Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json)
Hash identifier:          NVXus1FRErFYwIkMFsLUdnVSLtBjXAiSXBJOoN1S+4c=
Subject key identifier:   24:EF:73:1D:29:B4:E3:9D:78:12:A9:7F:F0:AC:6E:D8:E4:5C:B7:D9
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Certificate issuer:       /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial:       1FBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
Manifest number:          1FA1
Signing time:             Thu 26 Mar 2026 15:59:14 +0000
Manifest this update:     Thu 26 Mar 2026 15:59:14 +0000
Manifest next update:     Thu 02 Apr 2026 15:59:14 +0000
Files and hashes:         1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: MnEoQcrr9K7fSiNTDP18O4836iZQ6glo1LYy89/dIPg=)
                          2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: omf80M/Stw6ccHt4cKJMjnGFUkPouv2sNZ6+vJQc1Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl
                          rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8122 (0x1fba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9196, serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Validity
            Not Before: Mar 26 15:59:14 2026 GMT
            Not After : Apr  2 15:59:14 2026 GMT
        Subject: CN=69c557d2-9c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:6d:ce:80:50:57:e1:94:51:df:c2:7f:65:
                    6b:d9:e8:f7:15:89:cb:d6:3c:f9:72:2a:33:49:45:
                    b1:f2:4a:57:4e:6c:7f:d9:90:61:a9:e8:23:f0:a9:
                    85:72:71:54:f7:7c:6e:ee:fc:e3:67:83:77:5c:11:
                    7c:d5:61:5e:cf:dc:d9:21:24:10:15:f4:47:22:8f:
                    fa:b3:b6:8a:0e:b2:ee:2c:e5:1e:a0:d6:2d:0a:f6:
                    ae:0e:5d:29:26:46:19:96:64:a8:e7:1d:32:ad:3c:
                    46:98:fb:9c:df:74:7b:a3:0e:d0:0f:0c:10:b8:aa:
                    4b:bd:7d:06:39:78:9e:25:dd:ed:f8:31:d3:c9:9f:
                    03:43:2e:72:09:fe:99:5d:27:31:72:0a:71:ca:d1:
                    bb:12:8d:ee:e7:b0:1f:66:c3:e6:be:fe:bd:cc:6b:
                    0a:24:85:07:85:e7:39:97:3f:66:11:e3:eb:af:f3:
                    3c:66:77:73:1c:62:7e:28:0e:96:46:65:a7:16:6d:
                    52:81:1a:82:46:02:19:72:7e:fb:03:bd:c8:e3:fc:
                    7e:91:b0:1a:7c:0c:1c:7d:94:42:77:e8:79:e8:7b:
                    6e:9c:be:04:92:d3:2b:75:59:1b:3c:39:d8:50:c7:
                    e8:ad:9a:14:38:e3:71:8b:4a:a6:86:23:22:a6:30:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EF:73:1D:29:B4:E3:9D:78:12:A9:7F:F0:AC:6E:D8:E4:5C:B7:D9
            X509v3 Authority Key Identifier:
                keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e9:aa:11:9c:4a:e2:95:f3:d9:b7:9c:73:b8:fa:97:b1:ca:
         74:98:b0:09:f3:4a:e6:d0:19:fd:09:24:0f:60:aa:e9:97:b3:
         af:f5:e3:50:98:85:6c:af:55:46:ce:86:2e:07:eb:33:a1:17:
         04:9b:8b:5b:61:f1:ad:b1:97:f6:4a:45:b7:a5:b9:bc:c0:27:
         37:18:be:1c:88:2d:34:1d:4e:32:ea:f9:98:d9:ec:dd:52:e8:
         30:8f:f0:3f:ad:53:ed:35:c0:88:7b:93:eb:10:e4:c1:d0:b3:
         2c:b0:86:ea:62:14:26:8b:0d:f5:6b:fc:d2:3f:34:79:70:f8:
         51:2d:60:60:00:f1:b1:e3:4c:9b:1b:01:fc:8d:ee:a6:b4:97:
         30:7e:96:25:be:46:b5:ab:82:13:00:a3:fb:43:aa:ec:48:57:
         19:df:c6:c4:02:f8:96:4f:a0:92:75:7c:af:7c:cc:ae:42:f2:
         71:3a:88:d6:a6:88:57:35:bb:fe:f7:93:a7:2e:a2:47:95:e4:
         8e:4d:b2:58:14:4a:05:3e:05:f5:5d:53:5d:55:67:e9:cf:cb:
         c7:3e:b3:63:46:7d:a3:09:4c:1c:3d:10:30:c5:1d:56:c8:1a:
         de:54:09:71:bb:e8:a9:b7:1c:c0:07:62:87:f7:06:a9:2b:71:
         38:a4:d4:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkxOTYxMTAvBgNVBAUTKDEyODZDRTZFNzQ3MkY5REU4REYyQTU2RDhGREExNDQ5
Q0E3M0VEREMwHhcNMjYwMzI2MTU1OTE0WhcNMjYwNDAyMTU1OTE0WjAYMRYwFAYD
VQQDEw02OWM1NTdkMi05YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp91tzoBQV+GUUd/Cf2Vr2ej3FYnL1jz5ciozSUWx8kpXTmx/2ZBhqegj8KmF
cnFU93xu7vzjZ4N3XBF81WFez9zZISQQFfRHIo/6s7aKDrLuLOUeoNYtCvauDl0p
JkYZlmSo5x0yrTxGmPuc33R7ow7QDwwQuKpLvX0GOXieJd3t+DHTyZ8DQy5yCf6Z
XScxcgpxytG7Eo3u57AfZsPmvv69zGsKJIUHhec5lz9mEePrr/M8ZndzHGJ+KA6W
RmWnFm1SgRqCRgIZcn77A73I4/x+kbAafAwcfZRCd+h56HtunL4EktMrdVkbPDnY
UMforZoUOONxi0qmhiMipjBw1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTvcx0p
tOOdeBKpf/CsbtjkXLfZMB8GA1UdIwQYMBaAFBKGzm50cvnejfKlbY/aFEnKc+3c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE5Ni80MzhGNUQ5NjVB
MUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1kNk44cVZ0ajlvVVNjcHo3
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VvYk9iblJ5LWQ2TjhxVnRqOW9VU2Nwejdkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTE5Ni80MzhGNUQ5NjVBMUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1k
Nk44cVZ0ajlvVVNjcHo3ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO+mqEZxK4pXz2becc7j6l7HKdJiwCfNK5tAZ/QkkD2Cq6Zezr/XjUJiFbK9V
Rs6GLgfrM6EXBJuLW2HxrbGX9kpFt6W5vMAnNxi+HIgtNB1OMur5mNns3VLoMI/w
P61T7TXAiHuT6xDkwdCzLLCG6mIUJosN9Wv80j80eXD4US1gYADxseNMmxsB/I3u
prSXMH6WJb5GtauCEwCj+0Oq7EhXGd/GxAL4lk+gknV8r3zMrkLycTqI1qaIVzW7
/veTpy6iR5Xkjk2yWBRKBT4F9V1TXVVn6c/Lxz6zY0Z9owlMHD0QMMUdVsga3lQJ
cbvoqbccwAdih/cGqStxOKTUYA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:06 2026 by rpki-client