Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          PdL0ZPso7tfwDg0AsFFNfh9sR2yS6LYqjXDxqeJriBk=
Subject key identifier:   27:24:EB:CD:EE:19:91:22:A7:7D:6B:E3:96:FC:54:94:B2:D5:A1:39
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          01F4
Signing time:             Tue 29 Sep 2026 04:00:10 +0000
Manifest this update:     Tue 29 Sep 2026 04:00:09 +0000
Manifest next update:     Tue 06 Oct 2026 04:00:09 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: tpGcQnsVmxAiBG2h5oEUFYxJVpp7asQS0nk6BRpgTr8=)
                          2: 229253A4A1F111F084328A39C4F9AE02.roa (hash: aK9ms8XFrER6p5FpbdAfuu9FASk86jIAEzY+JMQ1USM=)
                          3: 235D2836A1F111F084328A39C4F9AE02.roa (hash: E3Vh4QPukKhgUpPpZhB3O+U89F6/91Jfk8D+jDf2eYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
                          rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Sep 29 04:00:09 2026 GMT
            Not After : Oct  6 04:00:09 2026 GMT
        Subject: CN=6abb37ca-85c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:3b:01:2e:21:40:bf:b4:af:01:46:14:98:
                    50:ad:96:ec:ae:72:74:75:97:b2:65:a8:89:3e:99:
                    e3:53:62:54:04:f9:8c:fb:8d:74:19:3a:5b:b3:ee:
                    0e:20:62:f4:e4:a0:17:17:38:ca:dd:fa:09:a8:7c:
                    f8:7f:33:d5:74:bc:c9:d1:b3:2d:99:4d:ae:bd:c6:
                    e7:6d:9f:3e:70:96:05:38:72:d7:63:6c:ef:2d:2b:
                    44:73:80:59:bd:c5:24:e9:9c:56:c5:cf:4d:e0:97:
                    66:7d:cb:23:b3:da:0f:8d:94:00:e6:ae:1f:a0:45:
                    5d:9c:ca:68:43:cf:1b:91:e2:89:53:59:98:22:f0:
                    67:9c:97:bf:9d:c4:99:a4:11:92:18:bc:fd:1c:b2:
                    5e:03:fb:9d:5c:78:ff:af:1d:b2:4f:66:60:3c:a9:
                    d2:cd:8e:0e:6b:98:5f:7b:82:f6:6c:86:4d:ea:52:
                    ad:2e:ad:7d:9e:bd:ab:1f:1b:71:6c:83:13:90:f5:
                    03:70:b0:24:2e:db:8a:02:e5:80:2c:d0:9b:06:d6:
                    99:3a:d6:08:8a:42:3c:d9:64:37:13:1d:04:bf:1c:
                    ac:46:40:a6:30:d3:b9:4f:0e:f8:d4:c9:33:ef:c8:
                    ac:b3:8a:52:c4:71:e1:3e:6f:87:c0:2b:a8:a9:14:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:24:EB:CD:EE:19:91:22:A7:7D:6B:E3:96:FC:54:94:B2:D5:A1:39
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:77:42:74:0c:59:d0:48:88:e9:e8:94:a1:61:28:dc:f2:
         32:44:ef:ec:c9:6f:f0:05:ce:21:71:54:dd:d0:0e:ed:40:cc:
         89:5d:11:57:86:36:cf:40:c3:98:4c:4f:00:49:e5:ab:48:3f:
         ee:e8:cd:f8:2d:2f:a3:25:ce:5e:dc:e8:d4:8b:ad:71:be:bb:
         96:89:e8:d7:cb:2b:3a:21:93:82:0b:76:d7:5d:1d:f0:dc:f1:
         f3:57:f7:91:cb:75:38:fc:05:04:de:f1:98:8a:6f:d8:f7:e4:
         11:d5:2e:93:c4:32:7a:56:77:bb:59:88:62:b3:87:cf:78:e8:
         9f:e6:b3:ce:c6:00:26:d4:d9:9e:99:05:65:a2:aa:81:4f:40:
         f5:a3:a7:f2:e7:5d:86:d5:b4:06:14:ec:64:e5:d1:cc:40:74:
         76:1d:84:8b:2b:7f:ec:b3:6a:50:b3:1d:21:eb:a6:65:32:03:
         05:6f:16:28:07:f9:35:de:a5:0b:d5:88:af:aa:93:56:25:e4:
         f1:70:36:8f:cc:2a:79:c1:60:e6:5d:4e:3b:29:27:fe:bb:a6:
         8c:5b:45:ea:09:b0:16:67:cf:45:f5:f4:6b:ab:1b:8b:bc:89:
         90:7f:d3:70:72:57:50:a4:a9:b9:84:4e:9c:4c:3f:06:33:70:
         36:8f:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:43 2026 by rpki-client