Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
File:                     ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json)
Hash identifier:          J6pFcHQrvySWacO0WYFlFRQyJzLh/i7RgMZgt9sBXuI=
Subject key identifier:   70:D2:8B:82:E1:52:83:09:6C:F9:6E:5D:EB:E8:0F:0F:10:62:6E:CF
Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31
Certificate issuer:       /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
Manifest number:          FA
Signing time:             Wed 23 Sep 2026 06:01:36 +0000
Manifest this update:     Wed 23 Sep 2026 06:01:35 +0000
Manifest next update:     Wed 30 Sep 2026 06:01:35 +0000
Files and hashes:         1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: GnMbTzk9yCkrcoc1EF0dsjfNIf+G79X6YgAdYvoFBAg=)
                          2: EcCPvTURBntX7D-jzYgdgJtlTTg.asa (hash: O71lRX9/PCFd7ADxaJf0JwnKZvGT+TTWumbThM2uuOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231
        Validity
            Not Before: Sep 23 06:01:35 2026 GMT
            Not After : Sep 30 06:01:35 2026 GMT
        Subject: CN=6ab36b40-c67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:db:d9:d6:df:e3:fb:10:cf:55:db:20:6a:
                    e0:04:33:bc:b0:06:84:5a:f8:cd:d9:78:4c:8f:13:
                    06:fe:1f:2a:ad:c3:bc:d0:54:81:90:ad:ff:bf:c5:
                    f7:18:5d:b1:6e:8d:83:1b:00:3b:93:48:73:3d:1d:
                    ac:5a:b8:3e:14:ab:10:38:1d:ac:20:fa:0d:25:bf:
                    8d:9b:50:a9:58:94:9f:a3:b9:1c:ef:f8:cb:bc:38:
                    16:c1:91:fb:78:34:2b:69:0c:b3:83:75:5e:f6:a0:
                    74:c9:d9:4b:30:9f:61:44:16:92:7b:71:3f:04:aa:
                    06:3b:be:55:db:7a:41:e0:c8:4a:e1:b0:86:74:b5:
                    9b:dd:3d:ac:0b:c9:d2:cb:a7:fd:4b:af:43:6e:6f:
                    34:8c:90:f3:79:4d:8c:74:16:89:be:30:db:bb:22:
                    ab:83:1d:ec:aa:6c:77:9e:d3:f6:dc:28:52:3b:74:
                    a8:4c:20:ac:26:7a:49:20:ed:d9:e0:b5:e4:86:85:
                    9e:dd:c2:c5:8d:fb:e2:c2:42:94:5b:a6:3e:15:e9:
                    e0:27:16:03:68:84:07:de:d2:70:1a:c6:f3:f3:1f:
                    10:49:c9:00:92:fc:c1:7f:4d:be:81:78:2e:dd:e8:
                    59:58:6f:7f:84:ac:18:6b:1e:82:90:9d:20:87:58:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:8B:82:E1:52:83:09:6C:F9:6E:5D:EB:E8:0F:0F:10:62:6E:CF
            X509v3 Authority Key Identifier:
                keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:db:79:b3:cc:d8:51:ef:42:4f:51:f7:71:81:82:21:00:
         e7:f9:17:f1:99:24:f7:3c:57:77:6c:8b:e6:dd:1a:9a:73:1a:
         2f:c5:60:76:00:c0:59:50:97:61:35:69:8d:74:6b:25:0d:6c:
         c7:23:f8:37:a3:1f:03:3a:88:fc:6d:dd:45:54:42:3e:a5:e1:
         bb:1f:f2:ab:fe:db:eb:81:fe:50:3d:11:30:e5:75:c6:4b:6b:
         b5:91:dd:00:00:5a:c2:33:59:ec:00:c9:90:5d:85:98:7f:a4:
         4f:7a:5c:f1:a0:30:16:ba:90:e0:23:80:5c:9a:29:d6:46:8e:
         2a:b1:8d:bb:ae:c3:1f:e5:7f:76:61:7d:47:90:5f:14:a9:7b:
         f7:05:98:09:14:5b:81:19:21:07:ab:b7:eb:7b:bd:f5:95:21:
         dd:54:97:01:b8:e4:bd:41:bf:50:35:fb:22:c0:ee:cd:fe:b1:
         ac:b7:f0:82:05:54:ed:f8:55:d2:47:f5:4c:8e:59:70:34:58:
         c6:7d:7c:32:76:f6:83:d2:37:d7:87:95:fe:fa:27:a9:cf:44:
         a8:37:e4:b3:68:96:4f:32:28:ec:83:61:ef:ab:18:c5:ea:13:
         c7:40:62:86:bb:91:44:7b:b6:c4:03:ba:de:be:3d:27:e4:0f:
         d0:27:cb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:41 2026 by rpki-client