Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File:                     l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier:          7l7w2+Bd9GdCn+cHs1+vtmx2GFUuFqAz4ZjwlXy/jb0=
Subject key identifier:   B4:E1:71:82:81:4F:AF:2E:AB:71:B7:5A:8A:DC:C9:35:31:20:56:52
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer:       /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number:          71
Signing time:             Wed 23 Sep 2026 07:41:59 +0000
Manifest this update:     Wed 23 Sep 2026 07:41:58 +0000
Manifest next update:     Wed 30 Sep 2026 07:41:58 +0000
Files and hashes:         1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: xuBlSMsilUuOSdxTKHrunLEIhg7l/b8j2BoucMqDyaA=)
                          2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
                          rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
        Validity
            Not Before: Sep 23 07:41:58 2026 GMT
            Not After : Sep 30 07:41:58 2026 GMT
        Subject: CN=6ab382c7-8ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:a0:1a:dc:73:23:b7:af:c8:08:46:e2:bd:
                    27:9f:68:fa:1c:2e:79:bb:0b:ae:ef:50:69:e6:08:
                    aa:0d:02:04:97:06:3d:4b:35:40:5e:f3:89:b2:ce:
                    cd:76:4e:3b:a6:2f:04:c5:3b:1b:97:bc:66:8e:ec:
                    f0:87:e7:fa:56:dd:dc:c3:87:4d:a7:57:a1:eb:d5:
                    12:f4:06:32:ab:ac:f5:23:5b:97:e1:6e:1d:32:8c:
                    32:7d:e2:fc:c5:68:cd:0f:94:28:e5:59:b2:27:d5:
                    f3:17:6c:ee:a3:37:58:fc:7c:ca:6e:3c:d5:7c:3e:
                    d4:64:0c:6c:8b:4d:b0:f9:cb:fb:c5:19:35:6d:b7:
                    7e:d3:bc:95:c0:e6:ad:b8:dc:24:d1:50:af:4e:7b:
                    43:54:90:07:89:e0:71:c6:b2:01:71:20:2d:8d:f2:
                    18:bc:af:86:f9:e5:78:bc:39:43:d6:ac:9b:80:1e:
                    10:2f:ee:99:0e:fb:de:c2:72:41:fe:69:19:42:7d:
                    95:31:9d:b8:94:df:e6:b6:e6:45:e8:bf:fe:bc:d5:
                    8b:aa:c7:0c:16:8b:e0:f8:b2:89:96:2f:18:3f:02:
                    7d:e6:8a:3d:7d:74:50:72:37:1b:50:65:b3:b4:79:
                    88:05:be:ba:04:5e:45:68:16:0e:db:db:1d:e5:85:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:71:82:81:4F:AF:2E:AB:71:B7:5A:8A:DC:C9:35:31:20:56:52
            X509v3 Authority Key Identifier:
                keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:34:04:12:5a:9b:ba:89:72:7f:26:6d:a0:4d:38:a0:3e:
         3e:9d:b6:85:04:a5:ce:4c:e7:b3:68:de:63:d0:a8:31:64:18:
         f8:aa:81:97:83:b8:e7:5d:fb:ad:00:88:1f:45:0b:91:7c:2b:
         b7:e5:db:96:1b:9c:6a:5f:bf:a0:52:1b:11:69:ef:7b:54:40:
         4d:24:80:c6:6c:5d:c1:42:0d:a1:ae:38:41:e2:ef:3d:6d:49:
         5a:0c:74:31:6f:4f:df:fb:5c:ac:c0:d9:6c:2d:ed:0a:bd:da:
         aa:95:a1:81:47:30:fd:3d:71:82:a6:9c:6f:1f:a7:d3:5d:6c:
         87:b7:7c:34:6f:89:ce:22:48:e4:f8:d0:83:c9:0e:d0:92:ef:
         46:9a:2d:57:8c:d8:c7:31:6d:13:6c:1f:2b:8c:06:63:11:62:
         1e:c3:34:84:27:54:12:79:b5:af:e8:8f:b8:9b:ac:76:e2:3d:
         b5:b2:c6:82:03:d1:3d:b4:36:e6:70:34:64:22:fb:98:82:68:
         a5:ce:17:ee:73:7b:e1:b4:71:fa:02:8a:c5:2b:d4:d7:b0:44:
         cb:4d:ac:3a:30:b9:b8:e1:92:1d:c1:26:05:ef:13:49:47:a2:
         2e:24:34:cb:af:c4:1c:10:a8:8d:32:7c:88:5c:1b:66:38:2a:
         ff:d4:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:34:46 2026 by rpki-client