Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
File:                     eNHeHdP-GGK__ued6u14itywCwc.mft (raw, json)
Hash identifier:          Q2yd7fKsZW8p056POTsDfKwqMkYHx/IxArO235dQUzo=
Subject key identifier:   1E:9B:53:06:67:81:91:22:52:29:57:A0:7A:6F:08:96:0B:6C:52:DC
Authority key identifier: 78:D1:DE:1D:D3:FE:18:62:BF:FE:E7:9D:EA:ED:78:8A:DC:B0:0B:07
Certificate issuer:       /CN=A91811D8/serialNumber=78D1DE1DD3FE1862BFFEE79DEAED788ADCB00B07
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
Manifest number:          10
Signing time:             Sun 01 Mar 2026 10:36:52 +0000
Manifest this update:     Sun 01 Mar 2026 10:36:51 +0000
Manifest next update:     Sun 08 Mar 2026 10:36:51 +0000
Files and hashes:         1: eNHeHdP-GGK__ued6u14itywCwc.crl (hash: oUGhOPUH3+fGrPocqIL/yNKS1MViwxEL5DLATzv3f8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.crl
                          rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91811D8, serialNumber=78D1DE1DD3FE1862BFFEE79DEAED788ADCB00B07
        Validity
            Not Before: Mar  1 10:36:51 2026 GMT
            Not After : Mar  8 10:36:51 2026 GMT
        Subject: CN=69a416c4-9b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:58:87:e4:7d:43:87:8a:65:65:52:35:b3:
                    8a:3d:ba:17:c4:cc:94:4e:10:9e:24:82:be:12:2c:
                    5a:99:67:b6:da:dc:2a:5c:5c:b0:6c:91:42:98:ac:
                    2c:81:02:a1:cf:09:2e:32:6f:3b:94:be:dd:90:80:
                    12:33:85:bc:02:3e:90:c5:ff:9c:64:c4:82:79:c5:
                    de:23:fe:72:9a:86:ca:44:22:bc:d4:8b:0f:42:1f:
                    37:a8:e4:16:d4:67:3f:01:43:f2:7e:9c:d3:9e:48:
                    e4:40:0a:03:43:24:89:b0:7d:37:ee:90:cf:08:c3:
                    56:32:b8:16:c2:94:d6:c0:22:6d:3e:2f:36:b6:f3:
                    86:8a:25:8d:1d:f2:2d:cf:31:72:09:89:4c:a9:9a:
                    55:c6:5b:87:3d:aa:87:a1:cc:1a:77:46:fc:19:f1:
                    17:1c:4b:f3:3e:3a:97:a2:90:11:8b:84:41:5b:bc:
                    91:e4:d0:0c:c1:64:b9:36:c4:5d:48:4b:f9:69:57:
                    ec:f1:5f:23:b1:b8:1a:6b:02:3b:b1:97:85:ca:c0:
                    c3:8b:45:6b:ce:34:cd:28:5b:db:a8:db:27:b8:77:
                    05:6b:4a:86:3b:8c:5a:6d:fe:69:a3:4e:91:24:ef:
                    dd:b1:dd:aa:6b:1f:aa:f6:f6:9c:b1:d6:7d:97:34:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:53:06:67:81:91:22:52:29:57:A0:7A:6F:08:96:0B:6C:52:DC
            X509v3 Authority Key Identifier:
                keyid:78:D1:DE:1D:D3:FE:18:62:BF:FE:E7:9D:EA:ED:78:8A:DC:B0:0B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eNHeHdP-GGK__ued6u14itywCwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/E56FE1D8030911F1928996D3133D8C67/eNHeHdP-GGK__ued6u14itywCwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:f3:f1:cf:07:b9:47:fa:aa:e7:af:87:2f:ba:4c:bf:7d:
         20:d1:2c:68:77:e3:4b:09:73:3f:51:b4:ac:aa:cc:5b:3c:fe:
         dd:52:6c:fe:b0:e4:88:8c:63:ec:ac:6b:38:a5:fd:d6:23:02:
         51:df:81:f3:81:db:08:fb:05:26:e7:5a:07:f3:0e:7c:54:92:
         f9:35:4f:a7:f9:44:96:40:fb:43:79:5f:4c:5a:4e:6b:43:86:
         16:79:63:38:cb:4e:3e:86:45:07:ae:c9:2a:89:3d:52:f5:1b:
         21:1b:8a:a3:2a:51:7e:48:f2:a7:32:bc:63:08:c7:b9:08:2a:
         f8:de:38:c5:f7:6f:36:d5:12:99:f3:7a:90:75:f7:cf:9e:92:
         96:ef:f6:37:b0:ac:3f:9c:ca:71:0a:4b:27:ab:a0:e6:27:46:
         35:bc:b9:1a:23:fa:db:2c:c1:cf:74:89:64:ad:fb:3f:00:03:
         52:3c:ce:9a:67:ce:bb:e4:53:42:0a:9a:4c:57:76:b4:f6:c7:
         42:dd:ee:1f:cc:72:4e:4a:da:f3:d8:bd:5d:7d:39:6c:d4:89:
         9d:29:f4:c6:d3:61:48:e0:4a:05:72:a9:59:cd:ae:be:50:a0:
         f7:a7:07:d0:b8:4a:31:02:f5:41:6f:33:e1:5a:91:55:fe:c4:
         a9:af:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:38 2026 by rpki-client