Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
File:                     EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json)
Hash identifier:          zldgRdAIr9X+7WME/Pq/taMi1rC8jN5pPmKJTn6nVf0=
Subject key identifier:   FE:6C:CB:F9:78:AC:DA:3F:70:4D:12:FC:5D:FE:1C:BF:BD:62:AB:6D
Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B
Certificate issuer:       /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
Manifest number:          029B
Signing time:             Thu 21 May 2026 01:43:21 +0000
Manifest this update:     Thu 21 May 2026 01:43:21 +0000
Manifest next update:     Thu 28 May 2026 01:43:21 +0000
Files and hashes:         1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: tmxis/Uuj1o9FME96HcRWHiOCOHZTngGsSgtQ2jLXyA=)
                          2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: cQz3TR/+5c1VYu+gIoGJsXNAEX+DdjGoQ42CKEKOrwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl
                          rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
        Validity
            Not Before: May 21 01:43:21 2026 GMT
            Not After : May 28 01:43:21 2026 GMT
        Subject: CN=6a0e6339-8a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:d5:43:b3:20:1f:8f:97:4c:6f:80:43:94:
                    c0:a2:5b:8c:e4:e7:75:4c:f1:56:0b:cb:e7:4c:e8:
                    58:89:d0:3e:34:93:e2:53:b3:e3:00:d3:30:ec:d5:
                    8f:fc:50:9c:6b:63:72:c4:35:fc:7b:83:45:ce:0f:
                    35:45:9a:a3:ce:31:20:f7:83:b9:f6:17:55:5a:a0:
                    25:47:6f:48:08:23:4e:ec:35:3b:1c:3e:3f:d3:47:
                    a8:de:14:69:e8:d6:49:a2:24:99:da:71:0d:ab:8c:
                    12:1d:dd:0d:2a:f9:22:5d:d9:ac:10:bc:fe:36:e2:
                    1e:dd:85:33:40:a8:3a:c9:1d:d7:5f:26:e3:7a:8d:
                    1d:fc:12:ab:79:3a:ca:92:d3:a9:c5:21:c2:f4:e9:
                    8e:f0:11:60:1c:a2:50:20:02:bc:71:7f:d1:02:a1:
                    e0:54:ac:6e:61:e0:ef:0b:1b:75:2c:83:15:37:d7:
                    84:02:cd:bb:2f:86:98:8d:98:32:bf:e7:3e:f9:94:
                    4d:d2:70:74:e5:62:4d:d1:dd:ac:22:c0:d2:40:f1:
                    c5:81:dd:fd:32:41:3b:8b:a5:ff:b2:41:43:f4:23:
                    8d:f6:d8:a7:f9:89:60:7e:9e:2c:5b:dd:d0:43:67:
                    ba:b2:a9:4c:1f:27:c0:5c:49:9c:6d:c0:99:43:79:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6C:CB:F9:78:AC:DA:3F:70:4D:12:FC:5D:FE:1C:BF:BD:62:AB:6D
            X509v3 Authority Key Identifier:
                keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:2c:30:7a:7b:61:8f:60:2d:04:7b:24:02:9f:ba:b2:85:
         8e:90:79:16:25:b9:21:dc:82:04:72:2e:c9:d9:4c:0a:d3:e7:
         b0:a4:13:9d:5d:15:46:2e:07:a7:96:b4:10:92:0f:94:41:33:
         d2:bf:8d:94:e8:1d:35:76:d7:d7:09:a1:99:95:15:59:97:f1:
         ce:50:fe:36:36:62:43:37:96:01:c6:0f:a0:47:fc:5f:69:3a:
         7b:7f:02:21:98:58:91:ac:1f:e7:7a:70:01:2b:08:dd:49:57:
         86:7f:c1:5e:61:0e:27:2a:2f:79:25:ea:03:ef:9b:0e:52:c5:
         dc:7a:26:81:8a:b4:74:50:31:ea:29:b6:80:82:30:68:b8:ba:
         67:2d:e5:70:4a:de:e4:c4:e3:45:6d:76:26:8a:ce:a4:99:0d:
         a3:d9:d5:28:1c:8f:e0:5e:9b:b2:12:96:1e:2f:18:1c:c2:8b:
         f2:1e:c0:45:25:d1:dc:58:cc:1b:52:4b:83:c6:9c:46:a0:d9:
         43:7c:43:43:16:dd:94:f2:04:5d:a1:7d:00:87:4d:07:48:45:
         0c:6f:38:6e:f3:66:91:1b:99:ae:83:b7:18:00:81:c6:3a:e2:
         12:87:57:51:c4:01:9d:7a:84:80:61:f4:c5:10:a9:60:d0:85:
         99:9d:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:04 2026 by rpki-client