Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
File:                     eErjDFQTMvpDt1Y83AGwLtG9nFA.mft (raw, json)
Hash identifier:          AQhUSC4Jymunjhp/PZGYq/dyL1WN+c1r0y9ktUkziM8=
Subject key identifier:   17:4A:BD:FA:98:7C:69:AA:EF:3F:E2:C2:D0:29:69:4C:57:1E:EA:6D
Authority key identifier: 78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
Certificate issuer:       /CN=A916BCBA/serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
Manifest number:          35
Signing time:             Sun 05 Apr 2026 07:56:57 +0000
Manifest this update:     Sun 05 Apr 2026 07:56:57 +0000
Manifest next update:     Sun 12 Apr 2026 07:56:57 +0000
Files and hashes:         1: eErjDFQTMvpDt1Y83AGwLtG9nFA.crl (hash: FoMvmJ5CxmVapTaX7fhFck1edadJky7L85QwwZikrlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
        Validity
            Not Before: Apr  5 07:56:57 2026 GMT
            Not After : Apr 12 07:56:57 2026 GMT
        Subject: CN=69d215c9-584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:58:ad:bd:14:05:2c:a3:b7:2f:25:b2:83:
                    08:c9:3e:59:59:dc:6c:40:76:de:38:ec:d7:bd:14:
                    39:0b:63:ae:75:ff:0c:4c:b7:62:c2:b1:2e:f1:d9:
                    0d:b7:06:78:31:53:b4:4d:07:6d:4e:5e:0e:80:ee:
                    52:60:ab:d5:97:ed:67:ef:d8:1d:39:96:d4:6c:0e:
                    e9:7a:c2:ab:a3:ee:4a:5d:f3:a8:89:7f:f1:28:48:
                    1b:9b:ca:99:56:73:1f:8c:07:47:d6:c1:e0:e8:63:
                    30:09:bf:7f:52:29:d3:a3:3d:6b:a5:27:0e:e2:8a:
                    2b:e3:d5:fb:37:86:77:6e:ae:78:19:18:66:6a:85:
                    92:b2:9b:15:91:61:d0:fb:9a:9b:de:bb:d5:ea:d1:
                    5b:46:07:05:4c:6f:82:a9:18:60:3b:b1:b0:07:f9:
                    2e:01:4f:d7:67:a6:93:19:36:b7:06:88:a7:30:3c:
                    77:c6:1c:2d:29:7e:58:dc:f0:5c:11:b4:69:d8:09:
                    cb:de:12:f2:06:e6:23:1a:fe:ba:94:5a:1b:af:f3:
                    95:8c:3e:5f:b8:0f:1e:c5:a9:59:57:23:b6:4a:e8:
                    0f:b7:49:59:d9:0d:22:4e:e5:9f:75:3a:e1:be:02:
                    8f:cc:b7:d0:bc:15:5b:bd:02:85:b8:b1:e1:73:d0:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:BD:FA:98:7C:69:AA:EF:3F:E2:C2:D0:29:69:4C:57:1E:EA:6D
            X509v3 Authority Key Identifier:
                keyid:78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:44:43:5f:36:cc:b8:11:63:79:59:0c:fd:89:54:a2:0d:f3:
         c6:a2:cb:11:3a:51:fa:af:f0:39:06:f7:b7:b0:3f:96:41:ea:
         8d:4f:e5:bb:9a:f6:94:68:03:c4:59:2b:14:fa:1f:81:98:5b:
         e8:76:28:5c:8a:15:de:1a:be:f6:d6:87:76:c7:ad:3e:40:81:
         9c:57:66:ce:b1:c6:af:8a:9a:80:07:12:75:4f:73:cf:92:65:
         93:cd:e1:0e:bd:3d:1c:2a:63:23:82:42:06:14:9b:bf:76:61:
         af:8b:0e:3e:46:0c:80:b3:fd:3b:cd:f0:24:21:38:cc:75:c3:
         03:e2:d5:0f:cb:8c:48:45:80:0d:8d:bb:5d:d6:02:5d:01:18:
         91:b8:cc:61:7a:14:84:81:66:15:bf:2e:cf:c8:b4:36:3d:be:
         00:d9:2e:b4:09:84:cc:ea:a2:19:ce:92:6f:c5:d8:50:c6:ab:
         d7:6f:07:c6:c6:6a:d5:4f:44:1e:c4:ae:8f:5f:e0:23:24:cf:
         46:d7:82:b7:01:f3:92:f7:16:9c:97:c5:8b:a2:01:62:46:bb:
         65:eb:3a:45:55:7c:4f:2c:38:4c:cf:10:2e:79:53:ab:dd:59:
         7c:d1:2f:7e:44:3b:07:89:84:c2:af:11:08:c9:0c:d2:20:8e:
         8c:f6:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:01 2026 by rpki-client