Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File:                     EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier:          VH2UBkilh6wJ4+87LXBS1yijgZ1FHwwENdgVWYgloSc=
Subject key identifier:   00:AA:E5:9D:9F:03:86:0D:1A:47:41:C6:FC:C4:CD:39:F4:46:A3:45
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number:          01E2
Signing time:             Tue 24 Mar 2026 15:23:51 +0000
Manifest this update:     Tue 24 Mar 2026 15:23:50 +0000
Manifest next update:     Tue 31 Mar 2026 15:23:50 +0000
Files and hashes:         1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: J2tSg6FiPXscaLFmAEmtYuNSU54gbyhUpTSWE37IkN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Mar 24 15:23:50 2026 GMT
            Not After : Mar 31 15:23:50 2026 GMT
        Subject: CN=69c2ac87-105f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:24:f3:61:e1:79:ea:8b:f9:83:f0:c4:8f:
                    71:84:ba:95:cc:4e:4e:8e:d5:16:1f:4d:69:16:a2:
                    56:09:79:d6:e4:31:9f:e0:c8:b1:20:f5:06:90:8a:
                    e0:32:ff:f7:c2:2e:6e:53:b0:55:a8:05:3e:d9:04:
                    12:30:d7:32:74:1b:59:18:98:19:d7:6a:de:ee:b5:
                    0b:67:af:06:59:95:db:01:74:73:e1:df:84:f1:9b:
                    97:4c:ee:db:25:eb:d6:85:ed:04:ac:09:ca:06:49:
                    74:93:f4:37:ad:45:79:1d:27:7a:1d:7f:49:8c:82:
                    1f:da:bc:63:9e:7f:32:eb:f0:ad:f5:89:98:7b:e7:
                    9c:fb:b5:42:80:ea:cd:6a:5e:29:41:99:19:fd:1f:
                    97:df:f3:97:e4:62:a0:4f:d8:48:58:54:0c:cd:61:
                    9d:b3:c4:4b:c7:fd:00:a4:a3:c5:65:ec:86:ac:8d:
                    04:bd:ba:93:3a:ee:bf:18:2d:cd:db:38:86:6f:57:
                    a3:b9:bf:58:4e:41:e1:80:42:e3:bb:81:84:36:c5:
                    6d:35:47:a8:49:cf:57:8a:ae:c5:15:27:37:d0:2e:
                    d6:db:ca:0f:1f:60:66:9a:6f:67:45:82:2b:42:a6:
                    27:c3:74:7e:7d:d9:2d:58:66:e5:e9:7a:5a:c7:e4:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:E5:9D:9F:03:86:0D:1A:47:41:C6:FC:C4:CD:39:F4:46:A3:45
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:52:eb:33:1b:42:dc:7e:4d:b3:1a:bd:de:c1:00:11:98:
         36:c0:ba:8e:4f:f2:0b:3b:a1:db:2a:f4:fb:21:6e:b2:08:da:
         0d:eb:07:59:16:87:6f:55:b4:9c:3a:3d:20:b4:6e:8d:bc:f1:
         18:47:1b:39:10:76:7a:ed:e9:2b:c3:69:c6:9a:81:ec:5b:0d:
         49:bf:78:f5:16:2b:5b:af:d2:01:65:02:f8:6b:0f:21:f3:b2:
         c6:eb:86:59:d9:6f:cd:74:98:4a:14:68:69:82:a3:33:08:09:
         e1:cb:2e:97:d1:83:31:17:32:b5:a3:5b:fe:1e:b9:d5:68:57:
         58:ed:6a:da:91:a2:de:f0:29:73:03:f0:4a:e8:f8:fc:cb:34:
         2d:cf:8e:36:9d:f6:e5:88:0e:c6:8b:2b:4a:b9:b7:92:2e:76:
         4a:41:be:7e:e4:2e:cf:9b:33:c6:2a:fc:0d:71:9a:d1:c9:82:
         26:48:c2:d6:9f:4d:fe:bc:58:8a:6d:dc:73:65:76:44:3e:b6:
         6a:50:42:43:38:ab:67:1e:ab:f9:24:9a:16:20:c5:8d:c0:76:
         56:a8:5e:08:0f:90:d7:65:64:e4:77:9a:40:2b:6d:44:65:b9:
         73:7e:ad:11:14:2b:89:88:39:c2:98:ac:b6:4c:dc:9e:84:5e:
         54:9c:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:17 2026 by rpki-client