Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
File:                     eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json)
Hash identifier:          P4xFNj9aA4kJoBCXMXZVbH4zihNRCWL8Kefll2WI/Vk=
Subject key identifier:   ED:0A:DF:59:25:CC:F2:0B:E1:8A:6E:F0:49:56:B1:C9:60:9F:51:E4
Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32
Certificate issuer:       /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
Certificate serial:       042D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
Manifest number:          042D
Signing time:             Sun 05 Apr 2026 00:06:52 +0000
Manifest this update:     Sun 05 Apr 2026 00:06:51 +0000
Manifest next update:     Sun 12 Apr 2026 00:06:51 +0000
Files and hashes:         1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: DcjgoGmeXIm/lvix2KqizNn+XvdsKNrHbOe2EYfTNn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl
                          rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
        Validity
            Not Before: Apr  5 00:06:51 2026 GMT
            Not After : Apr 12 00:06:51 2026 GMT
        Subject: CN=69d1a79c-ad22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:c1:a4:e4:4d:a2:61:cc:3c:c3:fd:ba:ac:
                    87:10:ec:7d:38:0d:4f:c2:90:b3:90:4a:09:d2:6e:
                    b8:0c:49:84:80:fc:66:95:e9:4d:af:ef:30:5a:dd:
                    40:d4:6d:c4:0f:39:1b:2c:df:ef:38:e3:75:5d:56:
                    6c:7c:3c:fe:a6:f0:94:43:44:93:46:67:b4:73:49:
                    db:d7:e8:69:5c:ee:ce:4f:28:ab:ff:6b:ba:b0:0d:
                    3f:45:e0:9c:9e:a8:ea:d5:53:2f:15:d2:87:de:70:
                    5b:d4:6f:29:d0:4b:af:d3:d0:3b:24:29:45:e7:63:
                    59:8e:ec:19:b4:69:48:65:fa:49:cd:11:64:a0:37:
                    ee:39:ab:96:3f:4c:80:c4:72:44:21:78:ea:ad:8a:
                    80:4e:5f:93:de:cb:b5:70:d1:52:c1:e8:cd:cc:55:
                    f2:4e:cb:c9:8d:52:9d:cd:6a:9b:64:d3:c2:12:72:
                    d8:ce:a7:17:44:bf:c5:6a:07:87:58:ea:cf:63:a1:
                    f0:76:be:58:c8:91:20:2b:44:4d:61:a1:ed:88:bc:
                    fb:7e:cd:79:aa:4c:51:27:ef:75:8a:5a:68:4f:38:
                    8b:a4:08:0b:66:62:29:7b:d8:05:ad:d8:a7:54:c9:
                    40:24:c1:d6:e1:de:93:1c:47:81:7b:2c:bc:05:c3:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:DF:59:25:CC:F2:0B:E1:8A:6E:F0:49:56:B1:C9:60:9F:51:E4
            X509v3 Authority Key Identifier:
                keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:46:43:d7:51:c1:84:b9:80:78:cc:5f:31:a4:29:da:2d:16:
         59:ba:23:93:20:f5:fe:fd:5c:80:71:01:7c:a9:77:8c:f0:00:
         76:11:e4:49:1f:1c:50:e6:65:57:29:88:84:0d:96:a1:2c:fd:
         48:18:98:ed:de:dd:56:a3:3a:ac:17:1a:f2:a3:1b:29:f0:ff:
         37:e4:8d:a9:60:69:0d:5a:92:86:cd:06:de:73:9c:3a:38:3b:
         d8:34:2e:3b:d4:99:a2:21:74:12:72:b1:bc:8a:87:6b:c4:82:
         a7:34:41:c1:23:1e:6c:7d:eb:9b:b7:14:11:6b:60:ab:2d:e5:
         e3:39:13:8a:cd:bf:a0:98:f1:76:f6:17:23:38:4c:12:fc:e2:
         36:fe:7f:05:0b:c5:ad:75:0a:40:4f:01:53:87:30:f8:88:54:
         7a:bc:7f:cb:67:fd:48:5b:55:d1:bf:d8:ab:5e:54:ba:d7:45:
         5c:b0:5e:e3:3b:11:31:0d:cc:bf:fc:e2:f4:47:75:f1:e6:4c:
         f0:bb:57:bd:7e:a4:fc:89:95:da:7c:94:1c:6d:f5:c6:bb:ee:
         28:38:53:07:98:15:06:3e:8e:ed:48:db:00:cf:72:d2:50:33:
         6c:6b:c2:cb:05:4f:97:79:b8:ee:6b:f8:77:4c:75:65:e9:96:
         71:cc:da:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FDRjExMTAvBgNVBAUTKDc4MTEyNzBFNzhFNTJGODFFQzZGMEU5NkQ5OTZDNzkw
OTNDMTI0MzIwHhcNMjYwNDA1MDAwNjUxWhcNMjYwNDEyMDAwNjUxWjAYMRYwFAYD
VQQDEw02OWQxYTc5Yy1hZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8DBpORNomHMPMP9uqyHEOx9OA1PwpCzkEoJ0m64DEmEgPxmlelNr+8wWt1A
1G3EDzkbLN/vOON1XVZsfDz+pvCUQ0STRme0c0nb1+hpXO7OTyir/2u6sA0/ReCc
nqjq1VMvFdKH3nBb1G8p0Euv09A7JClF52NZjuwZtGlIZfpJzRFkoDfuOauWP0yA
xHJEIXjqrYqATl+T3su1cNFSwejNzFXyTsvJjVKdzWqbZNPCEnLYzqcXRL/FageH
WOrPY6Hwdr5YyJEgK0RNYaHtiLz7fs15qkxRJ+91ilpoTziLpAgLZmIpe9gFrdin
VMlAJMHW4d6THEeBeyy8BcMbiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0K31kl
zPIL4Ypu8ElWsclgn1HkMB8GA1UdIwQYMBaAFHgRJw545S+B7G8OltmWx5CTwSQy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS85MDlCQzAyOEEw
MzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0SHNidzZXMlpiSGtKUEJK
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VCRW5EbmpsTDRIc2J3NlcyWmJIa0pQQkpESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUNGMS85MDlCQzAyOEEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0
SHNidzZXMlpiSGtKUEJKREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACkZD11HBhLmAeMxfMaQp2i0WWbojkyD1/v1cgHEBfKl3jPAAdhHkSR8cUOZl
VymIhA2WoSz9SBiY7d7dVqM6rBca8qMbKfD/N+SNqWBpDVqShs0G3nOcOjg72DQu
O9SZoiF0EnKxvIqHa8SCpzRBwSMebH3rm7cUEWtgqy3l4zkTis2/oJjxdvYXIzhM
EvziNv5/BQvFrXUKQE8BU4cw+IhUerx/y2f9SFtV0b/Yq15UutdFXLBe4zsRMQ3M
v/zi9Ed18eZM8LtXvX6k/ImV2nyUHG31xrvuKDhTB5gVBj6O7UjbAM9y0lAzbGvC
ywVPl3m47mv4d0x1ZemWcczapQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:34 2026 by rpki-client