Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          DBazWnpjVaKUHjXO/fwLGasT/Vq3/ca2eDrJJIRIw4A=
Subject key identifier:   5B:95:A7:9F:A8:24:3A:CC:B6:9B:C8:F0:E5:A6:FD:EB:3C:D4:B4:32
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          E3
Signing time:             Fri 25 Apr 2025 04:42:35 +0000
Manifest this update:     Fri 25 Apr 2025 04:42:34 +0000
Manifest next update:     Fri 02 May 2025 04:42:34 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: z/ZM0UqDEID+LuD8SUoMvDskuFMR+dniHOWHUy+0wrk=)
                          2: 750BDF94F14111EFB9ABEC6EC4F9AE02.roa (hash: Ig/QRAVruy4f2kUpZ4g974WHPx8HQRa1QFvGfHjUpHw=)
                          3: 60DB1468F14111EFBAE4B56EC4F9AE02.roa (hash: NREYxWRAJjlz9TdRv2pTjw5YQyLAHJ5ZhQiLb5p1n3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Apr 25 04:42:34 2025 GMT
            Not After : May  2 04:42:34 2025 GMT
        Subject: CN=680b12ba-dbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:64:95:24:c8:69:24:54:a7:99:7c:d3:bf:
                    99:0e:f1:47:7a:dc:23:c3:14:05:31:6f:e1:b3:54:
                    19:61:a9:d8:05:fc:61:ed:61:f3:96:71:9d:56:67:
                    24:5f:22:93:41:1b:50:d5:a7:76:47:0a:47:76:02:
                    35:a6:7d:05:09:7d:f1:ca:5b:21:50:9f:88:68:82:
                    54:02:75:2d:0f:6a:78:dc:b9:91:1c:ee:8d:e2:ee:
                    db:45:db:cb:e7:81:ca:ca:8c:c9:7f:c6:92:6e:d5:
                    f0:96:09:20:ef:19:1f:1e:82:ce:9c:50:a2:99:96:
                    64:3e:ca:d6:29:a0:50:53:d9:b9:b8:f5:0a:23:20:
                    f4:b4:f4:32:40:f9:19:c4:32:6a:01:0c:15:50:ef:
                    43:c2:f1:f6:5f:7a:97:8f:02:28:dd:91:8d:45:bd:
                    3a:52:ea:f0:8a:27:26:c6:f1:29:56:ca:56:d1:33:
                    73:b9:58:d3:1f:87:7f:90:9c:43:7e:71:e6:7f:e5:
                    9d:fb:f9:8c:bb:77:f1:46:fa:31:44:09:fc:e4:cf:
                    2d:02:d6:d1:13:f8:ec:3d:7a:b6:9a:47:eb:f2:59:
                    6b:aa:5b:9c:a9:96:fb:ac:a5:4a:ed:df:0c:72:77:
                    e9:b2:ce:83:c6:9d:f0:0d:8d:95:59:76:df:7f:92:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:A7:9F:A8:24:3A:CC:B6:9B:C8:F0:E5:A6:FD:EB:3C:D4:B4:32
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:ef:d4:0c:0e:5a:24:0e:36:9e:ed:b7:b1:13:9a:84:21:
         29:12:f1:92:26:4f:25:7e:5d:b8:70:33:cb:a6:48:59:9a:79:
         f8:c3:d8:d4:e7:c2:28:c2:51:46:b5:7e:0b:c3:8e:e0:00:29:
         c1:3d:44:80:ca:4d:28:21:14:a0:d0:db:33:71:4d:fa:61:60:
         54:3a:8a:6c:5c:fa:af:d9:2c:00:d4:c6:4a:d4:db:4f:c3:41:
         2c:cd:f5:56:05:de:61:49:d9:ed:9c:30:51:13:6c:0d:cf:08:
         ca:1a:a0:76:45:0a:2f:99:f4:5a:06:ef:a8:a8:f7:ed:6c:01:
         b7:e3:f8:c6:3f:d0:91:99:ee:46:be:c7:38:0c:4d:36:39:47:
         58:d9:f3:6f:29:eb:03:19:a2:8e:8c:56:7d:2f:a8:47:a9:e2:
         10:74:5e:e4:ae:9b:2f:fb:24:e0:f8:bf:65:d5:fd:55:17:8d:
         d4:ac:9b:ae:6e:5c:8f:8a:9a:53:d8:44:99:18:74:f5:bd:42:
         b6:96:19:a0:6b:eb:87:f1:2b:38:61:4d:42:4e:4b:b8:fd:91:
         60:7c:74:1f:73:66:cb:ad:ae:1b:08:90:28:dc:54:b0:74:a9:
         d4:90:b0:1b:5b:65:49:d9:87:e6:02:0c:34:3a:0a:dd:8f:2f:
         05:94:81:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD
NDM5REU5NzcwHhcNMjUwNDI1MDQ0MjM0WhcNMjUwNTAyMDQ0MjM0WjAYMRYwFAYD
VQQDEw02ODBiMTJiYS1kYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UFklSTIaSRUp5l807+ZDvFHetwjwxQFMW/hs1QZYanYBfxh7WHzlnGdVmck
XyKTQRtQ1ad2RwpHdgI1pn0FCX3xylshUJ+IaIJUAnUtD2p43LmRHO6N4u7bRdvL
54HKyozJf8aSbtXwlgkg7xkfHoLOnFCimZZkPsrWKaBQU9m5uPUKIyD0tPQyQPkZ
xDJqAQwVUO9DwvH2X3qXjwIo3ZGNRb06UurwiicmxvEpVspW0TNzuVjTH4d/kJxD
fnHmf+Wd+/mMu3fxRvoxRAn85M8tAtbRE/jsPXq2mkfr8llrqlucqZb7rKVK7d8M
cnfpss6Dxp3wDY2VWXbff5JQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuVp5+o
JDrMtpvI8OWm/es81LQyMB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0
RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk0OS8zRjI0MkFDMkU0RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExv
d1ZadXpNS2hJYmJFT2Q2WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnbO/UDA5aJA42nu23sROahCEpEvGSJk8lfl24cDPLpkhZmnn4w9jU
58IowlFGtX4Lw47gACnBPUSAyk0oIRSg0NszcU36YWBUOopsXPqv2SwA1MZK1NtP
w0EszfVWBd5hSdntnDBRE2wNzwjKGqB2RQovmfRaBu+oqPftbAG34/jGP9CRme5G
vsc4DE02OUdY2fNvKesDGaKOjFZ9L6hHqeIQdF7krpsv+yTg+L9l1f1VF43UrJuu
blyPippT2ESZGHT1vUK2lhmga+uH8Ss4YU1CTku4/ZFgfHQfc2bLra4bCJAo3FSw
dKnUkLAbW2VJ2YfmAgw0Ogrdjy8FlIFV
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:20 2025 by rpki-client