Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/E5904D54FDCF11F08AFC50016C6F56BC/_EbpaVIczBTOWuON5rXGZAbp2go.mft
File:                     _EbpaVIczBTOWuON5rXGZAbp2go.mft (raw, json)
Hash identifier:          Fsj7oOaaLnRLFj8MeqAeacVsustv5QdeIPkr6dz26+s=
Subject key identifier:   37:6B:D2:EA:23:6E:CB:65:A6:02:57:70:42:E4:6C:55:3F:5C:CD:34
Authority key identifier: FC:46:E9:69:52:1C:CC:14:CE:5A:E3:8D:E6:B5:C6:64:06:E9:DA:0A
Certificate issuer:       /CN=A915A8C3/serialNumber=FC46E969521CCC14CE5AE38DE6B5C66406E9DA0A
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_EbpaVIczBTOWuON5rXGZAbp2go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/E5904D54FDCF11F08AFC50016C6F56BC/_EbpaVIczBTOWuON5rXGZAbp2go.mft
Manifest number:          20
Signing time:             Wed 25 Mar 2026 08:04:12 +0000
Manifest this update:     Wed 25 Mar 2026 08:04:12 +0000
Manifest next update:     Wed 01 Apr 2026 08:04:12 +0000
Files and hashes:         1: _EbpaVIczBTOWuON5rXGZAbp2go.crl (hash: k9mcfqEbqY5AyU8Q/trflR7iY/nf3+5R6ZG+0dAy1P4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/E5904D54FDCF11F08AFC50016C6F56BC/_EbpaVIczBTOWuON5rXGZAbp2go.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/E5904D54FDCF11F08AFC50016C6F56BC/_EbpaVIczBTOWuON5rXGZAbp2go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_EbpaVIczBTOWuON5rXGZAbp2go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=FC46E969521CCC14CE5AE38DE6B5C66406E9DA0A
        Validity
            Not Before: Mar 25 08:04:12 2026 GMT
            Not After : Apr  1 08:04:12 2026 GMT
        Subject: CN=69c396fc-d94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:8b:5f:79:c7:02:9d:0f:f0:64:d8:24:dd:
                    9e:69:07:b4:66:0c:62:c3:52:ab:d7:0f:56:4c:e8:
                    be:aa:0c:36:0a:66:6d:8b:51:e7:c8:86:81:8b:5d:
                    a2:34:40:94:c6:a7:25:3f:14:6a:e6:2e:3e:85:1c:
                    8e:9a:bb:b5:80:6c:74:3a:78:e2:f1:e6:80:d5:03:
                    4a:c1:62:86:c0:53:ed:51:20:95:9c:e4:74:e9:f4:
                    10:c0:ff:6d:f2:e6:f2:f7:21:6d:13:5e:a0:74:0f:
                    6f:0d:c3:67:27:6e:eb:69:35:82:47:db:a6:5e:a8:
                    cd:a1:40:9c:32:c0:cc:ba:59:f8:c4:d8:bc:b3:07:
                    2d:76:e4:f0:05:ca:09:c8:b9:38:9c:b7:74:82:67:
                    c5:1b:39:66:07:12:50:c3:03:04:27:6f:0b:b6:bf:
                    ef:74:a2:e5:2f:63:24:f8:f1:a6:6b:74:cf:63:3f:
                    2d:42:e7:75:13:5d:d3:19:a2:99:b0:a3:ce:5d:cc:
                    37:d0:ab:23:55:f6:68:50:bf:36:d7:36:bf:7d:44:
                    96:53:6b:d2:6b:19:35:cf:cb:92:7c:cc:b5:3a:9d:
                    8c:c2:53:16:ff:a2:76:bd:a0:1f:cb:50:0a:3c:71:
                    e7:65:ed:a5:ba:98:c3:bd:95:92:f6:7d:a3:00:fd:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:D2:EA:23:6E:CB:65:A6:02:57:70:42:E4:6C:55:3F:5C:CD:34
            X509v3 Authority Key Identifier:
                keyid:FC:46:E9:69:52:1C:CC:14:CE:5A:E3:8D:E6:B5:C6:64:06:E9:DA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/E5904D54FDCF11F08AFC50016C6F56BC/_EbpaVIczBTOWuON5rXGZAbp2go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_EbpaVIczBTOWuON5rXGZAbp2go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/E5904D54FDCF11F08AFC50016C6F56BC/_EbpaVIczBTOWuON5rXGZAbp2go.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:b9:a6:a7:7a:41:a8:a8:ec:9c:08:48:12:d9:83:60:06:
         0f:2e:06:85:7a:40:80:ea:b9:de:8f:24:fa:3d:73:38:bf:04:
         11:48:61:3e:63:af:af:40:5a:68:3c:f7:f5:43:3b:ae:e4:ee:
         18:5d:c9:90:21:7b:e8:3f:9a:41:9d:5e:18:8c:13:d2:0d:db:
         44:c7:c5:30:07:7d:60:a7:0d:0d:e9:d2:eb:8e:9d:f1:a8:e7:
         4e:ba:82:70:8c:14:34:16:ea:e3:e0:1e:81:e6:17:7a:3b:6d:
         5d:f9:fa:0b:b1:51:26:d9:49:26:d9:5d:4c:af:b0:84:8e:f2:
         1e:10:ce:fe:e7:73:2b:da:08:72:ca:b0:8d:c6:48:24:98:fb:
         47:d0:17:29:96:f6:1c:4b:c2:e0:c5:25:60:96:e9:65:b9:e9:
         4b:63:43:86:ca:1e:c3:53:56:c6:1c:ef:cc:ef:1d:14:90:b0:
         3d:67:d6:8f:87:24:59:c2:d4:41:69:d8:4e:be:67:3e:31:06:
         46:12:3c:9e:3b:4c:36:c2:52:29:da:51:af:13:cc:9f:6b:b9:
         db:24:31:e2:ae:58:22:bb:0f:4b:2b:55:31:17:20:77:4d:53:
         c6:a2:8c:60:6d:55:f0:5c:9e:cb:6b:2b:a9:32:13:6a:98:54:
         c9:31:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:28 2026 by rpki-client