Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File:                     l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier:          DOOGnT/Jeqlo/HqvIgmr1uYv8FvSBye9lQQpZIacGO8=
Subject key identifier:   5D:48:D8:0F:4D:5D:B0:A5:DA:A9:8B:29:96:44:D4:BD:19:E1:E4:3E
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer:       /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number:          67
Signing time:             Thu 03 Sep 2026 08:17:49 +0000
Manifest this update:     Thu 03 Sep 2026 08:17:48 +0000
Manifest next update:     Thu 10 Sep 2026 08:17:48 +0000
Files and hashes:         1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: +ZmoZ/SrSgsy92x9AtAbsJdefic9vwKMSa/LxMwZIjE=)
                          2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
                          rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
        Validity
            Not Before: Sep  3 08:17:48 2026 GMT
            Not After : Sep 10 08:17:48 2026 GMT
        Subject: CN=6a992d2c-3d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:57:17:19:3d:56:4f:90:64:83:1f:c0:0a:
                    0a:88:0f:77:03:e8:7e:3d:89:6b:89:7b:ae:e7:62:
                    37:b5:7a:b5:5d:62:77:d9:11:23:09:1b:a9:0a:6e:
                    5f:f6:54:2d:03:45:79:5b:85:78:36:b7:17:5f:f4:
                    7e:d3:e8:d5:68:43:aa:e1:0f:e4:f1:d9:94:11:2d:
                    ff:2d:a4:d1:fe:83:46:92:9f:76:df:58:8a:6a:b9:
                    03:0f:49:83:22:cd:65:07:0a:3a:71:10:e2:d5:93:
                    9c:b1:16:d7:ac:a5:02:ea:36:bb:60:db:a1:d6:99:
                    9c:5d:8c:dc:87:62:1c:75:38:a9:05:b2:83:2e:5e:
                    46:43:4b:5c:52:df:db:cc:09:0b:71:b9:2e:4f:8b:
                    39:bf:30:48:7f:e1:d5:5a:b5:65:8e:37:b3:d6:80:
                    09:f7:64:ea:df:85:9f:7f:2c:3e:81:cc:98:e2:40:
                    b5:b6:3e:1c:f0:c4:19:91:73:1b:ef:ba:cd:10:64:
                    f1:6f:e3:ae:d9:3e:8f:00:f7:76:d4:5b:4f:fe:fd:
                    e6:47:a1:f8:53:0b:e9:75:3f:7f:3f:4f:b6:88:bf:
                    98:83:94:92:fb:0c:fc:68:5a:db:79:78:bd:4e:e0:
                    42:db:d7:92:4e:a7:2b:81:5f:d7:48:7e:94:8e:08:
                    5a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:D8:0F:4D:5D:B0:A5:DA:A9:8B:29:96:44:D4:BD:19:E1:E4:3E
            X509v3 Authority Key Identifier:
                keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:d5:9c:85:99:03:99:d8:66:c3:46:40:7a:83:8b:cd:8b:
         57:aa:ee:31:dc:25:23:22:1d:4f:86:7c:51:d9:cd:98:03:60:
         79:93:09:67:31:ef:30:66:9d:3f:93:e6:38:9d:3a:34:b7:f7:
         03:f8:48:5c:b7:8a:c6:b7:bb:6f:19:31:43:c2:28:29:1a:71:
         c0:49:1c:00:a0:82:c1:dc:8b:e9:d6:1e:f7:61:2b:4f:84:da:
         c5:00:de:db:93:d5:85:1c:b0:8b:37:38:99:b2:40:33:2f:1d:
         b2:74:6a:9a:b8:6f:b2:35:2b:5f:e0:5e:05:e8:56:f7:7f:ed:
         3b:40:c4:29:de:5f:f9:45:d8:79:44:6c:51:98:d1:fa:88:93:
         66:e8:a7:24:74:c4:6b:bc:73:ba:d5:23:09:dd:74:88:c7:7f:
         8e:1e:44:01:62:54:88:34:d0:b7:60:07:d6:49:3e:fb:20:32:
         c9:65:c5:3b:62:4b:e2:df:12:e5:d7:ac:90:c2:bf:78:6b:4e:
         cc:c5:cd:61:be:e0:d5:61:8c:74:43:eb:fd:a1:cc:d6:7c:78:
         3b:83:25:14:57:d1:c5:82:cc:42:02:5a:e6:ba:45:3c:49:04:
         0b:e2:cf:ab:51:9f:c0:79:fd:02:3f:4e:a9:40:8d:8e:42:7f:
         2a:67:7c:04
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MDZGRjExMC8GA1UEBRMoOTdCNDQ2MjE2Mzc5ODU3NzAwQUQ2NUI5RkFGRUVDN0M5
MjJDMjJEODAeFw0yNjA5MDMwODE3NDhaFw0yNjA5MTAwODE3NDhaMBgxFjAUBgNV
BAMTDTZhOTkyZDJjLTNkMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2wlcXGT1WT5Bkgx/ACgqID3cD6H49iWuJe67nYje1erVdYnfZESMJG6kKbl/2
VC0DRXlbhXg2txdf9H7T6NVoQ6rhD+Tx2ZQRLf8tpNH+g0aSn3bfWIpquQMPSYMi
zWUHCjpxEOLVk5yxFtespQLqNrtg26HWmZxdjNyHYhx1OKkFsoMuXkZDS1xS39vM
CQtxuS5Pizm/MEh/4dVatWWON7PWgAn3ZOrfhZ9/LD6BzJjiQLW2PhzwxBmRcxvv
us0QZPFv467ZPo8A93bUW0/+/eZHofhTC+l1P38/T7aIv5iDlJL7DPxoWtt5eL1O
4ELb15JOpyuBX9dIfpSOCFpbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXUjYD01d
sKXaqYsplkTUvRnh5D4wHwYDVR0jBBgwFoAUl7RGIWN5hXcArWW5+v7sfJIsItgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzM5NjlCM0NBMTFG
RDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhjQXJXVzUtdjdzZkpJc0l0
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbDdSR0lXTjVoWGNBcldXNS12N3NmSklzSXRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw
NkZGLzM5NjlCM0NBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhj
QXJXVzUtdjdzZkpJc0l0Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+5NWchZkDmdhmw0ZAeoOLzYtXqu4x3CUjIh1PhnxR2c2YA2B5kwlnMe8wZp0/
k+Y4nTo0t/cD+Ehct4rGt7tvGTFDwigpGnHASRwAoILB3Ivp1h73YStPhNrFAN7b
k9WFHLCLNziZskAzLx2ydGqauG+yNStf4F4F6Fb3f+07QMQp3l/5Rdh5RGxRmNH6
iJNm6KckdMRrvHO61SMJ3XSIx3+OHkQBYlSINNC3YAfWST77IDLJZcU7Ykvi3xLl
16yQwr94a07Mxc1hvuDVYYx0Q+v9oczWfHg7gyUUV9HFgsxCAlrmukU8SQQL4s+r
UZ/Aef0CP06pQI2OQn8qZ3wE
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:38 2026 by rpki-client