Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
File:                     eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json)
Hash identifier:          lOHADDQWVFxWf4eFPFjgERvHgxHQF1ZhecwdAb4lbTI=
Subject key identifier:   58:D3:3C:67:BE:2D:96:E4:CE:A0:D7:F8:5D:49:F8:9E:42:84:94:10
Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32
Certificate issuer:       /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
Certificate serial:       0433
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
Manifest number:          0433
Signing time:             Fri 17 Apr 2026 00:13:29 +0000
Manifest this update:     Fri 17 Apr 2026 00:13:29 +0000
Manifest next update:     Fri 24 Apr 2026 00:13:29 +0000
Files and hashes:         1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: nis12UD+yZGpeFlHWZM9MEJqKTQY1YoqyGiOg3XEmiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl
                          rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
        Validity
            Not Before: Apr 17 00:13:29 2026 GMT
            Not After : Apr 24 00:13:29 2026 GMT
        Subject: CN=69e17b29-bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5d:a3:51:8d:13:26:a9:d0:85:79:a6:dc:97:
                    98:fd:72:79:d1:6f:a1:65:8f:4d:91:b3:20:c1:5b:
                    21:cd:04:d8:e8:9b:94:1d:ad:b3:8c:4d:55:5b:54:
                    15:39:d9:89:bb:99:c5:a1:44:c1:03:17:b4:69:11:
                    3d:34:11:a1:49:e8:5c:8e:fe:31:f9:aa:74:f8:e4:
                    6e:54:0f:54:f5:ce:ae:a1:2a:e1:09:65:2d:a1:26:
                    ad:48:70:b8:1d:59:c2:0d:55:f2:77:ba:af:d3:6e:
                    c4:94:f7:ce:4f:da:ef:d5:e0:28:6c:a7:75:4f:9d:
                    09:d0:a7:4a:41:78:d1:c7:8a:57:98:91:d3:14:38:
                    a1:dd:6f:fb:bc:ba:be:80:e9:50:8b:24:e9:09:72:
                    6b:48:21:e5:77:51:98:e9:35:4c:15:1a:e8:63:0f:
                    bf:07:86:c1:21:90:0a:e5:d6:d7:bd:9f:9d:fc:e9:
                    dd:49:7a:3b:84:f6:be:1c:d3:3d:cf:db:2e:d1:48:
                    d0:6a:fa:af:ec:9c:12:88:ce:4b:52:98:af:4c:dc:
                    ae:55:1e:d7:80:2f:ea:07:57:56:c0:68:0c:01:d6:
                    7a:be:9e:46:87:7d:66:2e:7c:0e:cd:e4:6e:4e:dd:
                    2a:b4:7a:01:52:ac:b4:2b:33:03:50:7c:92:61:2f:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D3:3C:67:BE:2D:96:E4:CE:A0:D7:F8:5D:49:F8:9E:42:84:94:10
            X509v3 Authority Key Identifier:
                keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:66:fb:7a:e9:5c:6f:f9:91:88:ec:15:a5:79:9c:24:d5:3d:
         fc:39:e6:4d:68:2f:78:f0:15:da:4c:9c:97:f5:6e:44:a9:c6:
         ee:63:c7:c4:e9:3d:c0:49:ff:dc:36:be:3f:5d:64:d1:e5:a2:
         0d:80:3e:69:c5:71:ff:1b:ca:34:ab:44:16:54:10:ac:48:55:
         28:31:dc:1e:f9:3b:c6:b2:43:91:44:52:28:53:dc:b0:80:3b:
         95:d3:64:b9:bc:8d:09:bd:15:a1:1e:51:85:fe:76:98:36:10:
         ae:fa:38:6e:3a:da:a9:32:2b:66:99:07:a2:b8:f6:f1:fd:11:
         c1:cb:1b:d8:a6:34:08:ac:0c:66:e5:47:82:9d:84:ef:e9:55:
         29:56:af:80:c5:7f:44:3d:ac:68:53:1c:a9:bb:a5:00:e0:72:
         87:fc:a4:36:14:a7:31:24:8a:8a:39:87:2c:b5:97:6d:ce:44:
         3c:b7:cb:13:c8:f4:d3:93:09:9b:7b:03:98:17:de:b7:b6:11:
         a7:05:38:44:e8:02:2a:d7:1e:c3:d5:1a:3c:28:38:ac:1f:21:
         7c:06:6a:ec:90:7a:27:d4:fa:4a:7e:07:95:2a:27:d0:e9:be:
         4a:fd:82:90:53:be:45:b9:1d:f1:c3:b9:1b:26:cd:06:bd:7a:
         7a:b4:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:46 2026 by rpki-client