Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
File:                     7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json)
Hash identifier:          kc+O7fjmaER4p5jLbjwCg7d6vTVQUlH9JhI/TWQquIc=
Subject key identifier:   6C:10:46:12:D1:E4:A5:F1:5A:AB:0B:17:24:13:3B:F6:C4:69:90:B9
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Certificate issuer:       /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial:       3523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
Manifest number:          3520
Signing time:             Sat 04 Apr 2026 15:05:57 +0000
Manifest this update:     Sat 04 Apr 2026 15:05:57 +0000
Manifest next update:     Sat 11 Apr 2026 15:05:57 +0000
Files and hashes:         1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: fkjjfYWhIImVfNsLfqlaT120t5UYAurPwXzUmjG1168=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
                          rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13603 (0x3523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
        Validity
            Not Before: Apr  4 15:05:57 2026 GMT
            Not After : Apr 11 15:05:57 2026 GMT
        Subject: CN=69d128d5-36d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:39:8c:65:35:b1:aa:2c:d2:81:a8:54:af:
                    bc:64:47:5c:42:04:9d:b4:6e:80:e9:ab:d1:75:97:
                    af:30:8f:5f:1e:bc:f8:6c:b7:8d:89:16:1b:cf:14:
                    4c:46:36:c7:6e:71:c7:c6:d2:48:9a:36:57:e7:56:
                    27:ae:6b:5d:2a:14:14:41:db:98:ce:bf:08:7d:75:
                    3d:96:b0:c6:58:8b:0d:22:38:f2:48:62:1c:d1:62:
                    f9:11:60:0e:97:a1:00:59:fa:0a:e8:dc:a8:35:77:
                    8e:88:0e:f4:8e:6e:28:68:dd:39:6d:39:a7:73:eb:
                    51:64:04:b6:96:87:13:32:14:d4:7f:8e:0d:c9:04:
                    91:c2:ab:77:63:c5:17:8f:f9:aa:f7:f7:30:01:da:
                    0d:41:d1:d3:36:66:33:a8:a9:e7:21:90:16:23:59:
                    37:e2:95:b0:6c:7f:0f:63:9d:4d:7f:88:c2:dd:59:
                    bf:87:83:fa:e2:45:e4:36:32:8b:f2:10:f7:af:74:
                    f2:e8:0f:a8:5e:55:43:51:12:44:04:1b:9d:ab:47:
                    6f:6c:4e:25:53:75:d2:68:fd:18:f3:2b:08:4d:7e:
                    8d:3e:3a:3c:57:de:56:fd:a6:44:da:96:72:f3:b2:
                    66:ec:98:4e:64:00:ea:fe:43:de:ae:2d:a5:ff:1c:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:46:12:D1:E4:A5:F1:5A:AB:0B:17:24:13:3B:F6:C4:69:90:B9
            X509v3 Authority Key Identifier:
                keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:f8:92:c1:a7:9d:31:20:fe:5b:58:73:e0:c8:c1:4d:41:
         d7:7a:5b:ff:89:ba:db:a2:67:1b:ec:e3:b1:84:c0:7b:73:6a:
         23:4a:76:49:98:49:df:6d:9d:63:9c:4a:b5:d5:7b:ef:05:a6:
         0c:75:da:6e:3e:03:1f:f2:08:a8:38:5b:23:6c:d7:4d:9d:3f:
         4a:14:b7:24:ea:43:3e:75:72:0c:3e:f4:e1:15:dd:70:59:18:
         d4:ba:33:9a:57:75:37:17:95:6d:c6:2a:df:8d:11:ea:2b:ea:
         77:43:8a:75:6a:9d:24:e1:9d:30:40:2a:6a:f1:09:89:a8:a9:
         fb:6c:8a:97:77:8a:5d:79:51:80:54:93:0c:20:2d:93:10:fc:
         c1:b1:1e:38:4b:b3:55:ef:98:80:08:75:bc:2e:39:1b:c8:e8:
         e0:bc:45:80:34:7d:e6:18:3c:2d:1a:26:a8:93:4d:43:fa:c8:
         d2:31:ae:66:80:99:d0:18:d4:cc:1c:1d:a0:8d:bd:04:9c:59:
         b9:4e:b8:22:58:91:cc:25:d2:e0:62:de:24:85:09:ad:f6:f8:
         fc:83:5f:3d:fa:fc:25:03:50:70:4a:a8:b4:ec:e6:7d:e9:11:
         a5:45:7b:04:a1:47:63:71:00:a1:e8:03:39:f4:bf:34:da:82:
         1d:fa:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:50 2026 by rpki-client