Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json)
Hash identifier:          4ijQ02Vb4kQVfshnlz4GlU2vRXlUoW8do+Ushx+ifT4=
Subject key identifier:   71:99:64:31:3B:CE:13:25:D8:E3:E4:2D:8C:0D:2A:A3:52:75:78:CC
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Certificate issuer:       /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial:       1FBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
Manifest number:          1FA6
Signing time:             Sat 04 Apr 2026 15:55:26 +0000
Manifest this update:     Sat 04 Apr 2026 15:55:25 +0000
Manifest next update:     Sat 11 Apr 2026 15:55:25 +0000
Files and hashes:         1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: jaGX88T0Zm91e9Xu4B1RiGeR7c5ocDJdilv20eTHZsM=)
                          2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: omf80M/Stw6ccHt4cKJMjnGFUkPouv2sNZ6+vJQc1Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl
                          rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8127 (0x1fbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9196, serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Validity
            Not Before: Apr  4 15:55:25 2026 GMT
            Not After : Apr 11 15:55:25 2026 GMT
        Subject: CN=69d1346e-b2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:92:16:d8:95:30:36:d1:cb:33:fb:cc:f4:
                    37:95:28:c6:7b:65:52:1b:4e:ff:4d:5e:0f:6c:47:
                    da:c2:12:8e:7c:09:d2:e3:73:c0:d1:7d:a2:63:81:
                    29:5e:f1:7a:e9:89:10:f2:96:9f:73:c2:cc:ba:a9:
                    f7:25:91:2c:12:1f:d4:4f:57:96:03:b3:b0:5b:39:
                    1c:10:9b:24:d8:bd:0f:5b:5d:6a:7f:de:47:1c:3d:
                    29:a2:8d:19:d4:4f:97:da:9c:29:d6:46:a3:75:50:
                    65:d0:b3:b9:69:7d:76:c9:5d:2d:b7:7e:9a:df:aa:
                    5b:ce:f5:6c:e2:27:f6:34:d7:3a:19:ca:66:e0:72:
                    32:8a:b0:df:c5:0d:14:24:3d:88:38:b9:f5:f3:af:
                    2f:fb:07:dd:21:54:a9:61:8f:d4:2a:36:04:cc:59:
                    90:30:1d:c4:8c:c1:be:e8:95:b5:44:cc:fe:a3:bc:
                    73:3d:38:c9:a5:13:00:f8:f9:5c:e9:25:06:6f:aa:
                    15:f2:74:5b:81:8b:70:87:fe:d6:56:b2:de:3d:ea:
                    82:4f:65:2e:0b:89:15:35:8e:de:e2:6c:c2:39:ea:
                    0b:26:a7:36:f4:02:a3:d4:cc:8d:e3:48:01:55:9a:
                    35:9e:ba:57:06:4b:a1:d2:5f:63:af:88:cd:1b:64:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:99:64:31:3B:CE:13:25:D8:E3:E4:2D:8C:0D:2A:A3:52:75:78:CC
            X509v3 Authority Key Identifier:
                keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:3a:36:8c:ee:bd:9b:b5:39:e9:7b:08:7d:79:20:bb:57:
         1f:3a:8d:46:21:51:9b:00:d9:e3:61:7e:5a:68:0c:dc:90:ff:
         c4:be:2b:93:e0:0a:2a:78:e3:a9:d0:84:91:28:af:9a:e7:f0:
         be:97:76:59:93:45:66:b8:ab:48:9e:ee:51:b6:82:ed:23:98:
         ec:ec:e9:4a:4a:21:22:ff:84:76:2c:24:bd:ca:43:93:e8:7c:
         1c:4c:ed:a2:b8:9d:2a:60:16:50:5c:1e:7d:4d:16:df:91:59:
         1c:4f:fe:59:74:fc:b2:73:f5:3d:81:a7:7f:59:85:b1:27:ed:
         6c:49:ae:de:4e:0b:30:e3:31:61:37:8f:f5:23:43:6c:d1:24:
         78:d2:d7:bf:cb:5f:65:ee:b0:fe:73:da:56:b8:5c:55:af:5f:
         8a:39:a2:02:ea:e1:8a:21:60:3f:3a:e4:c5:9d:8c:c7:74:ef:
         f6:0f:9f:aa:1d:1b:21:34:5a:1b:1b:61:04:35:97:17:04:00:
         0b:b9:11:40:d6:d6:4a:88:33:61:3a:c4:62:00:1d:31:f0:e5:
         20:a2:a5:44:16:e1:b0:09:c5:3e:b2:17:45:b8:8a:0f:a1:50:
         e7:2a:27:66:7d:d9:f7:d5:fe:f5:87:86:d8:46:d1:1d:74:0f:
         1f:23:4c:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkxOTYxMTAvBgNVBAUTKDEyODZDRTZFNzQ3MkY5REU4REYyQTU2RDhGREExNDQ5
Q0E3M0VEREMwHhcNMjYwNDA0MTU1NTI1WhcNMjYwNDExMTU1NTI1WjAYMRYwFAYD
VQQDEw02OWQxMzQ2ZS1iMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDuSFtiVMDbRyzP7zPQ3lSjGe2VSG07/TV4PbEfawhKOfAnS43PA0X2iY4Ep
XvF66YkQ8pafc8LMuqn3JZEsEh/UT1eWA7OwWzkcEJsk2L0PW11qf95HHD0poo0Z
1E+X2pwp1kajdVBl0LO5aX12yV0tt36a36pbzvVs4if2NNc6Gcpm4HIyirDfxQ0U
JD2IOLn1868v+wfdIVSpYY/UKjYEzFmQMB3EjMG+6JW1RMz+o7xzPTjJpRMA+Plc
6SUGb6oV8nRbgYtwh/7WVrLePeqCT2UuC4kVNY7e4mzCOeoLJqc29AKj1MyN40gB
VZo1nrpXBkuh0l9jr4jNG2S5wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGZZDE7
zhMl2OPkLYwNKqNSdXjMMB8GA1UdIwQYMBaAFBKGzm50cvnejfKlbY/aFEnKc+3c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE5Ni80MzhGNUQ5NjVB
MUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1kNk44cVZ0ajlvVVNjcHo3
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VvYk9iblJ5LWQ2TjhxVnRqOW9VU2Nwejdkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTE5Ni80MzhGNUQ5NjVBMUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1k
Nk44cVZ0ajlvVVNjcHo3ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKD46NozuvZu1Oel7CH15ILtXHzqNRiFRmwDZ42F+WmgM3JD/xL4rk+AKKnjj
qdCEkSivmufwvpd2WZNFZrirSJ7uUbaC7SOY7OzpSkohIv+EdiwkvcpDk+h8HEzt
oridKmAWUFwefU0W35FZHE/+WXT8snP1PYGnf1mFsSftbEmu3k4LMOMxYTeP9SND
bNEkeNLXv8tfZe6w/nPaVrhcVa9fijmiAurhiiFgPzrkxZ2Mx3Tv9g+fqh0bITRa
GxthBDWXFwQAC7kRQNbWSogzYTrEYgAdMfDlIKKlRBbhsAnFPrIXRbiKD6FQ5yon
Zn3Z99X+9YeG2EbRHXQPHyNMDA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:23 2026 by rpki-client