Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
File:                     EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json)
Hash identifier:          jtV0iY37QjPFgcRREvueol080VJufraduzD/bpCI2NA=
Subject key identifier:   D9:B1:EA:35:7B:19:55:1D:EF:68:35:11:32:8C:A0:BD:C1:46:DA:04
Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B
Certificate issuer:       /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
Certificate serial:       02E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
Manifest number:          02DB
Signing time:             Fri 25 Sep 2026 01:10:13 +0000
Manifest this update:     Fri 25 Sep 2026 01:10:12 +0000
Manifest next update:     Fri 02 Oct 2026 01:10:12 +0000
Files and hashes:         1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: 2+Dhl4KZWXL++gXBOCSVJ+HRAqFqzjqShA5Crs1czgQ=)
                          2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: cQz3TR/+5c1VYu+gIoGJsXNAEX+DdjGoQ42CKEKOrwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl
                          rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
        Validity
            Not Before: Sep 25 01:10:12 2026 GMT
            Not After : Oct  2 01:10:12 2026 GMT
        Subject: CN=6ab5c9f4-4abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:0e:92:97:79:bb:bd:0c:23:97:3a:81:20:
                    8c:0a:aa:a6:6c:84:34:bd:13:1c:01:4a:d6:a6:c9:
                    77:5e:5a:68:22:12:4f:04:eb:57:ce:7d:34:c5:b3:
                    d1:b6:ee:be:cc:b9:dc:c6:a0:39:82:76:16:b6:08:
                    36:e4:07:66:dd:c5:76:dd:45:21:3b:2e:5c:23:d0:
                    ed:aa:95:9e:97:12:33:7d:f8:0d:52:fc:42:c1:91:
                    a1:5d:76:99:d8:b3:f6:15:9f:dc:a2:8c:d3:d9:ad:
                    7c:99:43:03:99:2f:a5:be:89:2c:8d:a9:81:87:2b:
                    92:6e:da:8a:1d:d3:6e:60:66:39:42:44:af:60:7c:
                    59:fc:71:9c:ee:9b:df:a3:2c:b8:5f:ad:a7:3b:96:
                    63:26:fc:92:2e:f7:2a:7b:ed:fa:60:db:5f:3a:aa:
                    24:31:40:85:98:20:75:6c:d2:0c:12:4f:73:4a:fb:
                    63:76:34:38:16:a9:7f:da:0c:5e:41:dd:60:62:e5:
                    b5:33:68:38:70:80:fc:18:4d:26:c2:53:85:55:16:
                    39:05:11:00:83:83:78:34:85:01:e1:b8:2d:7f:45:
                    1d:54:67:38:87:5b:e3:f8:cf:b7:5d:62:95:71:c4:
                    4c:00:1e:79:78:a0:da:c5:46:1d:62:39:ee:58:fa:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B1:EA:35:7B:19:55:1D:EF:68:35:11:32:8C:A0:BD:C1:46:DA:04
            X509v3 Authority Key Identifier:
                keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d2:9f:3b:3f:7e:78:4d:1f:58:e0:3e:f6:75:99:dd:f1:fc:
         70:b8:71:6b:10:ff:bf:d2:47:9b:fb:57:60:a6:b0:74:30:13:
         6b:59:f8:14:f4:d4:61:12:c7:48:25:52:2b:dd:18:45:1f:32:
         b9:86:68:12:6b:03:89:69:ea:ef:65:1c:b1:cb:ff:89:00:37:
         16:7e:2e:b2:e1:f1:a2:63:63:a2:6a:7f:cb:ef:d5:87:15:2b:
         dd:9e:f3:0b:18:ad:43:39:57:47:ef:e6:19:01:df:53:b3:b9:
         13:5e:2c:e6:da:d6:90:ff:4b:27:c5:0e:af:8c:15:53:6a:a7:
         a7:4a:49:ab:80:01:7c:f5:48:58:e3:cf:4b:bd:37:ca:03:bb:
         ce:57:58:83:c1:95:5d:e5:8f:e5:f7:15:7d:50:37:5d:83:6e:
         25:d4:c0:82:57:d8:3f:04:f4:b8:84:81:cd:28:3b:dc:dc:c7:
         e9:0e:45:86:87:f7:cd:55:85:ad:0d:19:e8:53:91:83:10:af:
         38:de:d6:4d:fd:40:07:0b:69:ea:45:cd:f7:e1:ae:ec:ee:b3:
         7c:46:ba:2f:74:e8:81:2f:a0:11:6e:9f:9c:45:a9:28:b6:37:
         c6:18:60:bd:4e:94:48:ac:84:4c:08:c6:b7:83:5d:54:7b:ac:
         70:a1:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:00:06 2026 by rpki-client