Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
File:                     EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json)
Hash identifier:          q0W4FdhgX1rIV2zMnxvCTh6LRcDGHWVPLw03eHnXciE=
Subject key identifier:   CB:DA:0E:EB:C1:52:A2:48:57:DC:C1:2F:CC:3B:CC:70:45:06:BB:25
Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B
Certificate issuer:       /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
Certificate serial:       0288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
Manifest number:          027E
Signing time:             Wed 25 Mar 2026 01:21:22 +0000
Manifest this update:     Wed 25 Mar 2026 01:21:21 +0000
Manifest next update:     Wed 01 Apr 2026 01:21:21 +0000
Files and hashes:         1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: nceuGfZYHUEft1xGcppBswYGcxjYgJb7+7+kvJqrfYE=)
                          2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: cQz3TR/+5c1VYu+gIoGJsXNAEX+DdjGoQ42CKEKOrwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl
                          rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
        Validity
            Not Before: Mar 25 01:21:21 2026 GMT
            Not After : Apr  1 01:21:21 2026 GMT
        Subject: CN=69c33891-53f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:b9:8d:75:83:ea:ef:0e:90:8c:0e:15:3b:
                    1d:75:5f:a9:88:07:3c:69:51:08:69:a0:61:7e:3c:
                    30:dc:20:9c:01:21:cf:7a:48:44:32:95:9c:f0:98:
                    b9:a2:f8:93:28:7a:c0:a3:fb:38:12:f0:ab:52:00:
                    fd:52:64:5a:b7:a3:64:06:33:1e:30:6a:ad:7d:52:
                    b1:ab:03:41:f6:d8:fe:e9:97:62:78:c2:1c:82:70:
                    10:ff:bd:b9:c2:2c:b2:c8:4b:81:cb:a4:1c:c5:6e:
                    16:6c:ee:6e:64:db:1b:7d:29:9b:c5:c4:a0:81:2e:
                    21:dc:a9:19:6f:5f:29:b3:2b:c4:9b:88:75:bd:65:
                    7d:2b:00:ea:b7:23:11:d9:58:3d:83:9f:4b:bd:08:
                    af:98:32:9b:8d:b4:90:df:b1:44:51:3d:d2:96:54:
                    a1:60:49:8f:06:df:28:fa:e7:06:0f:2d:2b:d4:1c:
                    8f:b9:59:72:ba:d6:7f:0a:5b:01:54:c4:b9:6f:5e:
                    f6:e6:cc:d3:56:c5:73:e9:bb:30:bd:5b:d3:f2:10:
                    8b:78:5b:ae:f1:2d:dd:41:53:af:80:59:b1:ad:01:
                    9c:9d:24:8e:71:77:fd:78:67:37:fb:07:ab:1e:cb:
                    ff:86:d0:09:c8:78:a5:17:96:1e:1b:2b:90:2f:3e:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DA:0E:EB:C1:52:A2:48:57:DC:C1:2F:CC:3B:CC:70:45:06:BB:25
            X509v3 Authority Key Identifier:
                keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:19:1a:a2:42:89:5f:07:f6:2e:53:7f:07:d7:5d:d6:59:
         ad:87:95:78:a1:58:a3:18:6c:7a:19:0f:bf:f7:8a:21:56:b2:
         01:b8:e5:9d:61:8d:15:23:9c:fb:ba:f8:f3:94:1c:5e:bb:86:
         79:e4:90:74:49:ae:26:0f:83:6b:a0:c2:5c:ff:f4:a4:22:2c:
         29:8b:0a:43:55:7b:0e:85:55:c3:0c:d7:80:df:bc:b0:dc:0f:
         ea:93:6e:e5:61:89:d0:3e:e3:d3:5a:27:0f:c7:75:a3:43:21:
         67:74:7b:ca:92:68:ed:84:1d:97:87:ec:5d:fe:a9:25:a0:2f:
         55:82:f1:b9:8c:34:73:62:6a:73:fa:63:1f:55:7a:32:d1:4e:
         a6:8a:52:b5:1d:a0:d1:17:b0:17:0f:d1:8c:e4:5b:34:09:10:
         ca:12:05:65:27:a0:2b:f9:57:e8:3b:25:0b:04:ce:7a:46:c4:
         0f:64:d9:33:aa:91:d2:d7:f7:9c:bd:02:25:90:3e:60:35:db:
         e2:d3:95:a5:c0:ef:fd:90:f0:88:05:1e:00:c8:b0:ff:b2:b4:
         7e:2b:3a:db:40:df:fb:c8:a3:bf:99:2a:f0:54:75:9b:f1:4c:
         d4:ee:d0:d5:1c:b8:e9:d5:a9:77:5d:22:9b:a7:5a:e1:79:05:
         ad:f5:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:00 2026 by rpki-client