Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          dYJhAza8iLfuh1Xof2ie4WRI9RA5zM2I9oMszp1dTkk=
Subject key identifier:   49:EE:2C:D5:72:FC:F4:BF:89:53:B0:8F:F1:B8:66:22:CC:FF:05:59
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          0149
Signing time:             Mon 03 Nov 2025 04:32:28 +0000
Manifest this update:     Mon 03 Nov 2025 04:32:27 +0000
Manifest next update:     Mon 10 Nov 2025 04:32:27 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: YBszfvM+c9mykcxsCfJK4b2Bvi+M4LZRs0iGTUVvEUA=)
                          2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: bnkVNhU6o5rwwfFx9zgMXEGJHB9u5Plk3LVxSdWMAa0=)
                          3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: S2OGi1wUST6aH/yqjhUOxU4wsu1S9AAnnNOgdjDA6+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Nov  3 04:32:27 2025 GMT
            Not After : Nov 10 04:32:27 2025 GMT
        Subject: CN=6908305b-d81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:41:3e:69:81:7f:2c:31:52:ef:1d:37:ae:
                    90:11:9d:8d:a8:91:e8:62:8a:92:d9:6c:27:da:b9:
                    06:87:6c:ab:64:f4:07:9f:09:0e:b7:4b:09:63:1f:
                    76:0d:d4:f2:b2:94:7a:84:78:40:26:45:cf:eb:a6:
                    8a:f0:4c:66:e7:a1:85:11:b1:98:60:5e:38:b2:0a:
                    61:fe:36:cc:30:08:5b:08:15:b6:15:aa:60:93:72:
                    32:db:41:87:21:3b:3f:89:15:a7:ac:2d:4b:fa:1e:
                    2c:7f:3d:89:84:e4:77:30:f3:79:04:e9:c2:3f:a9:
                    26:3a:cc:ae:fc:18:5c:85:d1:84:dc:5b:e1:80:61:
                    8d:5a:da:38:e7:8b:51:ad:d8:00:8f:d8:22:0e:27:
                    2a:99:c7:6f:66:fd:d4:3a:b1:70:79:cb:b3:e0:94:
                    b6:6c:80:5b:7d:c9:97:7a:2f:a9:22:de:71:6a:97:
                    26:8d:52:9a:53:4c:d6:30:cb:73:2d:a2:fd:80:bc:
                    d9:7c:07:e0:e3:73:10:9c:74:0e:00:79:75:1c:bd:
                    fd:54:0e:9e:ed:c2:6b:30:db:7f:21:71:14:20:7c:
                    35:74:dd:dd:2a:71:1b:f3:c1:f9:54:af:6b:7a:75:
                    8e:94:ed:ef:aa:48:88:4f:d7:94:8f:50:2b:ca:1e:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:2C:D5:72:FC:F4:BF:89:53:B0:8F:F1:B8:66:22:CC:FF:05:59
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:32:13:e4:55:51:17:ad:2b:72:e8:84:79:19:70:89:1f:
         ff:fe:0e:f5:ee:79:9a:3e:00:73:41:f7:c5:2d:d6:b3:78:5c:
         8f:87:16:bf:06:5e:a6:58:14:51:b3:b9:e0:11:1d:e5:0a:e9:
         51:42:65:f3:e4:1e:fe:89:af:6b:90:d5:4c:5f:d9:e7:38:8e:
         68:b0:a3:e4:b2:fd:a3:a6:89:85:cd:a3:68:3c:49:94:44:bb:
         8f:5c:6f:3e:7a:9a:05:50:c6:4d:96:9e:ad:78:04:a1:61:6c:
         28:e2:c3:5c:93:22:fb:af:c3:2b:01:ba:94:df:bb:0e:6f:78:
         68:82:f7:63:ff:02:75:75:cb:7b:8b:ed:54:6a:0a:c7:57:5b:
         a9:f2:b4:8a:ae:7d:d7:b7:15:b1:36:c5:7c:45:dd:fc:24:75:
         7e:4e:37:53:c5:b4:d9:a9:62:56:26:4e:9f:3f:10:c9:93:bf:
         7a:af:6d:a9:39:51:29:61:fe:48:64:80:9c:75:e9:1e:d3:66:
         f8:ad:43:8a:70:e5:1f:0a:00:e0:98:0c:58:cd:f9:fa:12:77:
         a6:88:3d:1d:bb:26:a4:b7:82:3f:a5:0d:53:5e:04:4b:86:b2:
         e9:a4:7d:a3:27:06:c9:b8:65:f8:05:71:27:2c:82:28:f8:5d:
         e4:87:e1:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD
NDM5REU5NzcwHhcNMjUxMTAzMDQzMjI3WhcNMjUxMTEwMDQzMjI3WjAYMRYwFAYD
VQQDEw02OTA4MzA1Yi1kODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnVBPmmBfywxUu8dN66QEZ2NqJHoYoqS2Wwn2rkGh2yrZPQHnwkOt0sJYx92
DdTyspR6hHhAJkXP66aK8Exm56GFEbGYYF44sgph/jbMMAhbCBW2Fapgk3Iy20GH
ITs/iRWnrC1L+h4sfz2JhOR3MPN5BOnCP6kmOsyu/BhchdGE3FvhgGGNWto454tR
rdgAj9giDicqmcdvZv3UOrFwecuz4JS2bIBbfcmXei+pIt5xapcmjVKaU0zWMMtz
LaL9gLzZfAfg43MQnHQOAHl1HL39VA6e7cJrMNt/IXEUIHw1dN3dKnEb88H5VK9r
enWOlO3vqkiIT9eUj1Aryh7T3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnuLNVy
/PS/iVOwj/G4ZiLM/wVZMB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0
RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk0OS8zRjI0MkFDMkU0RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExv
d1ZadXpNS2hJYmJFT2Q2WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBi7TIT5FVRF60rcuiEeRlwiR///g717nmaPgBzQffFLdazeFyPhxa/
Bl6mWBRRs7ngER3lCulRQmXz5B7+ia9rkNVMX9nnOI5osKPksv2jpomFzaNoPEmU
RLuPXG8+epoFUMZNlp6teAShYWwo4sNckyL7r8MrAbqU37sOb3hogvdj/wJ1dct7
i+1UagrHV1up8rSKrn3XtxWxNsV8Rd38JHV+TjdTxbTZqWJWJk6fPxDJk796r22p
OVEpYf5IZICcdeke02b4rUOKcOUfCgDgmAxYzfn6EnemiD0duyakt4I/pQ1TXgRL
hrLppH2jJwbJuGX4BXEnLIIo+F3kh+Hr
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:59 2025 by rpki-client