Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
File:                     EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json)
Hash identifier:          nJAU9WcU7TeOmlcVKhRsNqJQP7sWzkFhZ8VF/C7RRQs=
Subject key identifier:   E1:B2:06:4D:91:E8:EF:86:10:0C:65:8A:86:73:5E:C8:07:5B:43:1D
Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B
Certificate issuer:       /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
Manifest number:          0202
Signing time:             Tue 05 Aug 2025 02:47:59 +0000
Manifest this update:     Tue 05 Aug 2025 02:47:59 +0000
Manifest next update:     Tue 12 Aug 2025 02:47:59 +0000
Files and hashes:         1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: 7k7pR6bYlt7NkAeshgecdMCWEdEPUZh4FgOL6S/iphU=)
                          2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: QbSn5YRTWG7olUrItxapoYIPCE3hPl44mhf7s2FPRaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl
                          rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
        Validity
            Not Before: Aug  5 02:47:59 2025 GMT
            Not After : Aug 12 02:47:59 2025 GMT
        Subject: CN=689170df-eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:c6:ea:1d:0c:56:86:6e:55:15:a4:34:b5:
                    49:50:45:db:89:e5:b6:f0:32:f9:74:35:f1:81:4b:
                    8b:ac:a6:3c:8c:5e:23:b2:63:f3:7b:ae:c7:f8:bb:
                    b9:ce:7f:1c:f9:45:dd:ac:64:93:6f:5e:59:dc:87:
                    ee:ff:5b:e6:6f:0b:3e:83:31:5a:8e:eb:45:14:e3:
                    74:25:0a:f9:cb:44:29:48:57:1b:d8:f2:96:f5:d9:
                    71:15:90:bb:9c:3b:cf:b7:58:b7:c3:d3:be:e2:12:
                    7f:64:38:c1:a5:70:a6:1b:30:2f:6c:ea:5a:2f:19:
                    9d:ed:67:1e:b6:6e:db:8c:24:0b:3d:86:8b:5d:3e:
                    a2:a4:50:08:8f:80:75:66:82:d0:8a:c4:12:37:ce:
                    de:ff:9f:c7:03:d5:3a:f9:24:c6:1e:0d:88:9f:d7:
                    1b:68:69:ff:ec:a8:fe:a9:13:0c:20:62:e6:69:f6:
                    ff:2a:be:8b:dc:d3:3f:da:d0:6e:a5:55:79:08:a5:
                    f3:cd:3a:34:ad:2b:18:aa:eb:8a:de:c2:0b:3e:88:
                    1b:72:1b:e5:74:07:43:c5:09:f4:e4:b1:c7:2d:b7:
                    49:4b:f4:3f:d9:78:64:41:7c:c5:ee:d1:7d:ef:2e:
                    93:f4:e1:35:c1:75:0b:6f:cf:0a:c9:f2:4c:04:71:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B2:06:4D:91:E8:EF:86:10:0C:65:8A:86:73:5E:C8:07:5B:43:1D
            X509v3 Authority Key Identifier:
                keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:c2:7f:ad:c8:5e:24:37:06:ad:1c:fa:14:32:8e:a2:b1:
         40:fb:91:60:92:96:70:be:17:c6:ca:df:fb:7e:4c:3f:4a:b3:
         dd:63:16:8a:97:e3:40:69:22:db:45:8f:c7:4e:73:df:2d:57:
         46:cb:f2:35:c7:ed:9b:7e:08:1d:0c:2d:3a:c0:ba:9f:d9:98:
         9c:ad:09:04:2f:10:46:39:e3:eb:fb:fb:f2:ad:6f:bb:b1:c0:
         48:ea:69:8c:27:2e:9d:a2:94:72:54:a7:ee:f6:d5:c5:3d:50:
         9c:51:bf:e1:60:86:13:cd:20:f8:27:51:93:e2:58:b7:a6:de:
         a6:a5:46:be:f6:e1:43:13:8d:38:b2:59:73:39:46:d1:d4:43:
         70:32:04:cb:b8:09:49:fb:bc:a8:f9:f9:3f:3e:78:03:40:a2:
         3f:a8:4b:c6:89:24:9c:b4:e7:95:d6:47:27:b2:6d:38:ac:17:
         ce:0d:ef:5f:96:e7:7a:ca:33:e0:06:6a:25:f7:57:17:ce:17:
         2e:73:01:89:13:74:b9:47:ed:f5:32:27:c7:51:42:ea:1c:a5:
         11:88:e1:a1:9c:64:ad:ee:82:c2:a9:f4:0a:3d:e2:c5:d4:50:
         b1:76:b0:04:ca:63:c0:0e:b0:39:e7:06:38:35:8b:12:b0:d0:
         29:d9:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:44 2025 by rpki-client