Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
File:                     7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json)
Hash identifier:          ByGtNIOVIRkP7ahbdXNhEejQ39z9q8fUY2m9iXPkr3E=
Subject key identifier:   5C:70:0F:11:3E:63:B6:B8:71:69:CB:69:E3:E6:FD:35:4D:72:6F:6B
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Certificate issuer:       /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial:       354C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
Manifest number:          3549
Signing time:             Mon 22 Jun 2026 15:07:11 +0000
Manifest this update:     Mon 22 Jun 2026 15:07:11 +0000
Manifest next update:     Mon 29 Jun 2026 15:07:11 +0000
Files and hashes:         1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: nVkev6lW+i9mj3QkrP5slYWZAFZ+vr1roKopEc/L0Wo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
                          rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
        Validity
            Not Before: Jun 22 15:07:11 2026 GMT
            Not After : Jun 29 15:07:11 2026 GMT
        Subject: CN=6a394f9f-5f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:d4:11:f8:87:14:d1:5d:69:ee:df:1c:78:
                    a1:fc:c2:96:15:8b:b1:dc:97:74:ce:25:af:18:52:
                    23:86:7e:71:97:26:e3:1d:93:7a:bd:b2:f4:c5:65:
                    fc:8d:56:cd:84:97:d0:30:ec:c4:dc:d3:31:9c:00:
                    a7:bc:ca:75:62:48:b4:f9:93:70:6f:50:fd:ad:4a:
                    76:91:9d:75:e8:02:99:e1:95:5b:6f:d1:23:ef:fc:
                    d7:ac:5a:94:80:ef:22:9e:ba:ca:5d:a1:76:19:19:
                    57:5c:3c:77:2d:b1:a4:c3:4a:21:13:85:a6:61:99:
                    a8:30:35:f6:7f:f9:1f:26:67:01:11:75:83:2e:23:
                    8c:14:4d:78:94:91:2b:5a:72:1f:89:53:02:e8:b4:
                    a8:35:f3:ff:ce:db:ed:1b:88:77:09:58:83:17:84:
                    ba:84:19:4e:2d:e0:c6:31:b3:ec:3e:51:23:f2:39:
                    7e:b0:70:9e:ee:3f:c6:3a:96:70:48:b5:b5:81:4c:
                    bc:3b:d9:68:11:b8:06:1e:91:fe:6b:f6:72:e7:35:
                    c7:53:a5:66:59:f8:b6:9f:1e:6d:99:62:c1:7d:20:
                    53:74:da:42:23:b8:3d:68:b2:9c:2a:00:be:cb:ad:
                    be:36:8f:9a:86:8d:d5:4b:4c:70:38:5b:73:2f:3d:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:70:0F:11:3E:63:B6:B8:71:69:CB:69:E3:E6:FD:35:4D:72:6F:6B
            X509v3 Authority Key Identifier:
                keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:19:8a:2c:bd:d9:bb:1d:c1:5d:d9:c6:90:8f:e8:b1:9a:8d:
         90:54:5d:c3:16:e4:99:1a:10:d9:11:ad:1b:d8:f3:40:42:de:
         1b:5e:b7:c6:1a:1f:85:7d:c8:d0:0d:2e:b6:50:ac:36:b4:9b:
         ed:e3:d7:17:58:b8:e7:28:3b:6c:2b:c1:db:0d:03:e0:01:c9:
         27:48:8a:dc:1f:64:ab:c2:46:d7:01:f7:a5:30:73:ec:c8:80:
         1a:e8:bc:c7:36:b7:de:da:14:24:30:b4:25:08:14:e2:7d:af:
         e7:eb:df:5a:51:27:48:fe:83:06:f4:a0:57:27:2b:4f:b1:c5:
         01:82:9a:79:16:48:ce:75:9d:a3:bb:9a:24:ee:11:68:f0:c1:
         21:b4:13:f3:42:79:dc:82:6b:43:ac:31:6b:6d:e7:29:fc:29:
         51:2b:9c:44:2c:6d:f5:02:b2:29:1c:15:5f:57:d4:ac:2b:01:
         c6:c8:5a:8b:bb:4d:74:bf:5a:e5:53:1b:48:c8:d0:31:69:74:
         d4:fe:00:c0:01:02:52:19:02:29:97:60:fd:56:07:67:ba:01:
         8a:f7:66:62:8b:8d:01:b0:6f:5e:c5:90:f2:ef:43:09:8c:13:
         f9:d4:9a:17:76:6e:dc:a0:78:80:c0:5c:25:e2:5c:d1:d0:23:
         0f:83:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:13 2026 by rpki-client