Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File:                     EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier:          5WJNwDRyv3BgMHscsFkhY9mIjaFGBjA8pxqyRS8d63Y=
Subject key identifier:   0F:1C:C5:84:EE:FA:18:7F:F0:41:65:78:90:45:A8:B9:BF:66:B3:E3
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       01EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number:          01EF
Signing time:             Sat 18 Apr 2026 15:23:51 +0000
Manifest this update:     Sat 18 Apr 2026 15:23:51 +0000
Manifest next update:     Sat 25 Apr 2026 15:23:51 +0000
Files and hashes:         1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: G9gIteTNHuuefqoD/02udzugR5LUBtjR+scel6Y7pXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Apr 18 15:23:51 2026 GMT
            Not After : Apr 25 15:23:51 2026 GMT
        Subject: CN=69e3a207-c380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:9f:fc:ad:c0:0e:00:a2:cf:0e:b8:ce:ed:
                    dd:b5:18:e2:ee:f5:06:31:af:b4:7a:2c:6f:01:e5:
                    50:25:50:29:b3:2b:43:e2:7d:66:1f:4f:c4:f6:d5:
                    3f:24:7c:4c:6b:f5:80:db:4a:28:87:a9:ad:66:14:
                    47:ca:05:5f:e0:3e:65:ca:8e:c7:45:fa:78:2e:0f:
                    c9:94:53:71:72:6b:d2:32:2f:a8:c7:c0:bd:51:f4:
                    cc:43:a4:8a:ed:96:13:f5:28:29:e8:14:75:a4:96:
                    d4:7b:c2:5c:06:3a:33:c9:7b:03:cd:51:89:db:78:
                    8f:98:e3:65:a7:9e:90:0b:74:3b:db:5d:72:bf:0b:
                    5b:32:50:e4:be:1f:bc:cb:b4:04:99:4b:ec:58:97:
                    93:fb:8e:c3:90:ce:29:d5:65:ef:be:ff:a2:88:44:
                    30:57:0e:93:3f:9b:a0:e1:04:49:ff:84:6f:69:e9:
                    29:92:8e:b1:bd:c9:ea:7b:46:e5:00:f6:6c:4f:46:
                    9e:93:a8:e1:93:0a:7b:fb:94:23:ee:d9:e7:12:e5:
                    bb:3c:6f:3e:39:19:be:31:84:fa:80:e4:f7:1f:95:
                    79:e8:d8:1d:18:aa:3d:d4:98:fb:f1:f8:d4:d1:f0:
                    c0:63:1c:ea:3b:14:64:a7:5e:19:5c:ed:59:24:bb:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1C:C5:84:EE:FA:18:7F:F0:41:65:78:90:45:A8:B9:BF:66:B3:E3
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:0a:e4:6e:80:a7:4d:a4:17:3f:35:4e:8e:16:d7:d2:6d:
         c3:50:fa:d6:3a:6b:b3:8f:0c:0e:a6:f9:12:7e:70:01:f7:d4:
         77:f1:29:50:32:b3:20:be:8d:61:9d:91:25:af:10:7c:37:5a:
         6f:8e:61:90:bb:07:30:06:aa:bc:d3:4a:8c:38:3b:f8:71:ef:
         ec:e2:84:79:aa:8d:bb:cd:df:7a:64:fd:9d:ec:c8:08:81:86:
         5e:80:98:ed:fb:7b:90:5f:cf:b7:ef:67:18:ad:60:0a:df:36:
         41:1a:a8:41:31:3c:b3:19:52:30:64:12:8f:c5:04:cb:a4:4a:
         00:6a:a8:cf:07:24:78:45:5b:92:7f:f3:97:56:a7:0a:71:ab:
         01:ec:cc:b3:f9:56:d9:31:5f:3c:2c:bd:fd:10:37:9e:fb:10:
         25:0d:86:c7:34:7f:aa:30:1a:2c:e8:19:14:bb:3d:a9:5c:55:
         28:94:ad:a6:66:e5:59:c4:78:33:a4:5b:67:45:9e:75:db:6b:
         0b:7a:1b:f5:aa:06:28:0c:f5:e0:fa:41:15:68:81:e5:f9:81:
         33:e4:ab:70:69:3d:c8:63:ab:be:53:2d:24:31:de:50:e8:1c:
         98:30:68:f6:6c:33:9c:14:8a:0b:a8:9c:62:c2:48:50:5a:25:
         d2:76:28:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0
RTdCNDNCMTcwHhcNMjYwNDE4MTUyMzUxWhcNMjYwNDI1MTUyMzUxWjAYMRYwFAYD
VQQDEw02OWUzYTIwNy1jMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24Cf/K3ADgCizw64zu3dtRji7vUGMa+0eixvAeVQJVApsytD4n1mH0/E9tU/
JHxMa/WA20ooh6mtZhRHygVf4D5lyo7HRfp4Lg/JlFNxcmvSMi+ox8C9UfTMQ6SK
7ZYT9Sgp6BR1pJbUe8JcBjozyXsDzVGJ23iPmONlp56QC3Q7211yvwtbMlDkvh+8
y7QEmUvsWJeT+47DkM4p1WXvvv+iiEQwVw6TP5ug4QRJ/4Rvaekpko6xvcnqe0bl
APZsT0aek6jhkwp7+5Qj7tnnEuW7PG8+ORm+MYT6gOT3H5V56NgdGKo91Jj78fjU
0fDAYxzqOxRkp14ZXO1ZJLu5BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8cxYTu
+hh/8EFleJBFqLm/ZrPjMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD
NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16
MWtjVG9mYkVocUJPZTBPeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtjAK5G6Ap02kFz81To4W19Jtw1D61jprs48MDqb5En5wAffUd/EpUDKzIL6N
YZ2RJa8QfDdab45hkLsHMAaqvNNKjDg7+HHv7OKEeaqNu83femT9nezICIGGXoCY
7ft7kF/Pt+9nGK1gCt82QRqoQTE8sxlSMGQSj8UEy6RKAGqozwckeEVbkn/zl1an
CnGrAezMs/lW2TFfPCy9/RA3nvsQJQ2GxzR/qjAaLOgZFLs9qVxVKJStpmblWcR4
M6RbZ0WeddtrC3ob9aoGKAz14PpBFWiB5fmBM+SrcGk9yGOrvlMtJDHeUOgcmDBo
9mwznBSKC6icYsJIUFol0nYouw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:44 2026 by rpki-client