Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File:                     ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier:          9g5AreyXYPSzhuMMNxP3kB9z2o3OADlVnPK5+0VeH4I=
Subject key identifier:   AE:7B:49:97:55:4A:5B:D1:15:07:FD:9F:D9:BE:38:2F:7C:68:DB:C6
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer:       /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number:          017D
Signing time:             Mon 27 Jul 2026 06:24:12 +0000
Manifest this update:     Mon 27 Jul 2026 06:24:12 +0000
Manifest next update:     Mon 03 Aug 2026 06:24:12 +0000
Files and hashes:         1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: pKuIPMAaRq7bmAqrHjW6KKF7Tj4hCGTmdANDI9i+6z8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
        Validity
            Not Before: Jul 27 06:24:12 2026 GMT
            Not After : Aug  3 06:24:12 2026 GMT
        Subject: CN=6a66f98c-449a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:cd:98:01:1e:e7:bc:8f:51:35:f0:7b:bf:
                    0c:61:0e:15:ea:2c:6d:ee:26:15:89:15:7b:50:ed:
                    4a:19:6f:23:7e:73:56:1e:97:e4:fc:67:9a:6f:f8:
                    82:c3:01:13:4d:fa:0c:7e:74:a3:c5:7f:a3:49:3a:
                    c3:96:95:15:aa:b7:01:49:d1:db:41:b6:f7:16:50:
                    08:73:f6:d5:55:a3:b8:e8:cc:15:5c:ad:41:e9:dc:
                    91:0e:2c:ec:e2:4c:df:77:b7:30:8f:9e:f7:83:b9:
                    36:f6:b0:aa:94:64:f9:b7:61:8f:2f:38:70:45:80:
                    c5:ea:03:31:ec:ba:dc:26:1a:58:db:75:a5:06:41:
                    9f:47:06:e9:bb:1d:09:9c:eb:cb:85:a9:df:c4:f3:
                    1a:d5:64:22:a4:41:1d:d0:a8:75:d3:2f:83:7d:a6:
                    ac:e2:97:0e:0b:d6:8c:34:ac:67:fe:d7:02:d5:72:
                    3f:ff:2b:e4:ca:8b:24:8d:e9:f8:f9:e3:7e:53:5f:
                    29:70:d9:6c:fc:eb:c0:0d:6e:f0:ac:ac:42:c8:d0:
                    b9:6b:ba:88:c8:8a:4a:27:fb:f2:ef:80:2e:e2:6c:
                    9d:43:68:36:e1:df:ea:e1:0c:12:63:a3:ea:45:27:
                    9b:93:98:6b:97:ef:2b:56:20:68:57:a0:8c:ec:b0:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:49:97:55:4A:5B:D1:15:07:FD:9F:D9:BE:38:2F:7C:68:DB:C6
            X509v3 Authority Key Identifier:
                keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:98:06:fb:3e:e0:1f:1a:33:e7:00:35:98:93:5c:d0:ee:fe:
         07:76:fa:76:24:7d:4a:01:a5:76:c3:d0:fa:be:a7:6a:3a:b0:
         eb:7b:d0:5c:c3:d8:98:14:e1:54:d2:26:dc:25:8f:b5:14:59:
         e9:e4:41:2a:e2:4d:dc:e7:e4:3f:91:9d:53:e9:67:8f:93:22:
         22:97:be:3f:80:cc:4c:48:da:2d:ec:9b:7d:3a:0b:05:dc:8e:
         1c:90:32:b8:45:93:bc:7b:ac:9a:7c:85:06:77:1a:5d:56:06:
         b7:d9:33:53:72:81:e0:46:3d:fd:e8:34:4e:9f:8c:c7:c1:51:
         4a:13:b9:1c:9c:1e:eb:2d:16:c8:8e:29:51:c7:61:aa:73:eb:
         3d:aa:2f:e9:73:8d:c4:c6:01:7d:c1:b2:2f:d5:ef:0f:78:77:
         c9:41:50:e3:dc:57:e1:4c:99:da:84:31:9c:df:a1:50:f9:f4:
         cd:ce:02:92:68:cb:bc:ba:a3:6f:ee:37:a9:b7:fa:a7:0d:95:
         56:90:7e:b4:be:98:15:af:e6:33:8e:41:a4:2e:51:68:ca:15:
         39:36:c2:9f:87:24:2f:d6:28:d5:0a:9a:6c:57:63:d7:cf:51:
         23:59:a2:bc:43:2e:ff:bc:dc:09:9f:8a:f2:d6:f2:31:37:3c:
         1d:8c:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:12 2026 by rpki-client