Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File:                     ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier:          ibyLX1dMSXPos4PA5A/za0BjGmFasw7jxMqJljjTYms=
Subject key identifier:   AF:4C:FA:9D:41:A1:CB:45:D0:4B:D3:A7:F6:08:17:AE:86:40:61:3F
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer:       /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number:          0189
Signing time:             Wed 19 Aug 2026 05:03:59 +0000
Manifest this update:     Wed 19 Aug 2026 05:03:59 +0000
Manifest next update:     Wed 26 Aug 2026 05:03:59 +0000
Files and hashes:         1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: VF26loPLluUA+OezO/yTxgEbg8lNVpDxgOHJy21M+KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
        Validity
            Not Before: Aug 19 05:03:59 2026 GMT
            Not After : Aug 26 05:03:59 2026 GMT
        Subject: CN=6a85393f-465e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:31:c0:5b:f9:9a:c2:b0:4f:ca:7b:4a:96:
                    42:b0:0b:84:9b:04:dc:f5:9f:23:54:48:fd:08:29:
                    51:ee:94:63:20:6e:ac:45:7a:c2:66:bc:f5:9d:35:
                    3a:24:7d:89:45:9f:04:32:28:cc:72:9c:64:70:5d:
                    db:dc:19:6c:48:20:62:0a:82:9f:7c:d3:b0:1d:02:
                    ed:cd:df:25:91:2a:2e:58:55:50:6a:08:72:54:9f:
                    c4:35:5e:db:07:7e:8a:dd:06:67:d8:4d:15:75:c0:
                    f7:71:2b:e2:43:a2:df:49:95:3c:e4:e1:ac:fb:e7:
                    68:59:90:aa:70:70:ec:e7:a3:07:08:7f:1d:a8:20:
                    7e:2e:79:4e:b3:1e:f0:84:a7:9a:87:83:52:b5:4c:
                    21:60:7e:bb:83:93:9f:6a:41:b3:22:b7:9e:ca:81:
                    6e:a2:71:d6:5a:79:63:99:eb:ce:12:b6:a1:c4:b2:
                    0f:6a:7b:3a:e5:35:03:77:7a:45:00:cc:da:88:42:
                    6f:0e:e4:9e:c9:d9:2a:77:60:03:f7:13:34:5d:e0:
                    82:2d:99:54:40:a4:07:c9:c1:d9:02:ea:8e:2c:c9:
                    86:ed:19:58:13:8e:20:31:b5:18:71:16:c0:60:e0:
                    0f:bf:f5:33:33:63:23:21:53:0b:e7:73:5b:fc:c7:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:FA:9D:41:A1:CB:45:D0:4B:D3:A7:F6:08:17:AE:86:40:61:3F
            X509v3 Authority Key Identifier:
                keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:c6:4d:79:6c:6a:f4:30:f0:8b:32:ca:80:f1:49:34:47:
         1c:df:17:56:2e:f8:20:c0:90:d7:31:eb:f6:c3:30:d0:22:39:
         6f:15:79:5f:79:ae:90:55:3a:c8:ba:f4:d4:03:5f:5e:ea:80:
         75:37:a8:0d:e5:ec:2f:3d:b3:ab:1a:a9:fe:43:2b:7d:6c:47:
         c7:48:4f:6e:b7:53:b0:19:d1:58:cc:9d:28:5d:43:7a:f5:b0:
         b4:f7:00:bd:5f:a0:62:10:c4:f2:1c:03:89:e6:d8:eb:da:92:
         67:5b:ed:c9:86:8d:d4:7f:f1:ba:fc:7b:88:61:89:c1:5b:28:
         51:e0:79:6e:cc:5f:c1:78:e1:89:bd:0f:ef:16:58:94:7b:76:
         23:78:de:f1:bf:fa:93:c1:ba:cc:fa:87:64:e9:b3:57:06:74:
         8a:cc:b6:dc:bc:9b:4a:f5:cc:4d:41:5a:92:61:3a:60:c5:bf:
         6c:da:a5:07:ef:c9:9b:3d:e9:f0:32:00:3c:64:d9:40:ec:ee:
         a1:7e:52:4a:b6:a4:b3:06:b7:53:d4:df:1a:04:dc:c5:32:fd:
         1c:9a:3f:26:9b:70:2f:3d:08:0d:4f:3b:46:e5:54:c4:1b:c7:
         ec:0c:a6:99:d5:39:c3:e0:78:b7:3a:23:e0:a6:91:20:8b:47:
         df:9e:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:16 2026 by rpki-client