Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          DGky661rrIy+9oUZengSCvSzdJqZkUabfmJp8GDEkxc=
Subject key identifier:   34:59:F9:A6:35:C4:14:0D:6A:F8:63:8F:D2:73:8D:5A:A4:38:96:29
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          0185
Signing time:             Sun 01 Mar 2026 05:45:04 +0000
Manifest this update:     Sun 01 Mar 2026 05:45:04 +0000
Manifest next update:     Sun 08 Mar 2026 05:45:04 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: 0L+rRhMQjlwBlKycr/Rh/Ql5Z1kUGn/lpVph1luHyN0=)
                          2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: bnkVNhU6o5rwwfFx9zgMXEGJHB9u5Plk3LVxSdWMAa0=)
                          3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: S2OGi1wUST6aH/yqjhUOxU4wsu1S9AAnnNOgdjDA6+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Mar  1 05:45:04 2026 GMT
            Not After : Mar  8 05:45:04 2026 GMT
        Subject: CN=69a3d260-5eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:33:46:1d:7a:1a:51:8d:98:ab:de:cd:fe:
                    6b:3d:1b:40:67:7e:75:ef:a4:06:07:14:19:87:7b:
                    66:87:c7:ea:98:67:0b:d4:69:5c:2b:6e:3a:94:3f:
                    f3:2d:10:40:9e:73:59:7a:60:0d:0e:f4:c9:86:cd:
                    89:98:08:af:9e:63:49:02:5d:be:fd:8d:a8:7f:51:
                    18:b6:c9:34:c9:7e:b8:ab:9a:e8:1c:b5:49:a2:0c:
                    af:01:01:c5:b8:0b:94:8f:1b:4b:ed:e8:f2:f2:04:
                    f4:d3:a4:72:78:93:35:10:3f:2d:56:98:6e:22:4a:
                    f1:b2:a2:66:96:aa:a0:72:65:9a:00:d8:38:85:e8:
                    60:ee:04:ad:40:2a:dd:2b:2e:ed:92:a0:ed:29:b1:
                    01:97:82:bf:2e:b9:e2:9c:23:5d:7c:64:ce:47:d9:
                    77:f0:5e:49:89:36:ed:0e:63:62:81:19:d1:1b:cc:
                    67:ed:b1:4a:92:24:7b:72:e4:e5:56:28:4c:d2:0f:
                    79:b2:5a:88:f1:54:ea:57:05:a6:9d:d9:a0:f0:af:
                    fd:fd:34:46:de:fb:97:b3:f7:54:ea:0b:0c:57:ef:
                    9d:b5:14:19:6c:50:dc:30:ba:66:0f:da:31:c0:52:
                    35:ab:e2:78:d5:7e:46:59:d2:b4:7e:56:6b:37:50:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:F9:A6:35:C4:14:0D:6A:F8:63:8F:D2:73:8D:5A:A4:38:96:29
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:87:d5:f9:86:a5:7e:9a:eb:fb:2f:7d:a3:7e:de:07:24:24:
         fd:21:76:4e:6d:ce:3c:71:73:91:da:28:56:55:29:25:dd:26:
         10:d2:de:03:fd:56:1a:4e:d8:70:c1:04:9c:1f:ed:5a:87:e2:
         d7:4a:cb:41:88:f9:3e:ac:7f:fa:2d:14:ab:4e:d2:d2:24:68:
         09:85:21:e1:87:17:01:57:dc:87:4c:98:9d:ca:ae:94:04:23:
         35:f2:2d:94:42:55:bc:36:56:24:c8:12:20:31:91:74:3c:20:
         c3:2f:d4:2f:04:0a:1e:b6:e8:5f:ad:94:9d:0a:85:b6:3c:4a:
         98:9c:d0:3a:e0:6a:27:86:19:75:e0:c7:bc:17:ea:3b:1c:26:
         f1:a4:2b:70:55:a7:7c:ac:7c:08:ac:62:4e:97:a0:6b:90:c8:
         15:a8:18:39:02:fd:09:99:fa:d1:19:22:eb:6e:38:98:98:e1:
         33:38:be:e5:06:18:ec:f6:d9:66:38:e6:6f:31:e6:21:b6:9e:
         c5:9d:6a:25:3a:1d:17:70:07:b2:26:0e:3e:50:d9:53:f4:5e:
         ff:64:f0:c1:39:a6:a6:5a:65:b6:02:4c:75:1e:8a:77:0c:f1:
         6b:e8:66:10:e3:2a:b3:b5:02:48:c5:fa:57:29:b8:db:bc:01:
         4f:36:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:15 2026 by rpki-client