Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          9iKHCE6tvpJ1fODa5B92+MjS4o79RxmFJAXpaexCdTo=
Subject key identifier:   FE:F4:58:1F:49:54:47:56:03:AC:66:7F:9D:26:B7:38:48:40:CF:07
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          0121
Signing time:             Sat 23 Aug 2025 05:06:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:06:30 +0000
Manifest next update:     Sat 30 Aug 2025 05:06:30 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: oIhgk4wh2IlGz9bTgNqpi2zUG2+1Cj8k5H2d1ABXbLk=)
                          2: 750BDF94F14111EFB9ABEC6EC4F9AE02.roa (hash: tGgXIpGEi95/mHMqGxL/bJi/SqHukJyeasiHeM6qZF8=)
                          3: 60DB1468F14111EFBAE4B56EC4F9AE02.roa (hash: Ay+00/HQxdmLhwQx5Ze/XtFrqy8RlBXyrP5SS2vFl/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Aug 23 05:06:30 2025 GMT
            Not After : Aug 30 05:06:30 2025 GMT
        Subject: CN=68a94c56-4d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:b0:dc:f5:c7:61:d2:e8:16:6a:26:c9:11:
                    3e:6e:f3:40:d6:3c:71:e3:cd:13:c4:77:1d:cf:76:
                    a2:42:30:6e:59:5a:14:60:4b:fc:f0:1d:e2:31:f5:
                    68:09:cd:7e:40:40:84:79:44:69:75:15:e7:91:28:
                    23:f4:49:d2:a4:4c:74:66:13:34:50:f9:c6:99:66:
                    19:91:75:5d:4d:15:09:8d:57:e9:f2:ac:36:f1:66:
                    06:21:59:a5:1a:f3:5a:09:8e:c0:c9:49:c0:73:5f:
                    65:10:02:0c:f4:1d:1f:64:83:cf:df:f3:a2:13:ee:
                    c1:d3:1e:8f:2c:9c:74:fd:c3:22:69:c2:d5:91:8d:
                    8d:00:60:03:dc:ab:b4:75:64:7d:2b:b0:bf:b9:69:
                    8c:ae:8d:1e:e9:7a:84:7a:53:95:02:ca:0d:21:ca:
                    0a:0e:6b:ca:2b:77:5e:89:41:7f:de:19:6b:e8:4b:
                    f7:9b:ef:ed:6b:98:e9:86:d9:75:ca:49:ff:07:3e:
                    08:4c:92:0f:d9:33:97:74:c1:03:da:42:7d:7c:f5:
                    18:36:5f:c0:23:28:39:90:71:87:f9:7a:f1:15:c1:
                    4d:24:2f:3d:14:52:5f:36:ef:4b:9d:34:e0:37:a0:
                    76:35:b6:93:65:65:67:45:3a:ae:d3:0e:dd:5e:4a:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:58:1F:49:54:47:56:03:AC:66:7F:9D:26:B7:38:48:40:CF:07
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:96:69:44:24:5a:d8:60:72:ac:0b:3a:31:78:88:23:a2:
         7f:de:2f:a2:65:74:53:3f:b2:f3:d3:1e:9f:be:35:50:93:a6:
         67:3e:4b:ea:be:82:d2:45:21:32:de:16:a7:57:c0:61:7d:c4:
         82:e0:0d:1f:f8:a8:9c:04:33:25:0f:e3:33:62:63:f2:10:cc:
         8d:11:b6:67:da:88:3d:7a:20:a6:8a:dd:89:ed:99:53:5e:19:
         40:7f:25:2a:e3:62:1f:52:ca:36:4b:e4:19:d7:6b:1c:72:90:
         00:d2:4b:83:2c:f4:1d:03:b3:36:c1:43:e7:f0:0d:89:c3:f8:
         fb:0a:83:24:22:ca:3a:83:fa:be:dd:c0:c6:e9:9b:b8:b8:31:
         28:4d:70:dd:1a:80:40:39:69:93:72:35:3c:62:be:58:cc:f5:
         0a:ab:35:68:09:3a:e4:41:a7:0d:9e:7a:16:fb:bf:f9:29:ab:
         0e:0b:07:86:41:76:2c:75:c9:f7:d8:e4:b2:d7:55:d5:c3:f0:
         ba:4f:ba:e2:69:41:70:e9:07:14:54:b3:d8:60:d0:16:66:f2:
         a8:91:21:16:54:53:6f:be:7b:5e:50:a8:db:ee:40:6f:ab:be:
         c8:98:82:8e:e2:12:6b:66:8d:cb:dd:74:85:09:1b:eb:37:56:
         ff:29:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:35 2025 by rpki-client