Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
File:                     eErjDFQTMvpDt1Y83AGwLtG9nFA.mft (raw, json)
Hash identifier:          rGiu2JirlitAzW04n9d04uu2+8SKteKp78MbMJYQt0E=
Subject key identifier:   35:0B:0C:0F:35:3C:DE:9F:EA:73:F0:19:B7:D4:2B:F6:5C:FF:ED:FF
Authority key identifier: 78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
Certificate issuer:       /CN=A916BCBA/serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
Manifest number:          23
Signing time:             Sun 01 Mar 2026 10:18:58 +0000
Manifest this update:     Sun 01 Mar 2026 10:18:58 +0000
Manifest next update:     Sun 08 Mar 2026 10:18:58 +0000
Files and hashes:         1: eErjDFQTMvpDt1Y83AGwLtG9nFA.crl (hash: 4fI+yWOZ2Pfm37HBy407ZI0UdgisGQ/bDFe/qbo5vsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
        Validity
            Not Before: Mar  1 10:18:58 2026 GMT
            Not After : Mar  8 10:18:58 2026 GMT
        Subject: CN=69a41292-853a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:de:a6:03:71:ef:f7:1c:21:3f:52:4f:1b:
                    83:5f:bd:77:ba:2f:dc:aa:cf:3d:02:7e:ca:ac:14:
                    0b:e8:a3:c4:8f:15:74:d2:b1:88:4b:0f:41:b0:f6:
                    bb:21:e3:1f:fd:ce:13:96:c5:56:4a:73:f2:98:1c:
                    3d:89:fa:ed:42:b7:25:4b:13:f6:d2:f1:bb:8a:47:
                    c0:b2:9c:44:5b:b3:62:ba:b8:fd:6b:c7:b5:b6:fb:
                    b8:70:09:3b:40:c4:82:65:9e:c1:27:5b:42:d9:1e:
                    9b:bc:09:c2:f9:3d:ff:cd:75:4c:f7:f4:83:ab:a9:
                    d6:49:f1:95:66:eb:ff:96:f4:ec:0c:56:05:f1:01:
                    cb:80:ba:65:8b:17:8a:88:84:32:39:7b:8f:39:a2:
                    6f:31:14:c6:8a:f6:16:e6:a0:80:44:a2:44:37:30:
                    99:b7:09:89:a1:bc:04:54:e3:1c:ec:5c:60:41:04:
                    98:70:28:ad:77:c1:09:c2:52:19:73:fa:27:96:3f:
                    5a:ad:dd:7f:02:ae:2b:8c:a6:fd:fa:8d:6d:b3:ed:
                    0d:39:ba:a5:8e:dd:07:dc:63:f8:c5:02:94:72:e2:
                    9f:fc:78:3d:fe:02:1a:cf:18:e7:d0:e7:bb:16:f9:
                    6f:be:e4:62:2d:ae:ab:1b:3e:eb:45:6c:94:60:a3:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0B:0C:0F:35:3C:DE:9F:EA:73:F0:19:B7:D4:2B:F6:5C:FF:ED:FF
            X509v3 Authority Key Identifier:
                keyid:78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:12:6f:36:7e:2b:68:69:ae:3a:31:7a:11:89:a0:dc:d1:76:
         0f:68:32:7b:3f:0e:10:88:60:de:60:ac:c6:7a:df:bf:30:4d:
         44:60:53:29:2c:d6:79:eb:65:dc:6c:60:c7:48:89:d8:51:b4:
         27:66:fe:75:d9:2d:59:50:3e:9c:b0:e2:e7:e0:ef:f7:f9:4f:
         6f:9f:e9:05:67:07:ab:22:74:9e:5c:29:e2:4e:9e:51:4b:93:
         bb:a0:63:d0:e4:a6:00:06:21:e9:12:af:82:c2:30:07:d6:e1:
         74:3d:d4:83:99:47:88:6a:16:0e:25:3a:56:de:4b:14:bf:51:
         af:7c:8a:ce:7e:33:d8:d3:54:29:1e:f4:b2:47:11:4b:0a:98:
         1d:a6:f4:a6:24:1f:5f:4c:36:f4:bd:3e:5a:a8:be:a4:ae:4f:
         97:e1:ba:2a:fa:e5:a9:18:b1:43:55:1b:e8:75:cd:50:77:7d:
         59:d2:b4:a1:32:34:59:02:bf:ce:b5:b0:97:0a:d2:65:46:7f:
         a4:1e:e6:3a:5b:c4:46:b0:51:17:f7:69:d7:76:a9:b5:4d:10:
         af:52:25:5d:f5:33:ba:f8:75:d3:23:dc:65:98:23:a2:31:53:
         f8:bd:af:a4:1f:83:df:d8:20:c6:60:33:11:0c:51:bd:d6:ba:
         69:2b:55:fd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkNCQTExMC8GA1UEBRMoNzg0QUUzMEM1NDEzMzJGQTQzQjc1NjNDREMwMUIwMkVE
MUJEOUM1MDAeFw0yNjAzMDExMDE4NThaFw0yNjAzMDgxMDE4NThaMBgxFjAUBgNV
BAMTDTY5YTQxMjkyLTg1M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOTN6mA3Hv9xwhP1JPG4NfvXe6L9yqzz0CfsqsFAvoo8SPFXTSsYhLD0Gw9rsh
4x/9zhOWxVZKc/KYHD2J+u1CtyVLE/bS8buKR8CynERbs2K6uP1rx7W2+7hwCTtA
xIJlnsEnW0LZHpu8CcL5Pf/NdUz39IOrqdZJ8ZVm6/+W9OwMVgXxAcuAumWLF4qI
hDI5e485om8xFMaK9hbmoIBEokQ3MJm3CYmhvARU4xzsXGBBBJhwKK13wQnCUhlz
+ieWP1qt3X8CriuMpv36jW2z7Q05uqWO3QfcY/jFApRy4p/8eD3+AhrPGOfQ57sW
+W++5GItrqsbPutFbJRgo4XZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNQsMDzU8
3p/qc/AZt9Qr9lz/7f8wHwYDVR0jBBgwFoAUeErjDFQTMvpDt1Y83AGwLtG9nFAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzNDOTI4REM2RTYy
QzExRjA5NzZBOTVGQjZGNkY1NkJDL2VFcmpERlFUTXZwRHQxWTgzQUd3THRHOW5G
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZUVyakRGUVRNdnBEdDFZODNBR3dMdEc5bkZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
Q0JBLzNDOTI4REM2RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL2VFcmpERlFUTXZw
RHQxWTgzQUd3THRHOW5GQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyEm82fitoaa46MXoRiaDc0XYPaDJ7Pw4QiGDeYKzGet+/ME1EYFMpLNZ562Xc
bGDHSInYUbQnZv512S1ZUD6csOLn4O/3+U9vn+kFZwerInSeXCniTp5RS5O7oGPQ
5KYABiHpEq+CwjAH1uF0PdSDmUeIahYOJTpW3ksUv1GvfIrOfjPY01QpHvSyRxFL
CpgdpvSmJB9fTDb0vT5aqL6krk+X4boq+uWpGLFDVRvodc1Qd31Z0rShMjRZAr/O
tbCXCtJlRn+kHuY6W8RGsFEX92nXdqm1TRCvUiVd9TO6+HXTI9xlmCOiMVP4va+k
H4Pf2CDGYDMRDFG91rppK1X9
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:03 2026 by rpki-client