Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File:                     ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier:          Kbn9RocXLlLM6DKFATklfAXbjuydGwQABDqm7wYXzg0=
Subject key identifier:   31:79:B2:50:15:DE:29:10:96:E8:E8:D3:87:DA:92:EF:C6:3E:F1:EC
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer:       /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number:          90
Signing time:             Sun 01 Mar 2026 08:47:01 +0000
Manifest this update:     Sun 01 Mar 2026 08:47:00 +0000
Manifest next update:     Sun 08 Mar 2026 08:47:00 +0000
Files and hashes:         1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: G7F0Trd6f0TzTAWVAtX/ULS71AjwnoWIqdj772VGGwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
        Validity
            Not Before: Mar  1 08:47:00 2026 GMT
            Not After : Mar  8 08:47:00 2026 GMT
        Subject: CN=69a3fd05-82f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:d2:3e:80:8a:7e:6f:a3:76:c6:d9:d8:40:
                    08:71:c1:21:dc:28:8e:29:2e:c1:35:88:47:00:65:
                    63:0a:99:b7:fa:fc:e7:da:10:06:87:c8:76:e0:0c:
                    c9:28:a2:18:fa:a1:47:b7:2e:56:e9:68:15:5c:67:
                    21:79:fb:87:a1:ba:96:69:ca:0b:ff:43:71:c1:3e:
                    86:35:86:b0:ce:d1:fd:0f:97:ce:b9:f1:81:68:fa:
                    e6:5a:75:28:c3:f1:39:da:d0:df:c0:9e:4b:e2:ac:
                    96:e1:41:ba:d1:3d:32:21:03:d5:bf:4f:74:b2:87:
                    37:a3:83:8f:ce:96:6a:53:04:15:6c:f8:4a:cf:56:
                    27:c4:cc:94:3c:4c:fe:c5:11:e7:d4:38:1f:60:5a:
                    6c:66:ce:df:91:3a:c8:4f:a1:83:6e:f9:3c:a3:f4:
                    4e:9a:3f:b1:aa:d7:c9:7c:62:8d:9c:9e:fd:e3:93:
                    2e:6a:81:f4:3c:64:f5:c5:c0:41:ff:de:d7:63:cf:
                    c9:af:9b:91:7b:18:37:57:01:91:05:b2:c9:e8:7f:
                    3d:fc:e8:98:74:5c:2d:0c:04:f0:ad:ca:c0:18:8b:
                    3a:82:ce:9c:88:4d:d8:f3:40:f3:43:5e:9c:f2:56:
                    0a:d4:a3:51:31:a6:ad:73:e4:5d:ac:74:93:b0:01:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:B2:50:15:DE:29:10:96:E8:E8:D3:87:DA:92:EF:C6:3E:F1:EC
            X509v3 Authority Key Identifier:
                keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:94:2e:96:31:76:5c:23:81:b3:81:6a:2a:93:2e:9f:92:
         a5:eb:07:87:1e:45:83:5f:9a:02:d7:4a:38:19:bf:46:7f:79:
         a0:15:2f:af:d4:cc:9c:b1:be:0c:c9:5e:d2:2d:42:f5:b6:12:
         c0:29:67:d7:23:17:52:90:ef:97:46:b4:f5:15:12:97:42:73:
         d7:e9:ce:22:6c:11:fe:a3:9e:eb:57:11:e5:b4:7a:d2:7d:66:
         0d:b9:6b:db:9c:5a:b8:ab:62:18:d0:8b:10:da:d4:73:7f:46:
         71:92:f4:60:0f:6d:3e:c5:55:78:ae:9d:82:54:65:7b:2c:dd:
         c5:7c:1b:2f:b9:fa:b9:7a:10:53:a7:4f:5b:0d:f5:45:3b:e6:
         e5:11:3f:b0:e7:9c:fd:b8:85:af:79:27:da:a7:2b:57:89:80:
         55:71:5d:c7:fa:5c:cc:76:ae:f4:10:38:0c:51:b8:f7:12:2b:
         ff:7f:6c:16:e5:4f:a2:e2:88:12:79:9a:9f:38:02:e6:e2:62:
         c5:54:4e:51:0a:d3:26:a1:85:f9:ad:07:b3:de:2d:01:44:40:
         75:81:77:3b:ac:b3:f7:8e:57:de:40:99:c9:97:78:0f:8e:60:
         e0:8c:f1:37:df:3e:b1:fa:60:2a:76:21:8b:fc:bc:62:fb:4e:
         37:82:02:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCQUYxMTAvBgNVBAUTKDdBOUVERUE1RkM4ODJGODY3RUJBMzc4ODlCQ0QzQjNC
QjRBQzYyMzEwHhcNMjYwMzAxMDg0NzAwWhcNMjYwMzA4MDg0NzAwWjAYMRYwFAYD
VQQDEw02OWEzZmQwNS04MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhTSPoCKfm+jdsbZ2EAIccEh3CiOKS7BNYhHAGVjCpm3+vzn2hAGh8h24AzJ
KKIY+qFHty5W6WgVXGchefuHobqWacoL/0NxwT6GNYawztH9D5fOufGBaPrmWnUo
w/E52tDfwJ5L4qyW4UG60T0yIQPVv090soc3o4OPzpZqUwQVbPhKz1YnxMyUPEz+
xRHn1DgfYFpsZs7fkTrIT6GDbvk8o/ROmj+xqtfJfGKNnJ7945MuaoH0PGT1xcBB
/97XY8/Jr5uRexg3VwGRBbLJ6H89/OiYdFwtDATwrcrAGIs6gs6ciE3Y80DzQ16c
8lYK1KNRMaatc+RdrHSTsAFTHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDF5slAV
3ikQlujo04faku/GPvHsMB8GA1UdIwQYMBaAFHqe3qX8iC+Gfro3iJvNOzu0rGIx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJBRi8xOTFBNjM4NjM2
REQxMUYwOTY4NjIxNjZDNEY5QUUwMi9lcDdlcGZ5SUw0Wi11amVJbTgwN083U3NZ
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwN2VwZnlJTDRaLXVqZUltODA3TzdTc1lqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkJBRi8xOTFBNjM4NjM2REQxMUYwOTY4NjIxNjZDNEY5QUUwMi9lcDdlcGZ5SUw0
Wi11amVJbTgwN083U3NZakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi0aULpYxdlwjgbOBaiqTLp+SpesHhx5Fg1+aAtdKOBm/Rn95oBUvr9TMnLG+
DMle0i1C9bYSwCln1yMXUpDvl0a09RUSl0Jz1+nOImwR/qOe61cR5bR60n1mDblr
25xauKtiGNCLENrUc39GcZL0YA9tPsVVeK6dglRleyzdxXwbL7n6uXoQU6dPWw31
RTvm5RE/sOec/biFr3kn2qcrV4mAVXFdx/pczHau9BA4DFG49xIr/39sFuVPouKI
EnmanzgC5uJixVROUQrTJqGF+a0Hs94tAURAdYF3O6yz945X3kCZyZd4D45g4Izx
N98+sfpgKnYhi/y8YvtON4ICQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:50 2026 by rpki-client