Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File:                     ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier:          Duj/Rvp4wAJbNGg4hOJFcziAg6DMFpGmmCChp06N78M=
Subject key identifier:   D8:D6:66:21:03:35:97:86:69:11:B0:89:96:9C:7F:7E:5D:F4:4E:2D
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer:       /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number:          A2
Signing time:             Sun 05 Apr 2026 06:38:33 +0000
Manifest this update:     Sun 05 Apr 2026 06:38:32 +0000
Manifest next update:     Sun 12 Apr 2026 06:38:32 +0000
Files and hashes:         1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: ByU6J93XljKB0BnTZUmojhbFT3S9bPSe5ZTpc6Snz1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
        Validity
            Not Before: Apr  5 06:38:32 2026 GMT
            Not After : Apr 12 06:38:32 2026 GMT
        Subject: CN=69d20369-86d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:80:92:91:89:06:dd:b7:52:cb:5f:9e:f2:
                    ab:5d:a5:6d:ea:cf:b5:ec:36:fb:6d:f7:ad:36:21:
                    ef:ff:ab:0a:65:31:5c:12:1c:a1:77:55:85:e2:34:
                    f9:7d:59:1c:ec:b9:1b:9d:59:92:37:3b:80:a4:f0:
                    9b:44:66:11:5c:df:37:c9:bf:c7:83:97:d6:62:11:
                    12:06:2f:19:7c:51:ce:f8:d3:05:d6:ec:61:e8:31:
                    28:b3:17:c8:d0:02:e4:7c:ef:ec:62:79:21:93:d7:
                    f8:eb:d9:45:43:cb:04:00:cb:fe:96:6e:18:6a:d7:
                    c0:a8:1e:a4:ba:6a:df:2a:df:dc:67:b6:bd:80:1a:
                    c1:54:fe:ef:91:2a:bd:35:df:9c:f6:79:ed:37:f0:
                    8f:10:b3:1f:86:f2:51:6b:9e:68:85:ee:4f:d6:30:
                    72:32:36:76:4e:9b:38:58:85:44:d4:72:32:8f:56:
                    0e:fb:87:bd:fe:d4:ff:64:d8:5a:93:f9:19:9f:c2:
                    aa:60:5b:30:0f:c1:be:20:e6:d7:ed:4a:28:6e:e7:
                    18:4f:70:6c:f8:ad:42:f7:ac:8c:80:7c:c1:2d:dd:
                    c1:aa:ec:fd:ee:40:1e:54:b5:2e:e5:f2:18:09:54:
                    67:05:3a:9b:34:c9:05:45:82:ea:b2:8c:01:c2:1a:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:66:21:03:35:97:86:69:11:B0:89:96:9C:7F:7E:5D:F4:4E:2D
            X509v3 Authority Key Identifier:
                keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:58:cb:a0:5a:52:2e:15:5f:88:40:59:e4:ab:3f:6e:bc:
         da:d2:39:06:80:e7:47:0f:a6:c2:3c:8a:0f:a2:38:4b:5e:39:
         12:18:74:e0:1b:ef:ab:3e:5b:e3:31:ea:6a:d3:ff:c4:12:b6:
         97:09:41:ec:a0:aa:7e:64:7b:56:73:09:b0:1d:86:8e:83:c2:
         9a:b8:2a:fb:42:1d:78:b8:99:7a:b1:36:e9:de:9b:25:85:f7:
         01:7e:40:60:10:28:c2:c2:da:f4:f2:d8:7e:1f:a6:de:68:d6:
         ac:cd:0c:47:74:b7:a4:11:8f:d1:25:59:3d:a0:1b:bd:6f:07:
         d5:d6:20:2e:f1:b4:82:24:7c:4c:19:39:57:65:f6:a2:21:a4:
         c8:5b:5d:66:c1:db:1e:bc:35:60:6c:7e:4b:ef:75:c3:7a:b9:
         2c:9b:11:1e:83:96:8a:82:2a:a8:7e:98:d5:20:02:66:4f:19:
         53:83:82:7a:6c:68:e9:2d:f6:7c:45:9a:f6:e0:4f:5f:1e:15:
         1a:c4:15:3f:f2:51:ed:60:36:ee:02:9c:ab:e6:63:1a:c1:48:
         88:e6:3b:de:ea:c5:16:1e:28:79:e6:94:50:3b:2b:f2:8d:72:
         dc:0b:cf:fd:ee:35:09:2e:fd:ff:f5:5c:ca:e7:f3:b5:99:e4:
         a7:70:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:01 2026 by rpki-client