Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
File:                     eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json)
Hash identifier:          nIwWY5gMZTdtSTMnXrYEsRORla4jIkg7ZtlyEAv+/T8=
Subject key identifier:   49:E5:2E:B3:C1:CB:95:8D:97:0D:90:66:12:E2:C2:DB:57:0B:AE:66
Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32
Certificate issuer:       /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
Manifest number:          03B6
Signing time:             Sat 23 Aug 2025 00:57:20 +0000
Manifest this update:     Sat 23 Aug 2025 00:57:20 +0000
Manifest next update:     Sat 30 Aug 2025 00:57:20 +0000
Files and hashes:         1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: F7Hui+ojJ9CMZAsajQLX4PXbdTqrC8aRfbS0cA6L0nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl
                          rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
        Validity
            Not Before: Aug 23 00:57:20 2025 GMT
            Not After : Aug 30 00:57:20 2025 GMT
        Subject: CN=68a911f0-5cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:9a:ee:44:d4:75:42:70:45:ac:53:f3:1c:
                    be:ea:da:26:98:57:f5:81:06:44:a9:79:c1:71:79:
                    27:98:b8:58:09:5e:3f:a9:aa:4a:a9:e4:66:27:2c:
                    ff:95:a2:7f:df:7d:37:5b:16:c5:9d:78:92:06:76:
                    71:66:64:1e:2f:67:b7:1f:d4:d1:eb:a8:70:ef:42:
                    0d:89:10:7d:1f:38:43:84:52:55:1b:50:66:e9:e2:
                    71:c8:8b:b1:ba:16:0c:8b:ea:3e:d0:dd:fc:56:c9:
                    6f:b6:80:54:79:90:73:26:08:99:97:53:15:15:4c:
                    d0:5e:86:0f:46:39:28:fb:6e:e9:b0:fa:fe:ec:08:
                    39:2e:fe:b6:37:3e:af:30:5c:e5:43:82:3f:a7:4d:
                    8a:87:2b:f8:c6:a8:43:f1:e5:c0:95:a8:65:bd:96:
                    1d:1a:cc:84:dd:a4:1e:a7:6d:36:9a:d1:ab:c9:d8:
                    b1:01:fd:f3:89:6b:e1:6b:a5:8e:1a:90:e8:bf:df:
                    9b:db:40:c7:8f:a3:b1:bb:a3:63:92:49:c6:13:cc:
                    ff:ec:72:c3:75:7b:46:0b:91:bf:e3:32:1d:ed:89:
                    d5:0a:dc:2c:81:50:5a:9c:21:ee:49:61:e9:e0:b1:
                    d5:a5:bf:76:1b:95:cb:68:21:bb:a8:69:3c:50:26:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:2E:B3:C1:CB:95:8D:97:0D:90:66:12:E2:C2:DB:57:0B:AE:66
            X509v3 Authority Key Identifier:
                keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:49:38:a7:ef:9e:9a:14:f2:29:42:5c:c2:f0:76:a9:3a:46:
         92:0d:b2:e8:46:d8:03:be:73:61:25:fe:97:eb:cd:f7:0b:62:
         28:d9:3f:be:c4:40:74:5d:1e:56:21:69:ee:69:eb:10:e5:85:
         1a:3b:78:e5:8d:26:e6:2e:77:fd:9d:a5:42:1c:16:43:a7:ac:
         0d:49:0e:74:d0:e6:8f:36:40:27:35:4f:3f:50:e3:dc:b9:6b:
         1b:f1:16:9e:0b:15:41:0a:4d:c5:3e:48:a6:97:be:ce:58:8e:
         c3:6c:22:94:d3:f2:39:ca:ce:65:d8:5b:36:46:b9:00:ee:a9:
         e8:da:dd:ad:7e:09:b9:ab:42:cd:45:6b:60:e7:b1:a5:94:05:
         07:ce:c2:20:b9:e5:a2:b4:75:43:c6:bd:4d:13:10:9a:24:94:
         08:61:c9:31:1b:26:d9:82:c6:70:21:95:61:02:85:ea:9a:77:
         e5:82:13:d4:1e:f1:ed:87:fb:ea:1b:69:1c:fb:20:3b:a3:99:
         08:44:dc:22:68:79:4d:f2:c0:62:77:75:1f:69:6a:ff:b2:db:
         3e:65:11:5c:3b:34:7f:ed:6a:a5:63:80:32:43:9a:e4:35:2d:
         4d:07:d8:20:ce:58:59:a4:eb:2e:bb:11:a1:bc:b0:a2:31:46:
         95:80:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:32 2025 by rpki-client