Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File:                     ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier:          oihx9/k+gBlin1ZZ8NvSJDC+LcF+59zxrc82CI3tk+8=
Subject key identifier:   B7:7F:92:8F:39:48:A4:5A:65:DE:59:00:14:A4:00:1D:52:C6:88:E7
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer:       /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number:          C9
Signing time:             Sat 09 Aug 2025 06:08:33 +0000
Manifest this update:     Sat 09 Aug 2025 06:08:33 +0000
Manifest next update:     Sat 16 Aug 2025 06:08:33 +0000
Files and hashes:         1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: 1SerEz2hCKaB7awuUeJUwcWpYNvXi1NkVYFkKEZITa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
        Validity
            Not Before: Aug  9 06:08:33 2025 GMT
            Not After : Aug 16 06:08:33 2025 GMT
        Subject: CN=6896e5e1-a16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:46:6f:42:e5:64:19:43:02:fe:d4:77:ee:
                    cc:ef:64:36:15:80:ab:29:63:51:8e:cd:ff:36:9b:
                    ea:0a:cc:90:37:69:8d:85:fd:07:7f:9c:60:f3:99:
                    49:ef:87:ac:8b:c1:fd:53:95:b0:c0:4c:48:ef:0b:
                    73:8b:94:ce:68:64:74:dd:d5:89:08:ef:c4:3b:1d:
                    a3:dd:98:56:81:57:23:5a:0f:4c:d4:d4:d7:70:8e:
                    3e:4a:ae:d8:c9:c0:9f:81:2c:00:e7:61:c1:ec:47:
                    50:d8:df:a9:db:c8:03:2e:1d:fc:0f:f2:fb:80:31:
                    84:64:c8:24:42:a6:77:4f:68:e0:76:0d:b1:e3:2d:
                    90:b1:9d:41:f1:01:bb:f8:39:60:60:82:90:7e:84:
                    42:20:60:d2:4d:a3:82:89:8a:a9:9f:f8:e0:ba:a7:
                    82:89:96:e1:1b:75:ad:42:a6:e1:53:38:e8:6f:ae:
                    6d:ea:bf:7d:b8:5c:ed:63:24:fc:84:31:f6:2b:81:
                    59:98:08:f7:76:93:6b:aa:1e:29:80:05:4d:57:2c:
                    f1:ab:aa:58:88:43:9d:54:ec:e3:c3:63:25:df:19:
                    6e:52:96:19:73:4d:40:82:63:ba:1a:fc:a1:10:33:
                    8c:24:1f:72:21:ea:db:12:17:61:c6:9b:8d:20:16:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7F:92:8F:39:48:A4:5A:65:DE:59:00:14:A4:00:1D:52:C6:88:E7
            X509v3 Authority Key Identifier:
                keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:d5:16:cb:24:6c:55:97:78:c6:00:7f:41:c5:e7:80:86:38:
         1d:4e:f8:38:ff:2c:89:4b:d9:8f:fd:81:c3:c3:d5:25:6c:e5:
         3e:f5:02:e2:6d:82:44:8d:e5:8f:62:a7:d1:d7:ca:74:44:2d:
         da:69:86:bd:f4:cb:d1:2f:15:0e:31:24:46:01:9a:ac:84:50:
         26:d4:19:9d:8e:7d:82:31:01:91:11:8b:a4:e8:d6:33:34:fa:
         6e:cc:72:75:d9:85:20:50:42:21:bd:41:f3:47:38:be:ad:74:
         30:fb:79:f1:d2:b8:9f:17:84:86:c5:76:61:fc:30:b2:1f:88:
         5d:0b:d4:c4:3b:86:f0:e2:84:3b:1c:b5:1d:de:83:f9:5f:68:
         21:e4:9d:25:97:04:07:bd:c2:d8:2d:52:8d:7e:bc:a9:96:48:
         bc:e7:30:ce:40:b8:2f:5b:b3:33:10:0e:04:1a:ae:1f:e1:5f:
         bc:0f:5e:90:a5:e1:38:a8:ba:2a:d7:89:03:7d:46:0b:e2:85:
         ab:27:91:13:dc:42:e0:0c:4f:a6:a8:5f:f8:c5:09:76:3e:03:
         52:23:10:c4:0a:67:a7:4f:29:1c:ed:98:fd:1c:d2:be:8e:8f:
         98:74:85:77:af:f7:ec:83:b5:e6:75:dc:c2:c3:20:90:8f:ef:
         22:c9:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:02 2025 by rpki-client