Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          ku2cyj1Su280i/fuVUsCFGkD4asNSVd21Yp1Oqg9sQ4=
Subject key identifier:   D4:15:44:D6:38:09:DD:F5:DE:2D:6F:FA:30:F5:8B:4B:D6:BA:A6:A2
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          014A
Signing time:             Wed 05 Nov 2025 04:41:15 +0000
Manifest this update:     Wed 05 Nov 2025 04:41:15 +0000
Manifest next update:     Wed 12 Nov 2025 04:41:14 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: 6KA+fEsaJ8dbeBBD+D9EwKhjofqiUMTFCgInjTYFnQE=)
                          2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: bnkVNhU6o5rwwfFx9zgMXEGJHB9u5Plk3LVxSdWMAa0=)
                          3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: S2OGi1wUST6aH/yqjhUOxU4wsu1S9AAnnNOgdjDA6+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Nov  5 04:41:15 2025 GMT
            Not After : Nov 12 04:41:14 2025 GMT
        Subject: CN=690ad56b-e961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:c2:88:02:09:44:92:aa:4f:13:45:4e:90:
                    e3:29:fd:04:fb:7f:23:87:25:e5:a0:b9:6d:09:62:
                    21:7d:20:25:18:12:57:63:ed:bf:2e:f4:91:b3:03:
                    81:97:2b:f0:b3:67:9f:5a:7e:6e:fd:88:97:64:64:
                    da:a2:a7:fd:5b:7f:6a:78:54:60:e9:49:7c:68:fe:
                    c4:55:41:b0:6f:70:2d:ad:11:cf:7e:e9:1f:25:47:
                    5f:58:33:91:95:72:56:00:b7:1c:95:4e:01:67:66:
                    e6:1c:37:2d:64:2c:93:9b:34:2e:09:57:c6:df:0c:
                    fc:46:06:96:95:1d:40:81:9a:d7:56:5e:50:07:d2:
                    35:c2:b1:da:4c:bd:ec:79:c6:27:61:14:9d:f5:c6:
                    51:88:a4:bc:69:96:66:e7:10:d1:cf:be:ac:84:6b:
                    d8:42:3b:d2:9e:7a:db:38:b1:b3:bd:35:4f:de:da:
                    de:c1:03:18:ef:83:50:f0:bb:49:10:ff:22:ea:bd:
                    7d:6e:28:33:78:92:3f:a3:ec:41:d7:ac:06:32:b6:
                    20:d0:24:fd:b5:9f:28:33:98:c5:fc:a8:58:ce:47:
                    4f:c1:9b:d4:0d:4b:7b:e8:ce:d9:17:d3:3e:90:88:
                    c7:36:05:bd:e2:8f:1d:a5:b3:17:1a:83:c7:50:69:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:44:D6:38:09:DD:F5:DE:2D:6F:FA:30:F5:8B:4B:D6:BA:A6:A2
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:62:5d:d3:fb:c3:ff:56:a9:fb:a4:03:5e:96:c8:4e:38:
         a8:39:75:0e:d2:74:71:36:02:31:0f:bd:68:4a:bb:16:fe:ed:
         36:2b:b9:84:53:8c:ff:bc:fd:aa:8c:cd:b8:79:ec:72:35:82:
         ce:29:ae:76:ab:7d:3d:20:f6:ed:c6:ea:ae:e0:97:96:ca:b3:
         8b:ac:2b:ad:cd:ae:37:0d:de:ed:e3:e5:64:de:40:0f:5a:74:
         ec:36:3e:1a:cc:a8:e6:55:70:ae:b4:79:65:6c:5c:8b:27:eb:
         a3:aa:78:86:64:05:0a:a7:9c:21:bc:1c:a8:e7:62:5a:c6:45:
         16:8e:d4:a3:cd:97:98:58:a9:55:f7:e4:b1:6f:51:63:da:5c:
         83:28:e4:00:a6:84:4f:97:b7:9c:57:37:66:d1:5f:6b:b9:89:
         9a:52:a8:03:42:42:40:95:f8:d5:96:f7:5b:35:60:23:33:d4:
         36:d8:f5:7d:d2:3b:ca:6b:f2:ab:ce:b1:0d:7a:2a:25:1c:59:
         4a:a1:68:82:91:98:74:e0:8f:a1:a7:2f:7e:f0:cd:82:a8:2c:
         95:05:4e:e3:01:03:cb:1f:04:c9:6f:3e:7a:33:1b:0c:ba:65:
         cf:6e:1f:8b:e7:98:53:5f:64:2e:6f:a0:46:d0:66:c6:3d:1b:
         ad:a9:ed:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD
NDM5REU5NzcwHhcNMjUxMTA1MDQ0MTE1WhcNMjUxMTEyMDQ0MTE0WjAYMRYwFAYD
VQQDEw02OTBhZDU2Yi1lOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHDCiAIJRJKqTxNFTpDjKf0E+38jhyXloLltCWIhfSAlGBJXY+2/LvSRswOB
lyvws2efWn5u/YiXZGTaoqf9W39qeFRg6Ul8aP7EVUGwb3AtrRHPfukfJUdfWDOR
lXJWALcclU4BZ2bmHDctZCyTmzQuCVfG3wz8RgaWlR1AgZrXVl5QB9I1wrHaTL3s
ecYnYRSd9cZRiKS8aZZm5xDRz76shGvYQjvSnnrbOLGzvTVP3trewQMY74NQ8LtJ
EP8i6r19bigzeJI/o+xB16wGMrYg0CT9tZ8oM5jF/KhYzkdPwZvUDUt76M7ZF9M+
kIjHNgW94o8dpbMXGoPHUGnvJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQVRNY4
Cd313i1v+jD1i0vWuqaiMB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0
RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk0OS8zRjI0MkFDMkU0RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExv
d1ZadXpNS2hJYmJFT2Q2WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPs2Jd0/vD/1ap+6QDXpbITjioOXUO0nRxNgIxD71oSrsW/u02K7mE
U4z/vP2qjM24eexyNYLOKa52q309IPbtxuqu4JeWyrOLrCutza43Dd7t4+Vk3kAP
WnTsNj4azKjmVXCutHllbFyLJ+ujqniGZAUKp5whvByo52JaxkUWjtSjzZeYWKlV
9+Sxb1Fj2lyDKOQApoRPl7ecVzdm0V9ruYmaUqgDQkJAlfjVlvdbNWAjM9Q22PV9
0jvKa/KrzrENeiolHFlKoWiCkZh04I+hpy9+8M2CqCyVBU7jAQPLHwTJbz56MxsM
umXPbh+L55hTX2Qub6BG0GbGPRutqe2q
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:40 2025 by rpki-client