64:c9:37:21:f9:d1:ab:89:f1:c2:98:28:9b:
                    da:99:b7:d6:14:54:7e:39:a6:06:e4:49:6e:5e:42:
                    8d:a7:16:e2:fe:54:b0:90:0c:7c:ab:d9:2e:79:d5:
                    b0:29:f1:05:b7:42:a5:f8:26:ee:21:fc:98:6b:30:
                    52:74:f5:13:c5:03:3b:4c:de:13:69:75:59:58:a3:
                    a3:74:bf:bd:be:08:65:52:5b:7a:15:d4:7b:56:6e:
                    a7:8f:d3:03:14:13:22:1e:8a:f0:59:71:71:50:ed:
                    31:e7:0b:86:af:10:72:f8:b6:32:43:be:31:d6:08:
                    47:e2:64:49:98:33:9e:19:de:3a:c0:7c:76:f7:c0:
                    54:a8:47:4c:0c:4c:6d:3a:03:71:4a:6b:36:c7:e9:
                    6c:31:1f:b2:e3:26:70:fa:4a:3d:ab:8a:b9:de:43:
                    3e:de:fd:b2:4f:0f:1b:87:63:2d:b6:bb:3c:42:21:
                    fa:f7:67:33:bb:d2:79:2a:c6:bf:cb:40:57:df:44:
                    15:2d:83:ff:c2:2a:08:71:02:54:33:89:be:32:27:
                    4b:77:0d:66:66:e9:63:37:b5:3a:31:64:82:08:c0:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:98:D6:15:0B:36:6C:91:FD:80:BF:F2:0E:AF:BA:DB:AD:E5:C4
            X509v3 Authority Key Identifier:
                keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:33:70:fc:92:69:bb:c1:a2:a4:b3:eb:6a:95:b0:56:9f:1d:
         8d:eb:97:d0:32:f2:2e:ad:14:14:5a:d1:4e:5b:3c:8f:27:43:
         b4:9d:ce:54:73:01:03:4c:b3:8e:7b:8f:89:9e:9e:5b:13:22:
         22:42:be:41:fb:4b:78:34:49:9c:18:9a:c4:e2:88:ad:12:dc:
         b1:ef:3c:f4:33:61:16:43:50:fe:76:27:f3:49:24:fe:fb:a3:
         99:12:46:ab:26:32:b1:be:84:6d:19:7d:1d:0f:a1:75:84:41:
         71:8c:46:15:76:45:04:f4:81:ad:03:63:f8:ea:67:d3:1f:a4:
         9e:b9:9e:a9:61:05:aa:f5:35:60:a2:6b:57:57:24:42:7b:0f:
         ce:86:20:f9:bb:01:b6:36:25:74:0c:9c:23:f4:1e:91:24:6d:
         63:b5:31:bb:47:2b:52:7e:49:ef:48:55:37:93:48:93:33:2e:
         88:18:c8:19:71:fd:e8:61:97:5e:fa:39:1b:4f:a6:be:1b:aa:
         01:89:8e:c3:81:53:db:8b:3d:ac:b0:11:cf:0a:ef:41:d3:b8:
         07:09:ef:a3:b3:e6:28:26:fc:4d:c2:93:1e:ff:89:ea:82:a6:
         3d:64:93:e1:c6:7c:34:2a:03:4b:83:07:71:3d:53:15:d6:61:
         fa:a6:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:27:36 2026 by rpki-client