Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File:                     l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier:          c0DSXWu96uVEnGpODhS4dO7CnBmPmpFrZ7tKv88wo1Q=
Subject key identifier:   42:DD:91:FF:FB:3F:CC:22:24:63:65:E0:4E:19:C2:C7:95:2F:02:33
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer:       /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number:          8C
Signing time:             Sun 15 Nov 2026 07:48:49 +0000
Manifest this update:     Sun 15 Nov 2026 07:48:49 +0000
Manifest next update:     Sun 22 Nov 2026 07:48:49 +0000
Files and hashes:         1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: Dzw4jG8wxdFBJ2EcYe6hYuRzTSt8YNJ1lb0DFJSUrpw=)
                          2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
                          rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
        Validity
            Not Before: Nov 15 07:48:49 2026 GMT
            Not After : Nov 22 07:48:49 2026 GMT
        Subject: CN=6af963e1-9ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:13:35:b8:7d:26:86:f9:ce:dd:12:ba:44:
                    9b:91:a8:65:f4:e3:2c:33:ff:cd:7f:50:2c:a7:6b:
                    35:23:a9:f6:48:6f:14:32:42:34:79:58:74:44:3c:
                    00:d3:01:07:36:24:8f:f9:45:29:02:4e:ea:03:47:
                    e0:ab:79:cf:bd:cd:75:bc:57:73:ed:8d:31:8a:56:
                    bb:28:1e:15:a0:06:20:0f:d0:b0:8e:ff:fe:b9:ba:
                    92:cb:c0:60:45:c2:4b:e2:69:2b:62:57:68:d0:d5:
                    2d:86:12:f5:6f:fe:c1:21:00:9e:80:c5:1a:10:1e:
                    fe:f6:40:7d:92:a2:31:de:fd:b1:b4:33:96:e9:89:
                    4c:3f:4e:54:8c:5f:34:95:2b:24:a7:b0:02:d8:2b:
                    aa:30:3a:d7:af:78:f4:14:21:69:62:8d:f1:50:56:
                    3e:a6:02:6b:9d:06:81:ab:41:08:4a:59:1a:bb:6b:
                    e8:51:bb:ee:b8:99:f5:28:48:25:e4:e2:69:a3:72:
                    3f:d0:f9:f6:f9:b0:16:4c:c8:64:61:58:bc:49:77:
                    fd:cd:86:56:28:9a:12:ef:a8:4e:88:d3:08:2b:59:
                    41:d2:94:6a:b6:4a:d0:9a:24:e5:a5:d9:4f:f3:a6:
                    7f:b0:b5:03:2c:29:5b:c8:a5:cf:92:f3:df:61:f1:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DD:91:FF:FB:3F:CC:22:24:63:65:E0:4E:19:C2:C7:95:2F:02:33
            X509v3 Authority Key Identifier:
                keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:97:1d:ef:1a:e3:a6:fb:fc:bb:ff:e4:d0:cf:6a:bc:0b:2c:
         7f:cb:13:70:c5:5d:f4:83:55:04:19:63:88:18:59:8f:a0:94:
         af:3b:7f:b1:94:45:ed:77:dc:16:c7:9e:62:ea:f5:af:ce:cf:
         c3:c9:3f:52:9d:2b:0c:5f:4e:3a:35:f2:74:8e:12:cb:45:83:
         13:cd:9d:54:4b:9d:be:c6:f3:61:67:99:27:5f:0b:8b:41:12:
         37:97:94:75:15:e0:ba:75:14:2f:e9:53:3b:77:ee:01:39:19:
         bf:4a:b4:7d:54:9d:75:a3:28:54:ab:1f:5b:ee:23:93:9e:b1:
         f6:de:a5:b3:7c:dc:e7:58:eb:11:41:66:87:0d:52:e1:4e:06:
         23:bd:32:b5:0a:b5:2a:bc:06:c1:30:a2:91:73:61:1f:8f:69:
         4e:53:b6:a5:8d:38:d2:66:5d:62:14:43:9e:0f:bc:65:47:56:
         5e:b8:c7:fb:e0:0d:f4:fe:fb:14:b3:ca:5e:2d:bf:14:e8:8a:
         40:62:03:43:d1:6c:ac:ac:9f:93:2c:12:00:f5:64:3d:8e:85:
         49:ce:48:d9:0b:20:32:49:a5:ef:e6:48:f8:c3:a4:98:54:d8:
         f7:5f:b0:9f:a9:76:fa:d6:fb:d7:c6:7e:b4:97:15:a4:8b:96:
         35:d6:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:29 2026 by rpki-client