Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
File:                     ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json)
Hash identifier:          7oIK05ytwj57Nrq1eJOyuUSyrlj8NMJeMSVJGGO/9KM=
Subject key identifier:   30:B6:7A:56:3C:57:86:44:C8:DD:A3:FF:AE:15:8F:5D:18:59:F6:2F
Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
Certificate issuer:       /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Certificate serial:       0796
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
Manifest number:          0796
Signing time:             Sat 28 Feb 2026 20:39:38 +0000
Manifest this update:     Sat 28 Feb 2026 20:39:38 +0000
Manifest next update:     Sat 07 Mar 2026 20:39:38 +0000
Files and hashes:         1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: LMt54uumnv+tLzcoACkf/NOOb8ZNYYbIyDbTfi/M1Ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
        Validity
            Not Before: Feb 28 20:39:38 2026 GMT
            Not After : Mar  7 20:39:38 2026 GMT
        Subject: CN=69a3528a-19a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:4b:52:42:b1:1d:fe:2f:75:ed:17:92:fd:
                    76:c0:b5:12:95:58:5e:79:2a:96:57:48:b1:f6:a1:
                    0f:5a:38:3e:34:24:13:05:11:43:1c:3e:8f:3e:30:
                    fb:16:90:4c:5f:e4:34:34:f6:01:fe:4b:88:15:15:
                    7f:32:da:ef:d8:aa:5f:1f:ac:40:91:36:f2:5d:d2:
                    35:2f:e0:d5:79:e5:79:09:ef:da:4a:da:20:82:29:
                    ee:cb:d9:5f:d4:92:75:60:84:b0:a8:59:83:79:a7:
                    3a:31:02:9c:99:c1:89:4a:b3:32:09:05:48:8e:49:
                    ab:83:48:27:7a:9a:59:a0:31:ac:a2:fe:38:9e:f8:
                    bb:bc:af:2e:09:9f:1a:51:12:21:fd:05:2f:b5:80:
                    2f:f8:a0:16:c1:a6:fb:43:c4:2e:a8:71:51:4a:af:
                    47:ac:cc:69:9c:5f:14:27:17:c5:1e:3a:54:9c:99:
                    bc:2d:2d:b2:ba:3f:93:7d:cd:5a:3c:bb:63:a2:dc:
                    bb:70:f2:5d:9a:9e:4c:b9:17:71:a9:20:d9:42:b6:
                    e7:f8:04:1d:5c:6e:5f:97:c6:b7:04:60:31:ee:cc:
                    b5:24:5d:fd:69:5d:34:b0:d2:16:8b:d4:ca:a7:6a:
                    2e:3f:ce:c9:e9:59:76:cf:63:eb:7f:c5:be:53:eb:
                    0f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B6:7A:56:3C:57:86:44:C8:DD:A3:FF:AE:15:8F:5D:18:59:F6:2F
            X509v3 Authority Key Identifier:
                keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:65:3d:20:3b:04:19:26:a2:98:a8:bf:b6:d8:08:bc:e0:16:
         aa:23:c6:42:7a:a7:da:e4:44:57:1c:1f:35:b2:2f:d3:2c:4a:
         41:a4:a4:37:0e:f5:84:d7:65:62:a3:ce:f5:76:99:84:08:73:
         0d:88:3e:08:43:9e:9a:7e:99:e6:5d:eb:59:8e:84:1d:b6:c0:
         e8:4b:76:2e:e5:b9:9e:5e:23:7d:82:13:23:1a:8f:7a:60:43:
         c1:4b:33:e4:3f:ce:4f:09:88:fc:20:cb:af:3b:39:67:7d:08:
         bd:1e:5f:4c:34:e8:3a:91:0c:52:b5:e2:62:1b:28:f9:81:40:
         56:97:54:25:f3:8d:4b:cf:05:74:25:34:8e:9d:69:70:3d:a7:
         a5:d6:b8:cd:6d:36:08:0e:06:d4:a9:9a:3a:12:17:b3:ec:55:
         3e:bb:e3:c3:dc:c7:d9:84:06:a0:80:5e:95:24:60:0c:35:83:
         ab:71:2e:1d:e6:a9:9b:f9:bd:dc:c6:f0:fb:b5:78:bf:5c:4e:
         eb:70:a2:78:b0:ab:4b:e0:64:68:ed:29:c8:bd:63:18:0c:ff:
         a2:34:1d:cd:ba:b2:79:bf:cc:0c:f5:5f:d4:5e:bd:60:f6:09:
         30:4b:40:72:db:eb:54:b4:e7:4f:62:d8:be:74:10:13:32:db:
         91:98:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:17 2026 by rpki-client