Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          Z/XpdqrjrIyedU0OuRsWS2dnGFjmSlYY58wAmed8g38=
Subject key identifier:   B7:1E:58:D9:15:3D:E9:A1:97:B6:17:E7:D5:BA:5B:44:54:22:20:4D
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          0106
Signing time:             Tue 01 Jul 2025 05:47:23 +0000
Manifest this update:     Tue 01 Jul 2025 05:47:23 +0000
Manifest next update:     Tue 08 Jul 2025 05:47:23 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: u2URXJttB6G7wU8FdOkUO+GPAbfVTSAqZ04Kj5LuKFM=)
                          2: 750BDF94F14111EFB9ABEC6EC4F9AE02.roa (hash: tGgXIpGEi95/mHMqGxL/bJi/SqHukJyeasiHeM6qZF8=)
                          3: 60DB1468F14111EFBAE4B56EC4F9AE02.roa (hash: Ay+00/HQxdmLhwQx5Ze/XtFrqy8RlBXyrP5SS2vFl/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Jul  1 05:47:23 2025 GMT
            Not After : Jul  8 05:47:23 2025 GMT
        Subject: CN=6863766b-4f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:42:8f:fb:11:17:48:98:7f:93:89:e9:ca:
                    b6:bf:8d:a9:fc:c6:74:64:97:5a:b1:73:b8:f8:55:
                    0f:6b:28:54:f6:c7:5a:55:ac:cf:b6:2d:a7:77:df:
                    67:bc:dc:9f:d3:28:ac:d7:92:5b:3b:08:7b:f6:31:
                    93:36:f6:2f:d7:40:18:1c:10:21:26:da:50:69:b1:
                    bf:e7:47:ab:c4:dc:3f:3e:3d:9d:7f:82:83:70:4e:
                    37:a1:94:d0:73:67:97:7e:6d:a4:cf:cb:e9:25:6f:
                    67:e4:6d:50:c6:20:f1:c3:32:10:04:1f:63:0b:7e:
                    75:73:60:ee:7d:03:f9:c1:0f:fd:95:b0:58:b1:a0:
                    c1:25:78:99:dc:ed:63:10:83:7a:ed:84:2d:e3:af:
                    66:b4:08:7b:f9:bf:ea:96:99:f0:1e:d7:70:71:78:
                    db:d0:22:d1:6e:af:b1:5a:c0:ea:df:40:31:b4:45:
                    1f:e3:43:64:e6:fd:29:35:26:d4:80:9d:46:8e:11:
                    38:78:4a:9f:7b:d7:a3:7e:70:66:19:1d:47:df:2f:
                    fc:62:2b:e0:96:03:51:d2:e2:69:b1:47:9d:d5:95:
                    40:75:e9:3f:8a:f4:61:c2:55:4e:9d:22:bf:56:af:
                    70:c5:6d:3b:94:a8:0d:b3:53:ed:4d:02:b2:ba:62:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1E:58:D9:15:3D:E9:A1:97:B6:17:E7:D5:BA:5B:44:54:22:20:4D
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:b6:3d:05:12:e3:20:e2:dd:31:bc:50:1a:6b:1e:d8:b7:
         38:55:20:b4:db:14:2d:6c:fc:a4:fb:fd:fc:24:d2:33:3a:83:
         8d:21:74:bc:78:e8:f4:b0:ce:6c:20:d8:26:2a:de:c6:44:f7:
         e3:97:3e:90:39:c3:a4:24:db:cf:16:61:cd:75:98:0e:e3:de:
         fc:96:56:7b:36:a4:78:e6:09:9f:77:e5:34:09:9c:4a:da:2c:
         4d:be:a1:6f:83:fe:b7:0b:83:bd:4a:b3:d7:f2:96:63:60:e4:
         89:60:c2:7d:16:63:37:b8:42:0f:5a:59:91:d7:6c:a7:e0:4e:
         cc:b8:31:aa:8e:de:c5:fc:2b:a0:70:1d:eb:ff:9a:f3:f3:ba:
         8c:23:38:49:ba:e7:66:9b:ac:11:66:3a:f7:3c:54:6a:47:5d:
         17:c2:3b:6c:89:f8:34:32:81:88:1b:2b:75:6a:e0:be:53:8d:
         19:1e:12:52:db:7b:fc:1c:34:fc:25:5e:69:93:13:c0:1d:0d:
         7a:21:36:d4:0a:87:c9:e8:a2:10:3a:3e:27:d9:3b:cd:b1:23:
         3f:10:c7:57:c3:21:8c:44:d0:82:5d:c0:4a:ec:e3:15:b7:5f:
         c0:9d:43:db:de:6e:5c:5c:5e:71:1c:8f:e4:c6:42:2a:e4:34:
         0a:ae:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:35:44 2025 by rpki-client