Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
File:                     eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json)
Hash identifier:          Ol+h6A4RLzrK+sJujAqw1o48iSJtpluPX9wnF/HeFnE=
Subject key identifier:   DD:1B:7C:B3:09:B0:18:3A:C5:F6:E5:87:95:52:82:9D:BE:84:4A:F7
Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32
Certificate issuer:       /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
Certificate serial:       037B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
Manifest number:          037B
Signing time:             Sun 27 Apr 2025 00:32:38 +0000
Manifest this update:     Sun 27 Apr 2025 00:32:37 +0000
Manifest next update:     Sun 04 May 2025 00:32:37 +0000
Files and hashes:         1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: iDlb/7BwAUoeJBnNKoACVShaeB+tk2I/UL63Ijd26yk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl
                          rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432
        Validity
            Not Before: Apr 27 00:32:37 2025 GMT
            Not After : May  4 00:32:37 2025 GMT
        Subject: CN=680d7b26-e611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:05:9f:83:b4:22:76:b4:d9:d0:1d:9f:63:
                    ee:92:77:e2:9a:9b:c1:61:6e:4b:c4:29:3d:5f:48:
                    f9:ad:72:75:bb:4e:f7:88:81:de:06:2d:60:62:5e:
                    98:e5:aa:72:c1:2c:40:a7:cc:78:30:55:dd:94:cb:
                    03:f5:6a:81:97:b9:34:e5:eb:5d:c0:b3:b2:1c:f8:
                    13:46:a8:10:c0:84:04:32:e0:74:ed:8b:d6:ff:ae:
                    58:77:48:31:d3:3f:d2:c0:8c:aa:2f:a2:8a:d6:5b:
                    66:d9:35:57:b3:5c:77:2c:b8:3e:55:ee:48:e5:6d:
                    3e:05:78:47:14:92:36:f3:b3:11:db:9f:9a:73:16:
                    e3:e6:47:c5:fd:80:09:7b:d5:f7:91:d5:76:0e:27:
                    ab:98:29:50:24:bb:c6:c6:3a:09:46:aa:c6:91:e5:
                    81:fd:89:b5:1d:9d:5a:1b:7a:69:77:68:13:bf:25:
                    86:56:0f:71:9d:0a:d8:4c:fb:a7:1a:13:ab:03:67:
                    ed:99:21:61:e4:92:07:7c:0f:80:bc:cd:f6:8a:2c:
                    18:ea:3f:e5:ba:b6:6d:7f:93:f1:71:c3:51:58:43:
                    47:e3:d9:3f:bd:e4:2d:5d:a6:c0:e5:2d:ae:c8:7c:
                    b1:09:ad:91:23:a7:5f:65:70:58:28:7a:70:ea:1d:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1B:7C:B3:09:B0:18:3A:C5:F6:E5:87:95:52:82:9D:BE:84:4A:F7
            X509v3 Authority Key Identifier:
                keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:44:43:99:ab:92:a4:6a:05:13:4d:2e:b0:5a:54:82:bb:
         18:f4:de:b5:d4:9d:10:1f:19:a5:a8:35:e9:6c:cb:42:8e:ec:
         98:9d:4d:f9:96:ab:40:e6:9a:63:b9:5b:6d:65:11:96:d2:f0:
         08:84:c1:52:33:b7:e6:a0:a4:2a:00:25:83:88:ed:43:80:f0:
         ab:c8:2d:64:20:2a:32:6c:cd:eb:e3:d2:14:9a:02:52:71:9f:
         b6:e6:f2:d9:c6:d4:1d:2f:90:d9:17:11:5b:97:a0:f6:3e:f3:
         df:eb:4c:b8:aa:50:f8:3a:e0:3b:fe:7f:6b:2b:1f:3d:c3:8a:
         16:8c:1c:c8:ab:61:1a:6e:c3:1e:a9:18:a5:c9:8d:c9:a4:30:
         7e:b0:fc:8b:b4:28:33:50:d7:4c:49:c1:cf:ee:df:f9:f3:6f:
         91:76:89:be:aa:9b:da:53:f3:68:9b:b5:87:0a:5c:31:07:15:
         ac:f1:b0:3f:f0:c1:e3:82:96:0b:0d:1a:3b:30:af:fd:80:3a:
         91:5f:c5:99:19:53:dc:4f:4f:17:f9:55:a4:9a:4a:48:99:d7:
         26:13:67:59:3e:a1:10:7d:78:9b:f3:96:06:b8:34:2f:2f:23:
         ef:2d:91:90:06:1b:40:ed:27:d3:5d:de:53:73:3a:ad:52:65:
         74:2a:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net