Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
File:                     ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json)
Hash identifier:          Lynii+Q+3LzNiHuJE/C0vYjE37o6Vwvaw2hbuD8As1o=
Subject key identifier:   AC:66:74:8C:49:B0:5B:B6:E0:D4:F5:7B:DB:CE:94:62:22:72:07:36
Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60
Certificate issuer:       /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
Certificate serial:       073E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
Manifest number:          073E
Signing time:             Thu 18 Sep 2025 20:47:55 +0000
Manifest this update:     Thu 18 Sep 2025 20:47:55 +0000
Manifest next update:     Thu 25 Sep 2025 20:47:55 +0000
Files and hashes:         1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: Uy9nrkPOYsu6OFMUsvS9/Nt+i6+IsN72OF8cvhFqHIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160
        Validity
            Not Before: Sep 18 20:47:55 2025 GMT
            Not After : Sep 25 20:47:55 2025 GMT
        Subject: CN=68cc6ffb-179c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:08:5b:58:e5:0f:76:8c:89:75:d2:6e:80:
                    b5:bc:c1:56:fd:3d:4d:93:53:0a:4f:fb:bb:5b:f4:
                    de:8b:93:16:94:47:a4:81:ac:71:c2:3b:96:22:da:
                    5b:f2:93:82:ae:1e:53:33:ef:3f:79:9f:43:59:2c:
                    90:b6:71:d2:a2:d6:4e:5a:f7:0d:a3:22:cf:21:97:
                    f1:0a:0e:c3:aa:40:c0:37:cf:5e:0b:2f:ac:17:89:
                    e7:0c:72:03:72:aa:3e:2e:cb:db:12:66:58:16:1b:
                    0b:64:d5:23:c2:1c:01:9d:51:6f:69:ee:23:12:7c:
                    5c:e0:7a:a3:b6:0e:2a:a2:3c:df:a7:d6:35:40:f8:
                    22:d8:95:86:fc:f2:08:7a:33:04:94:98:79:e4:2c:
                    2e:af:70:a2:d2:fe:10:8a:24:09:b6:a2:e2:05:3e:
                    fa:a2:21:90:43:e7:c9:ec:e9:2b:76:24:6c:8d:8e:
                    f1:b4:6d:95:4a:b5:d4:c6:d0:a5:59:27:d2:1c:55:
                    2f:d9:e0:e1:fe:d8:df:fc:86:5d:33:9a:14:70:78:
                    64:ac:a2:c9:09:ad:b1:78:54:bf:7d:6d:1c:f4:69:
                    f4:1a:42:5e:04:1f:af:36:1d:ae:d0:ed:81:6c:4e:
                    12:b3:5a:53:cc:33:98:ca:96:7c:7e:9a:f2:10:ff:
                    6c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:66:74:8C:49:B0:5B:B6:E0:D4:F5:7B:DB:CE:94:62:22:72:07:36
            X509v3 Authority Key Identifier:
                keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:8e:e0:15:2c:29:cf:13:24:f3:30:40:9c:82:18:90:c7:
         e5:1a:5e:e8:c8:7c:ae:19:33:d1:ce:56:cd:2a:57:61:50:08:
         d2:26:76:50:0b:27:52:1a:b1:59:84:f1:cf:26:d7:ff:ca:e5:
         3b:d1:85:da:37:af:ec:e5:b1:2b:2d:e0:44:85:ba:17:f1:f7:
         ff:d9:a2:34:c2:c3:c9:00:17:b2:1d:f2:2e:f6:33:23:aa:24:
         a5:5d:56:ac:bc:6e:21:a1:d8:5e:99:4c:91:60:b9:bb:e4:46:
         af:4d:94:92:84:d8:e5:ea:e5:d0:49:3f:58:b4:a4:b4:e5:33:
         f9:55:74:4f:88:f0:12:36:e3:74:c8:01:4c:fc:07:25:46:eb:
         6d:61:26:ff:db:8b:10:63:b1:8c:6f:fd:d2:09:4f:24:5c:fe:
         68:6c:fc:2c:16:c2:5c:c8:b7:b1:d5:d6:36:90:11:da:19:5b:
         df:cd:5e:14:d2:0a:b6:e2:de:a3:15:34:6f:df:3a:4d:13:58:
         08:fe:0d:40:03:75:9d:12:1f:46:29:eb:3b:02:04:f6:17:36:
         5e:10:fd:7f:74:23:07:db:27:16:d1:87:3d:01:15:ad:c0:8a:
         fd:32:57:cd:38:19:4c:ec:39:f9:1d:95:b6:de:25:60:4c:aa:
         3a:3a:1f:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND
RUU5OUMxNjAwHhcNMjUwOTE4MjA0NzU1WhcNMjUwOTI1MjA0NzU1WjAYMRYwFAYD
VQQDEw02OGNjNmZmYi0xNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAya4IW1jlD3aMiXXSboC1vMFW/T1Nk1MKT/u7W/Tei5MWlEekgaxxwjuWItpb
8pOCrh5TM+8/eZ9DWSyQtnHSotZOWvcNoyLPIZfxCg7DqkDAN89eCy+sF4nnDHID
cqo+LsvbEmZYFhsLZNUjwhwBnVFvae4jEnxc4Hqjtg4qojzfp9Y1QPgi2JWG/PII
ejMElJh55Cwur3Ci0v4QiiQJtqLiBT76oiGQQ+fJ7OkrdiRsjY7xtG2VSrXUxtCl
WSfSHFUv2eDh/tjf/IZdM5oUcHhkrKLJCa2xeFS/fW0c9Gn0GkJeBB+vNh2u0O2B
bE4Ss1pTzDOYypZ8fpryEP9s7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxmdIxJ
sFu24NT1e9vOlGIicgc2MB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1
ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW
TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABB47gFSwpzxMk8zBAnIIYkMflGl7oyHyuGTPRzlbNKldhUAjSJnZQ
CydSGrFZhPHPJtf/yuU70YXaN6/s5bErLeBEhboX8ff/2aI0wsPJABeyHfIu9jMj
qiSlXVasvG4hodhemUyRYLm75EavTZSShNjl6uXQST9YtKS05TP5VXRPiPASNuN0
yAFM/AclRuttYSb/24sQY7GMb/3SCU8kXP5obPwsFsJcyLex1dY2kBHaGVvfzV4U
0gq24t6jFTRv3zpNE1gI/g1AA3WdEh9GKes7AgT2FzZeEP1/dCMH2ycW0Yc9ARWt
wIr9MlfNOBlM7Dn5HZW23iVgTKo6Oh+x
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:13:26 2025 by rpki-client