Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File:                     EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier:          u6DNOvCNuWJtxUc873CZQqtjr4KCgfU9csFLVG0whd8=
Subject key identifier:   E4:70:E9:52:BF:E8:E8:82:25:86:3D:78:F4:5A:49:CE:D5:AB:BD:18
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number:          0173
Signing time:             Fri 22 Aug 2025 15:29:24 +0000
Manifest this update:     Fri 22 Aug 2025 15:29:23 +0000
Manifest next update:     Fri 29 Aug 2025 15:29:23 +0000
Files and hashes:         1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: OkPkQndka1mc03HcDnemduNkIGwMZjgWsvEhepHEhVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Aug 22 15:29:23 2025 GMT
            Not After : Aug 29 15:29:23 2025 GMT
        Subject: CN=68a88cd4-f229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:0c:e8:24:9a:d5:fa:bb:70:58:41:ef:b4:
                    50:2f:08:41:fa:7d:84:08:5a:51:b9:65:e4:a9:94:
                    ae:7e:d8:b1:cd:29:b6:46:63:90:71:7f:07:d8:f8:
                    7b:21:2f:e0:e0:0d:40:c0:5a:7b:09:e3:a3:ea:0f:
                    ba:40:f1:92:04:16:57:dd:26:93:11:7e:7e:d3:ba:
                    51:25:20:5e:ab:83:04:5e:ec:72:8d:6a:27:40:02:
                    c5:7d:3a:2a:b2:36:7c:e2:21:57:66:d3:c1:a5:61:
                    8c:a4:4a:c2:a9:57:9f:6e:d4:a7:d9:ce:da:f0:3a:
                    f3:fa:05:a4:10:c5:3f:bc:a1:a6:61:09:5e:61:03:
                    fe:0a:54:80:43:b2:e8:ce:93:36:3f:bd:30:c1:0e:
                    7b:62:7b:da:ec:50:58:0f:9b:13:63:e5:0c:b7:e7:
                    09:8d:81:b3:f0:e5:0a:3b:6f:66:9a:af:0c:db:07:
                    68:62:3a:8e:2f:5d:f2:3a:e1:55:ec:10:6b:b2:7f:
                    06:95:c7:78:f7:ea:93:ed:83:a7:b5:b2:57:a0:f5:
                    90:13:28:f2:32:bb:d3:f4:7c:1d:5d:f3:9d:78:10:
                    06:30:50:9c:01:b0:7d:5e:a9:5b:72:3d:25:3c:2e:
                    a6:b9:45:49:69:3f:dd:d2:ab:4a:ec:31:f9:5b:72:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:70:E9:52:BF:E8:E8:82:25:86:3D:78:F4:5A:49:CE:D5:AB:BD:18
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:bb:b3:ff:65:19:82:33:89:a0:a4:6a:76:b4:b1:93:3b:
         cb:46:2e:a9:87:64:e1:12:a6:6d:d6:5f:78:1f:25:e1:0f:95:
         16:22:50:fe:6f:4d:06:80:32:9d:bf:eb:f2:3f:f8:dc:69:f1:
         e1:07:44:ad:e7:5b:a9:e3:7a:a6:07:a6:eb:16:49:d6:16:5f:
         93:7e:86:ab:e2:76:11:71:ba:fd:f8:e6:c4:a9:66:ab:75:91:
         2b:b1:e5:8c:d5:d7:78:33:eb:34:43:ca:86:e4:46:48:fb:c0:
         c0:d3:88:2e:78:f7:6a:50:58:bb:b6:ca:b1:a6:f7:b7:30:f1:
         e3:11:31:af:5f:86:a9:71:91:28:3d:34:5f:c8:8e:9a:e6:6e:
         95:f1:6c:da:ce:da:74:c8:57:4d:2e:c6:61:82:5b:23:43:d4:
         bd:7d:26:76:4e:a2:93:12:8f:6d:49:28:c4:33:92:14:60:f8:
         14:67:d7:dd:7d:d3:2e:7f:72:f0:ff:1b:eb:11:71:f6:7d:d9:
         65:15:f8:38:5f:66:48:83:ef:de:d7:31:49:cc:1a:f6:0f:50:
         8e:7f:2f:11:56:f1:3e:55:3d:49:ef:83:99:ac:09:6e:35:e6:
         70:2d:46:3e:6b:4b:d8:c0:ce:21:97:18:98:5f:62:bb:2c:df:
         25:7e:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:33 2025 by rpki-client