Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File:                     l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier:          QINcIiXsGpZN3HevqtLa9bsvZg8wvnJdAOgvUnFTYY8=
Subject key identifier:   F9:C6:4A:DB:2C:EA:CD:DD:D6:90:E7:53:34:5D:D3:5D:E7:E4:4B:7F
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer:       /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number:          39
Signing time:             Fri 05 Jun 2026 09:01:46 +0000
Manifest this update:     Fri 05 Jun 2026 09:01:46 +0000
Manifest next update:     Fri 12 Jun 2026 09:01:46 +0000
Files and hashes:         1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: rHQfiDdAi8rW+TDEiLqKvVkCOcpy3aAZthC0NeE2l5E=)
                          2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
                          rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
        Validity
            Not Before: Jun  5 09:01:46 2026 GMT
            Not After : Jun 12 09:01:46 2026 GMT
        Subject: CN=6a22907a-cf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:e6:fc:99:02:7c:c0:57:26:54:a1:38:1b:
                    01:f2:40:aa:40:10:7d:0b:0f:8c:4a:ac:ec:b8:f1:
                    44:dd:17:9c:d6:57:47:f0:cd:e5:83:78:1c:76:40:
                    a9:4a:bc:7d:43:18:c4:ed:ca:d2:4a:48:89:d4:36:
                    ab:6d:19:e1:70:3b:1d:3d:af:5d:9d:48:6c:e6:36:
                    b0:12:71:3f:c4:a2:c3:a7:d3:c4:57:d4:8f:f4:27:
                    af:41:e3:16:6f:1a:6f:6e:54:1d:4b:b0:df:b8:54:
                    00:03:fc:37:f8:cf:c7:22:8d:80:57:89:44:95:ed:
                    de:8b:3c:af:f6:14:a1:b2:6e:3d:29:30:46:c7:4b:
                    ee:12:12:f6:77:29:e8:33:4c:2a:c5:75:c4:23:ed:
                    bf:2e:bb:1e:bc:a9:6b:a4:24:83:f1:d2:02:88:e0:
                    a3:36:a9:0a:e1:0b:f5:6b:24:99:c2:0a:84:fd:05:
                    90:a7:9b:9d:79:1b:05:7b:57:1b:75:6f:2e:e0:38:
                    b5:13:d6:f7:d0:94:04:f0:db:5c:07:68:54:09:1a:
                    7c:40:d8:27:d9:c0:17:bc:e3:bc:cf:d2:be:11:b1:
                    d3:8f:fd:62:32:ba:3b:00:64:0a:01:52:18:18:48:
                    37:fe:8e:b8:f4:12:f7:c3:55:b8:18:64:64:9a:99:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C6:4A:DB:2C:EA:CD:DD:D6:90:E7:53:34:5D:D3:5D:E7:E4:4B:7F
            X509v3 Authority Key Identifier:
                keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8d:61:2c:5f:cb:30:1c:21:5e:6f:bb:67:4b:af:a6:93:f8:
         1f:ee:64:39:44:4f:0f:19:21:12:23:d8:da:6e:43:d4:72:0d:
         12:53:09:d9:50:b6:e1:e7:8d:01:e8:0b:55:3d:95:d9:2e:dd:
         a7:ed:63:80:20:bc:21:7a:bd:68:7b:7f:67:c7:ab:b4:7d:13:
         8e:d1:18:a9:72:94:1f:0a:68:85:01:ca:06:dc:02:ed:5f:b3:
         d3:27:82:74:f7:4f:55:dc:7c:a2:a3:0b:9b:90:35:fe:ce:ad:
         ec:0b:d8:2d:4f:1e:45:8c:58:56:69:a3:bf:b8:28:02:38:b4:
         77:56:47:a0:1b:f7:12:04:8b:eb:ba:30:be:87:e0:c6:2e:d3:
         fc:da:83:36:df:99:94:f7:cc:c3:88:df:9b:b5:23:06:9e:4e:
         cf:85:46:fd:d0:5d:fd:04:b3:c7:2e:6e:3e:d6:55:7e:5e:7a:
         67:3c:20:fa:2e:04:a1:de:82:5f:a1:8e:95:19:a5:18:18:64:
         17:45:7c:92:fe:ca:58:d3:bb:ce:d9:24:6e:12:31:20:e6:18:
         b6:ef:c3:df:97:0b:09:1c:51:83:08:1d:57:8d:c9:42:0b:c0:
         76:5d:4c:db:96:47:6d:67:a1:c2:23:db:bf:e4:5b:d1:01:45:
         4d:55:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:04 2026 by rpki-client