Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          oTYTC22haa14bMPXqvqxb+TJhz5wl0ADTZWMWOhkY98=
Subject key identifier:   BC:4B:1C:34:BE:8B:1B:3D:A2:75:B2:5B:C6:7A:5B:84:DB:6C:5C:3C
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          F7
Signing time:             Fri 17 Apr 2026 05:57:15 +0000
Manifest this update:     Fri 17 Apr 2026 05:57:14 +0000
Manifest next update:     Fri 24 Apr 2026 05:57:14 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: rmi9eHHqYhfoUdL63AUAHowFXF4kyD9eebH5Ci48w5Y=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: Apr 17 05:57:14 2026 GMT
            Not After : Apr 24 05:57:14 2026 GMT
        Subject: CN=69e1cbbb-c63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:bd:ba:9d:c6:f0:ec:e7:e4:eb:11:65:d8:
                    ba:b3:1e:cc:60:5b:0c:35:2d:da:f0:e6:b5:60:37:
                    91:14:f9:77:46:db:29:29:4f:03:d1:12:2b:93:6b:
                    d9:fe:e6:5e:74:d8:39:8c:98:16:bf:ce:af:b9:73:
                    cd:1a:aa:70:6b:66:f0:ba:ed:de:ac:e1:a3:15:cb:
                    90:2d:66:43:6a:83:b8:d0:d7:6b:a7:99:a2:f5:58:
                    0a:7d:8d:79:e4:ec:86:3d:4d:69:01:3f:7d:5e:9b:
                    64:50:08:e2:7f:1d:d4:68:70:3d:a8:e3:8b:0b:0c:
                    01:62:d4:3b:1a:5b:60:cb:16:db:72:b2:24:8f:0c:
                    bc:c7:46:f0:ea:6e:70:73:5a:64:14:95:fb:60:dd:
                    57:74:d3:bc:42:e5:9b:5c:6d:27:c4:39:54:a0:b7:
                    7f:bc:83:e3:da:fc:ce:e0:ea:50:b6:dd:fa:4c:c2:
                    53:02:32:a3:ea:d2:2c:89:59:d1:e2:c2:fd:40:03:
                    77:79:fc:12:b9:08:d1:e6:48:e7:39:1b:9e:2c:43:
                    94:63:0e:0d:b1:fc:1e:73:0a:9b:1b:7f:b5:b7:b0:
                    59:d1:0d:e7:3f:87:cf:d2:9a:c8:e6:b4:52:a1:f7:
                    73:20:e5:e9:99:e4:fd:85:ab:fe:9a:97:28:e6:9d:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:1C:34:BE:8B:1B:3D:A2:75:B2:5B:C6:7A:5B:84:DB:6C:5C:3C
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:cb:3a:92:6f:8d:d7:bd:63:22:c6:fd:22:96:52:ee:65:
         6e:5e:4e:1c:cf:07:62:43:71:dc:34:80:98:5d:5b:20:f3:9c:
         da:d3:e8:ec:ec:c1:ba:6d:e2:7d:df:07:d1:f6:39:c7:29:2b:
         8d:45:06:8d:59:e2:2e:17:96:13:d5:f6:fd:0c:29:b7:04:22:
         a5:ae:25:ad:d4:e7:27:13:6d:59:4e:cf:62:90:d3:d9:04:3e:
         05:5c:39:9c:e7:85:3f:74:5f:4c:8d:94:bf:62:b3:ab:12:19:
         79:f9:66:5f:e2:07:85:3f:80:a6:17:63:a6:32:f5:15:12:a0:
         a0:b2:21:e1:58:44:bb:d9:c6:d8:f2:e8:68:1b:5e:ee:c9:02:
         3f:5b:9d:a7:d1:0e:f5:7a:c0:ca:d3:2d:40:64:b8:89:7e:7b:
         c3:4e:0c:e2:a6:bd:52:3e:63:4f:c3:d6:cb:be:d7:76:3c:1f:
         d2:6f:3c:8d:71:6d:52:52:d9:42:1a:cf:23:35:cf:1a:91:8a:
         cf:a6:88:b9:10:aa:9b:b0:91:1b:77:c7:ec:5e:0b:cb:56:7a:
         70:6c:2f:95:52:d6:c8:dd:4a:22:7b:21:f8:30:9b:1c:a4:82:
         e6:95:17:44:b3:f1:05:34:05:27:b8:03:e5:78:19:1e:1c:69:
         6b:d3:ba:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjYwNDE3MDU1NzE0WhcNMjYwNDI0MDU1NzE0WjAYMRYwFAYD
VQQDEw02OWUxY2JiYi1jNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAteu9up3G8Ozn5OsRZdi6sx7MYFsMNS3a8Oa1YDeRFPl3RtspKU8D0RIrk2vZ
/uZedNg5jJgWv86vuXPNGqpwa2bwuu3erOGjFcuQLWZDaoO40Ndrp5mi9VgKfY15
5OyGPU1pAT99XptkUAjifx3UaHA9qOOLCwwBYtQ7GltgyxbbcrIkjwy8x0bw6m5w
c1pkFJX7YN1XdNO8QuWbXG0nxDlUoLd/vIPj2vzO4OpQtt36TMJTAjKj6tIsiVnR
4sL9QAN3efwSuQjR5kjnORueLEOUYw4NsfwecwqbG3+1t7BZ0Q3nP4fP0prI5rRS
ofdzIOXpmeT9hav+mpco5p1yFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxLHDS+
ixs9onWyW8Z6W4TbbFw8MB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALCXLOpJvjde9YyLG/SKWUu5lbl5OHM8HYkNx3DSAmF1bIPOc2tPo7OzBum3i
fd8H0fY5xykrjUUGjVniLheWE9X2/QwptwQipa4lrdTnJxNtWU7PYpDT2QQ+BVw5
nOeFP3RfTI2Uv2KzqxIZeflmX+IHhT+AphdjpjL1FRKgoLIh4VhEu9nG2PLoaBte
7skCP1udp9EO9XrAytMtQGS4iX57w04M4qa9Uj5jT8PWy77Xdjwf0m88jXFtUlLZ
QhrPIzXPGpGKz6aIuRCqm7CRG3fH7F4Ly1Z6cGwvlVLWyN1KInsh+DCbHKSC5pUX
RLPxBTQFJ7gD5XgZHhxpa9O6Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:26 2026 by rpki-client