Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
File:                     eNHeHdP-GGK__ued6u14itywCwc.mft (raw, json)
Hash identifier:          FsnIQQpCrQMPHqHrxcHvu5Ff1hrs5qib27poUrXzttc=
Subject key identifier:   D8:1D:89:D9:B7:6B:1C:CD:66:16:AE:01:3B:C6:00:38:56:38:71:FC
Authority key identifier: 78:D1:DE:1D:D3:FE:18:62:BF:FE:E7:9D:EA:ED:78:8A:DC:B0:0B:07
Certificate issuer:       /CN=A91811D8/serialNumber=78D1DE1DD3FE1862BFFEE79DEAED788ADCB00B07
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
Manifest number:          22
Signing time:             Sun 05 Apr 2026 08:13:06 +0000
Manifest this update:     Sun 05 Apr 2026 08:13:06 +0000
Manifest next update:     Sun 12 Apr 2026 08:13:06 +0000
Files and hashes:         1: eNHeHdP-GGK__ued6u14itywCwc.crl (hash: LHpd9YmNLplDksUGqojn4qw+pW2prP0BG5Tw47F9Z0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.crl
                          rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91811D8, serialNumber=78D1DE1DD3FE1862BFFEE79DEAED788ADCB00B07
        Validity
            Not Before: Apr  5 08:13:06 2026 GMT
            Not After : Apr 12 08:13:06 2026 GMT
        Subject: CN=69d21992-96ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:57:f2:9c:5c:ab:30:d0:6c:fd:04:38:8d:
                    e0:0f:65:6d:eb:eb:62:8f:7c:ce:07:e0:b0:10:a2:
                    22:80:e2:2e:97:c0:42:dd:1b:3b:29:dc:e3:05:31:
                    91:29:30:46:aa:39:d8:a2:0e:35:e5:fa:07:02:16:
                    5c:e0:bb:0e:1c:5f:90:89:fb:e4:93:f2:c1:e9:eb:
                    2d:d0:3e:e1:3c:2f:22:36:d8:39:d4:11:91:2f:e8:
                    a5:15:47:19:98:1b:83:20:7c:17:4c:46:79:b6:6b:
                    97:41:18:77:ac:5d:04:a9:68:c8:93:61:6d:bf:6b:
                    6c:30:6a:71:49:2c:35:06:84:91:dc:07:a3:1e:6a:
                    da:7e:ce:31:b3:de:52:7a:cd:40:4a:e7:06:55:d3:
                    bd:c6:5e:8d:84:6b:13:d3:3a:75:19:39:ef:5e:29:
                    d0:cf:43:8d:e6:de:5d:1a:4e:02:73:67:8f:d9:a4:
                    a4:a8:3a:09:4b:9e:22:b0:d9:bf:cc:1a:22:1b:16:
                    49:8c:e9:05:63:45:8a:26:b9:82:f1:2c:07:b0:7c:
                    6c:78:4c:ac:84:a8:8a:25:db:41:11:71:37:99:73:
                    ad:13:8a:26:35:f8:63:dc:dd:2f:02:f3:85:68:b0:
                    d8:09:6c:68:59:5b:3e:8d:e3:22:89:7c:89:44:28:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:89:D9:B7:6B:1C:CD:66:16:AE:01:3B:C6:00:38:56:38:71:FC
            X509v3 Authority Key Identifier:
                keyid:78:D1:DE:1D:D3:FE:18:62:BF:FE:E7:9D:EA:ED:78:8A:DC:B0:0B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:e5:d9:54:fd:e2:14:a6:b2:5d:e0:2e:b1:db:74:84:26:
         b8:c5:76:d8:f9:91:a0:62:99:d7:49:56:45:08:50:6f:d1:98:
         f5:5d:4c:ad:01:f9:05:f6:15:85:a3:10:65:7e:43:5a:82:2a:
         74:9c:cc:a5:3f:34:67:53:c0:68:59:c5:92:ab:38:28:64:fc:
         d3:3e:0e:eb:80:cc:e7:99:a5:f4:cb:63:79:8c:7f:96:a1:bc:
         de:a3:82:ab:38:f6:f4:ec:b8:6c:a1:7c:68:dc:20:95:38:5c:
         81:ea:50:aa:11:4d:ef:83:b1:f6:b6:d8:b5:cc:2c:7c:ec:78:
         8f:a5:16:19:ab:56:80:1d:d6:4a:7c:0a:3c:f5:ef:84:1e:9b:
         dc:2c:d4:cd:df:d6:70:c1:c6:c1:c1:53:b6:ae:40:31:6e:f1:
         d1:e3:1a:0f:99:85:0b:ac:90:36:d5:83:ad:1d:a5:d3:f6:b4:
         f0:68:b9:5a:45:e3:4c:ab:f9:ae:1b:d3:83:96:98:46:7a:92:
         0e:6b:2c:d5:d6:a7:9a:a9:72:4d:43:a6:80:47:81:17:aa:01:
         4c:97:3e:72:aa:db:e2:c0:3e:78:5f:c4:ad:a0:00:5f:07:79:
         47:28:7b:f4:64:b7:2b:31:22:bc:35:a7:e9:87:21:f3:8b:2f:
         56:fd:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:02 2026 by rpki-client