Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File:                     EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier:          KncOm4dbSYhSeuFqgRACKYDMyokARjsfhwSv6IZXk9w=
Subject key identifier:   B8:6D:52:18:DB:EB:28:41:98:1C:14:94:28:7F:D2:8C:F5:2A:55:32
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number:          01D7
Signing time:             Mon 02 Mar 2026 15:32:09 +0000
Manifest this update:     Mon 02 Mar 2026 15:32:08 +0000
Manifest next update:     Mon 09 Mar 2026 15:32:08 +0000
Files and hashes:         1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: f4aSx43qgvxh5EcvyC1a37md6NA4gdMj+gpRpR7yzhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Mar  2 15:32:08 2026 GMT
            Not After : Mar  9 15:32:08 2026 GMT
        Subject: CN=69a5ad79-b9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:d8:de:ff:c6:74:80:ec:23:ca:e6:58:f2:
                    12:2e:27:5c:5a:56:0d:60:29:84:1b:9e:b5:be:b7:
                    64:b9:a6:0c:36:a9:1f:11:4e:e5:d4:71:d2:b3:a1:
                    cc:96:b6:fe:15:e5:fb:30:20:d1:b1:30:99:14:fe:
                    47:63:02:39:58:ef:8c:7c:05:bc:78:a6:59:ae:d0:
                    2d:3f:a6:c1:3d:dc:73:d7:c6:c2:32:65:73:bd:57:
                    b7:6e:36:27:13:4c:c0:8d:72:8e:f7:35:1c:b7:b8:
                    70:fe:2f:12:f8:53:9a:48:34:a5:ac:a9:79:d5:7f:
                    fe:17:10:de:72:e1:83:0f:67:ac:04:9a:a5:70:02:
                    b9:a5:2c:e0:b6:22:fc:3e:91:a8:51:b6:d6:99:74:
                    7f:54:22:f3:24:a8:2b:b8:36:f7:59:ac:64:81:f6:
                    6e:7c:40:0f:a8:2a:23:81:10:8c:9e:a7:dd:18:df:
                    5d:63:80:20:6f:ab:e3:94:77:e3:aa:52:8b:bd:b5:
                    c6:8a:8e:42:22:4f:a1:f6:27:88:80:ab:8c:60:c7:
                    7c:a2:1e:fb:bf:32:69:35:bf:48:43:7b:cc:4a:6d:
                    96:f3:45:6c:63:6b:13:6e:6f:4e:45:de:4e:d4:ea:
                    8a:20:e9:62:b2:73:11:04:72:26:a9:2c:3a:cd:96:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6D:52:18:DB:EB:28:41:98:1C:14:94:28:7F:D2:8C:F5:2A:55:32
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:02:cd:37:bf:c0:ba:52:85:e7:13:ab:99:87:2c:cc:e4:80:
         e9:0c:0f:55:0f:67:f8:7d:24:ed:3b:a5:af:f6:28:e1:87:b9:
         4f:d2:7f:8e:47:28:69:fd:4b:67:20:82:e5:f3:0c:50:97:6c:
         6c:70:d3:26:47:33:34:87:d7:ff:80:08:05:5e:40:ae:3c:4c:
         11:63:4d:7a:c6:c9:09:d8:d2:52:1a:bb:cd:fc:7e:63:41:46:
         1e:fb:0d:de:b8:b8:4f:0a:4f:6b:f0:0c:ad:55:78:ba:c7:4a:
         3d:34:3b:55:46:c5:39:4c:b9:a0:5f:4a:ae:4f:1f:f4:0e:40:
         a0:cf:88:58:6b:10:04:04:35:ac:92:b7:bb:ca:e4:c3:6f:fb:
         6c:8b:f4:bf:e0:0f:f8:5d:c2:b7:5f:16:91:44:ac:5f:b9:70:
         88:2e:e9:bf:34:c5:31:0b:f9:d0:cf:1d:b7:f9:4b:16:2a:19:
         dc:46:e6:8b:d0:73:bf:af:62:02:ea:a9:24:d7:7b:ee:8b:eb:
         58:9a:f7:0a:99:a7:59:47:2a:42:ba:54:dc:cf:78:65:6d:33:
         2b:66:79:4f:d2:79:41:71:b4:18:7a:b3:bd:28:ea:00:b2:e2:
         33:dd:2e:a3:03:75:2b:f2:07:e7:b1:be:43:55:2a:48:81:6e:
         a5:52:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:19:22 2026 by rpki-client