Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File:                     l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier:          CnkOB2xMvujR5Zmfqh/WMw0Gav4RXqR1Ud9O7FnhZaw=
Subject key identifier:   72:AD:32:B4:E1:CA:00:15:90:81:34:86:00:C8:40:C8:BA:5B:A9:5B
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer:       /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number:          51
Signing time:             Thu 23 Jul 2026 10:19:18 +0000
Manifest this update:     Thu 23 Jul 2026 10:19:17 +0000
Manifest next update:     Thu 30 Jul 2026 10:19:17 +0000
Files and hashes:         1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: pjYuZ+2luDIio5FP02coVoJxddAAzrzvo9giUKOMkqc=)
                          2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
                          rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
        Validity
            Not Before: Jul 23 10:19:17 2026 GMT
            Not After : Jul 30 10:19:17 2026 GMT
        Subject: CN=6a61eaa6-e214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:fe:44:3f:68:c5:e3:17:4e:44:c6:e7:bf:
                    a1:c9:e0:af:1f:5c:09:1d:15:97:27:ac:68:6a:27:
                    0c:45:30:9d:df:12:fb:49:b7:4a:8d:8b:98:81:bd:
                    90:f9:d5:3d:7b:0b:99:06:fe:2e:3c:ea:d3:e6:73:
                    c9:01:94:05:22:6d:0c:54:22:4d:c4:c4:00:95:fa:
                    83:11:94:f1:7d:e4:c0:28:86:08:ef:7e:eb:bf:3e:
                    b8:2d:55:e2:c4:d5:43:a4:83:2c:ac:6d:e2:82:3f:
                    60:ba:18:3e:f9:d0:bc:b4:7d:37:aa:c0:20:7c:a2:
                    ac:77:05:36:b5:e0:54:98:eb:43:46:e5:55:b6:79:
                    02:6a:bc:d7:89:5c:5f:54:0f:2d:54:1c:fa:65:ed:
                    8e:ce:bd:04:3e:97:9a:15:f6:54:02:87:ee:c0:5c:
                    ee:b4:ea:0f:03:58:49:d4:06:ad:b1:07:8c:95:ea:
                    46:99:4c:33:9f:da:3b:15:7b:1d:64:f6:8d:2e:2b:
                    69:0e:3b:0f:26:4a:9c:8c:da:74:4f:7c:88:fa:e8:
                    de:12:c1:09:55:40:28:d5:c9:01:e1:4e:49:5d:38:
                    d2:09:4d:cc:c9:23:d8:3b:8d:24:0c:a7:f8:d2:d9:
                    bb:8a:79:65:90:8f:ac:e4:d0:4f:1d:fb:04:ff:68:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AD:32:B4:E1:CA:00:15:90:81:34:86:00:C8:40:C8:BA:5B:A9:5B
            X509v3 Authority Key Identifier:
                keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:d0:ac:b6:f9:51:fc:3f:ed:26:16:76:ff:a7:88:4d:66:
         49:06:9c:8b:cb:31:ac:d3:8a:1c:f3:36:7b:a3:03:96:89:ff:
         02:8d:3b:9f:e6:4c:44:76:30:cd:c1:b7:39:1a:29:92:49:57:
         5b:42:c1:c1:a2:60:45:86:d1:ec:1a:e2:75:55:74:29:3e:23:
         33:82:ce:81:b7:5b:95:07:7d:14:56:83:9b:ba:fb:d7:ec:ec:
         c3:4a:37:9b:dc:dc:3e:64:10:71:d6:07:46:de:32:ae:13:58:
         0f:c2:72:5d:2d:77:35:68:bd:3b:99:a0:fa:d9:37:20:02:11:
         83:02:2d:b0:9f:e0:8d:3c:d9:90:02:47:a4:9b:de:29:f8:14:
         b2:7a:5f:20:ff:d1:7d:9d:7f:e5:66:b2:17:54:84:cd:85:67:
         b0:8f:9f:f5:3e:14:b0:bf:d6:db:79:3f:b7:d2:fc:cc:80:a4:
         48:d7:59:e8:58:b3:63:8c:75:66:c0:7f:8f:45:44:41:3b:40:
         33:a7:59:f3:c5:be:0d:9c:9e:38:ff:a2:3b:00:71:60:50:58:
         04:f0:7d:05:91:2f:b5:39:47:f7:80:b0:2b:de:9d:94:d7:50:
         31:53:bf:ba:9b:75:3b:c1:0f:60:cf:dd:1a:3d:b0:14:d7:db:
         30:d9:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:49 2026 by rpki-client