Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File:                     ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier:          9NkYpRGb88yywLJ2utBnciP4K+u1FWwevVQ3szrpieY=
Subject key identifier:   9A:F1:44:29:C5:45:EE:69:BD:BC:AD:13:DF:56:14:DC:76:B9:3C:8A
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer:       /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number:          019B
Signing time:             Mon 21 Sep 2026 04:15:43 +0000
Manifest this update:     Mon 21 Sep 2026 04:15:43 +0000
Manifest next update:     Mon 28 Sep 2026 04:15:43 +0000
Files and hashes:         1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: hosTP3aQ/s9Gmp+ILFwb5ggOdb9iPaxgYI7ROe4w88A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
        Validity
            Not Before: Sep 21 04:15:43 2026 GMT
            Not After : Sep 28 04:15:43 2026 GMT
        Subject: CN=6ab0af6f-528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:28:32:58:91:ce:66:f0:15:88:f7:30:72:
                    a1:05:70:17:48:58:49:fc:17:9b:04:9b:7f:70:dd:
                    dd:4f:c9:a1:9c:b2:e6:7e:b9:ed:67:d5:bd:b7:e3:
                    cd:e3:78:2e:0a:e8:a2:b0:e6:b7:3d:08:4e:e7:90:
                    7e:a6:84:c8:d1:68:32:54:02:d8:cf:4b:bb:16:d0:
                    27:3a:ef:1a:82:65:71:14:e7:9a:64:d1:3c:d9:7d:
                    56:4c:6b:c8:05:53:5a:87:9d:41:99:67:e5:4e:0e:
                    6c:08:d1:28:91:2e:e4:7f:d4:c2:3f:38:ae:36:6f:
                    d0:e3:03:52:39:18:e8:c1:d8:bc:9b:e1:c3:43:d8:
                    50:92:60:bf:72:5c:91:16:83:1b:30:83:c9:61:d4:
                    a5:65:e8:cf:6b:de:7f:b7:7f:0d:88:09:e5:79:15:
                    b8:e5:c3:51:a2:db:2c:3c:7c:2a:00:e4:c5:68:1f:
                    23:90:1b:05:82:87:87:64:d7:28:df:bf:22:86:47:
                    f6:89:b5:f4:65:5a:4a:c6:c5:2c:1d:dd:5b:ec:a8:
                    2c:1b:92:fa:33:e5:46:97:3d:de:8f:ed:c3:37:15:
                    ce:2d:32:d8:70:f9:04:fb:31:a9:80:cb:e7:bb:43:
                    42:6d:6d:90:0a:06:e8:97:a9:f9:f8:3d:e7:de:fb:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:44:29:C5:45:EE:69:BD:BC:AD:13:DF:56:14:DC:76:B9:3C:8A
            X509v3 Authority Key Identifier:
                keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:83:f4:cc:ba:ee:14:9e:48:8e:16:d5:42:b9:35:30:20:f5:
         7d:c2:a6:7f:3e:72:ed:43:0c:97:01:f5:97:98:7e:68:b0:6f:
         a5:2d:92:31:56:23:5e:c4:fc:0b:e4:df:99:4d:6b:4c:e6:f8:
         9a:6d:9f:98:4d:06:e1:64:1f:a4:e3:8a:22:cd:18:67:78:59:
         44:79:e2:cb:e4:40:a7:a6:59:7c:29:fe:71:89:7f:b1:32:12:
         db:de:1f:ad:4d:c3:ec:2a:30:0a:b7:66:9b:e5:16:21:83:6b:
         13:c9:c7:76:40:5c:ab:62:2a:a3:64:42:c8:ad:0b:7c:42:22:
         3b:cf:13:27:fa:77:6c:6c:76:15:43:49:17:31:5e:6e:a0:01:
         a0:8d:85:c1:5c:eb:2a:3d:2d:27:0f:c0:7f:3f:33:00:2b:ae:
         63:00:db:bc:d9:c5:94:14:ef:0f:39:85:c3:5e:c2:3b:e7:fd:
         ca:c4:a8:af:4d:30:13:3a:2e:a0:b3:3e:95:2c:a9:61:bb:12:
         54:7f:96:0a:46:3b:17:02:df:c6:9e:89:bf:eb:29:c3:99:a8:
         9f:0b:72:9f:04:17:50:e8:ca:11:15:ac:2d:57:b6:87:6e:41:
         3b:9f:7b:9f:7f:cd:84:b6:d7:29:2e:08:79:eb:2e:66:80:23:
         08:f6:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:11:18 2026 by rpki-client