Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          UnN5EekqtCgEUVSxabml3LBzmxxjbgHmwFUkOcA647k=
Subject key identifier:   77:3C:B9:A4:1A:84:49:DD:79:8C:29:89:AA:13:5D:EF:F3:1F:09:09
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          0142
Signing time:             Sun 19 Oct 2025 07:26:54 +0000
Manifest this update:     Sun 19 Oct 2025 07:26:54 +0000
Manifest next update:     Sun 26 Oct 2025 07:26:54 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: znJCQZQ6Xt88L8kilKNtF2Z8LvH5lL/Y5LqtTEDaDs4=)
                          2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: bnkVNhU6o5rwwfFx9zgMXEGJHB9u5Plk3LVxSdWMAa0=)
                          3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: S2OGi1wUST6aH/yqjhUOxU4wsu1S9AAnnNOgdjDA6+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Oct 19 07:26:54 2025 GMT
            Not After : Oct 26 07:26:54 2025 GMT
        Subject: CN=68f492be-3d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e2:8c:e2:8b:ae:f3:9c:65:36:92:aa:87:78:
                    45:e7:13:0a:fc:93:a2:ad:f8:a9:37:df:a2:bb:d7:
                    05:88:15:03:2d:94:4e:89:b1:87:9c:7e:45:9c:2d:
                    e2:88:62:4e:bd:46:c1:de:30:cd:c9:6b:7f:da:b5:
                    f9:d7:ff:36:8b:c0:b0:03:6e:b6:ca:2e:34:b1:19:
                    d4:fb:d3:8c:65:71:c6:11:08:d9:35:8d:f9:7a:14:
                    0d:f2:23:ed:5a:b2:96:15:70:3c:2b:f6:11:2b:e6:
                    ae:85:b0:bc:44:e5:46:5c:07:c9:cd:7a:ac:47:28:
                    27:2e:6f:19:d5:35:49:34:05:85:94:12:c5:30:f0:
                    01:3d:fe:5d:b3:90:cc:be:0b:b8:dd:c9:0c:65:45:
                    e7:50:3f:62:f9:5b:88:da:6d:8d:f2:9c:82:23:ca:
                    a5:00:94:e6:13:47:04:80:fd:77:eb:52:30:87:95:
                    f3:ed:e0:cf:88:10:25:a7:96:a9:43:bc:26:e5:fa:
                    1f:a4:43:e4:6c:b0:f5:8b:ed:bb:02:57:19:5a:e5:
                    d9:03:6c:ff:95:6f:7a:65:d2:f8:9c:79:b2:49:2a:
                    0d:5c:77:5d:7c:29:c2:da:87:31:16:98:8c:8b:f1:
                    d1:d4:5b:24:53:d9:41:e4:f9:11:49:09:ce:2f:26:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:B9:A4:1A:84:49:DD:79:8C:29:89:AA:13:5D:EF:F3:1F:09:09
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:f9:ff:57:59:6c:12:9c:17:95:1d:dd:b1:c2:ef:39:ff:
         dc:db:d7:97:58:03:e7:6d:52:9c:92:78:12:46:e1:10:b3:ac:
         03:6c:02:be:1f:27:d2:a9:dd:ef:c5:15:2d:d9:01:87:41:26:
         6b:fc:54:5a:19:62:52:bd:d4:8f:2b:b6:44:39:87:8e:35:fb:
         da:49:7d:37:d2:67:2b:ce:30:b8:e3:99:5e:06:51:d0:57:30:
         db:f7:b9:7f:eb:71:5a:e5:2e:1c:d4:fe:14:3f:34:c3:22:a1:
         ea:1e:d9:70:11:37:55:e0:78:23:cd:44:ab:1a:99:6f:34:26:
         c3:06:ab:24:14:3e:06:4f:5f:ed:a7:f2:2d:24:b1:b0:6e:80:
         5f:45:23:9a:35:98:23:df:49:93:ac:73:16:e8:68:c2:30:ca:
         0c:f5:42:bf:97:87:b7:2d:ba:ae:32:74:95:56:af:b5:c7:3b:
         3f:1c:ab:2b:60:8f:62:65:c3:8f:7e:c7:47:92:7a:6b:a9:cb:
         e5:a9:32:d4:65:00:bf:33:c2:e4:c6:37:9e:3e:3d:c8:84:33:
         c9:0b:8d:50:82:aa:89:c3:37:57:d4:86:79:15:85:46:ea:3e:
         27:a8:26:4f:51:96:56:ea:4c:df:51:7c:ad:1f:7c:f9:93:a7:
         46:33:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:11 2025 by rpki-client