Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
File:                     7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json)
Hash identifier:          7Bi8j+PisUuODiHPCCerDVhv/8WRVaBfgZvd0SwzPfs=
Subject key identifier:   E8:90:0A:E4:EC:64:A4:B1:28:E5:CC:65:23:0B:E8:82:DA:F1:76:49
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Certificate issuer:       /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial:       357D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
Manifest number:          3579
Signing time:             Tue 22 Sep 2026 15:05:32 +0000
Manifest this update:     Tue 22 Sep 2026 15:05:31 +0000
Manifest next update:     Tue 29 Sep 2026 15:05:31 +0000
Files and hashes:         1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: 7mSW9O6U0lWdRJixP3/yVFpriQeuKbLDTWSHJ5+Bn1U=)
                          2: 56929F3A948D11F1AE18FA4A6611F970.roa (hash: PbTtA8TcQhv6+ggsOF9mf81T8e6tyt2mjKGu8rIUdWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
                          rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13693 (0x357d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
        Validity
            Not Before: Sep 22 15:05:31 2026 GMT
            Not After : Sep 29 15:05:31 2026 GMT
        Subject: CN=6ab2993b-82f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:64:00:81:05:57:c0:49:8e:c2:3d:2f:44:
                    e4:71:76:c9:cf:33:f2:3f:c7:4e:a8:82:f6:ee:89:
                    f4:25:af:d5:ca:5d:c1:8f:8f:36:ac:a2:25:b3:0a:
                    bb:71:d5:da:9d:c6:fb:6f:cc:32:ce:6c:00:e1:1f:
                    4b:b1:13:b6:6f:f5:9b:40:6c:71:6e:e5:02:a8:70:
                    c5:7c:12:aa:33:6f:e6:30:16:4c:01:2c:1b:b2:38:
                    51:ea:3b:1f:f0:47:84:b5:6b:97:35:da:f0:a3:d5:
                    70:46:a0:45:3f:ef:bd:e1:ac:18:37:7c:8b:26:3a:
                    5b:cd:cc:b1:76:49:fa:f9:fd:6d:8e:ef:b0:e9:3b:
                    04:e4:7c:7e:60:3f:12:fa:e8:e1:6f:be:0c:60:15:
                    0d:52:0d:f5:65:3a:8d:f7:a9:cf:24:71:c1:2e:0c:
                    e9:11:a1:32:11:6d:bb:e1:fe:c2:1a:f1:62:ff:cd:
                    58:3a:48:4a:67:5b:23:a5:d2:f8:df:03:0b:e6:d5:
                    66:71:31:c0:fd:35:3e:8f:54:45:0e:ea:59:c5:54:
                    75:93:88:41:66:4a:97:5c:76:64:3d:8a:9b:47:27:
                    1d:39:3c:8c:b4:8d:bd:33:57:22:e9:df:20:30:33:
                    e9:24:c7:58:88:f4:45:70:4a:77:e7:04:2d:c1:e0:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:0A:E4:EC:64:A4:B1:28:E5:CC:65:23:0B:E8:82:DA:F1:76:49
            X509v3 Authority Key Identifier:
                keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:da:fd:9c:98:d1:77:6d:ee:64:ee:3a:78:da:e4:e2:f4:d8:
         64:0c:43:c7:6d:3e:13:93:5d:5e:c5:2c:a4:b0:0f:d0:bd:7f:
         ff:c5:71:b7:48:a0:60:cf:6a:8d:ed:f3:28:2f:fe:b4:72:4e:
         9f:d7:e9:9a:0a:57:58:d2:f0:e5:86:85:25:9f:54:bb:62:b5:
         49:32:20:f2:cb:67:e7:ab:a9:ee:2b:92:f7:0a:f3:25:74:cb:
         db:cb:c1:df:bd:38:95:ce:81:d4:ea:c7:8c:ec:44:06:05:6c:
         dc:e8:6a:1a:08:26:9c:25:b9:ed:8e:29:c9:b9:e9:1a:be:52:
         34:50:2b:28:b6:63:69:2b:91:cf:b7:a9:86:3b:73:5a:7d:c4:
         0e:fe:23:fc:8d:8a:5d:af:f4:c0:28:a6:d8:95:a7:bb:aa:74:
         13:9b:0e:7b:c8:53:54:2d:47:7b:70:b3:fe:18:62:c2:66:41:
         fb:0a:11:d1:79:fb:be:9d:fb:1d:7f:95:3e:8c:3e:87:87:ff:
         3a:4e:fa:f5:34:df:5b:09:dc:55:54:6c:89:da:69:fa:de:8c:
         76:56:85:8e:dd:85:22:c1:c7:c0:37:dd:f6:9d:41:c4:bb:bd:
         83:43:b4:be:9f:75:09:ca:6b:b3:b2:1a:50:9c:73:58:38:3c:
         14:f1:c0:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlGQjkxMTAvBgNVBAUTKEVDQjVCQjUzMEE3MkE0MDk1Njg5RUNCQjE1OEYyQUU1
RUZFOTEyNTUwHhcNMjYwOTIyMTUwNTMxWhcNMjYwOTI5MTUwNTMxWjAYMRYwFAYD
VQQDEw02YWIyOTkzYi04MmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYRkAIEFV8BJjsI9L0TkcXbJzzPyP8dOqIL27on0Ja/Vyl3Bj482rKIlswq7
cdXancb7b8wyzmwA4R9LsRO2b/WbQGxxbuUCqHDFfBKqM2/mMBZMASwbsjhR6jsf
8EeEtWuXNdrwo9VwRqBFP++94awYN3yLJjpbzcyxdkn6+f1tju+w6TsE5Hx+YD8S
+ujhb74MYBUNUg31ZTqN96nPJHHBLgzpEaEyEW274f7CGvFi/81YOkhKZ1sjpdL4
3wML5tVmcTHA/TU+j1RFDupZxVR1k4hBZkqXXHZkPYqbRycdOTyMtI29M1ci6d8g
MDPpJMdYiPRFcEp35wQtweBprQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiQCuTs
ZKSxKOXMZSML6ILa8XZJMB8GA1UdIwQYMBaAFOy1u1MKcqQJVonsuxWPKuXv6RJV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUZCOS8yMTE0RDU2ODFE
QTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBBbFdpZXk3Rlk4cTVlX3BF
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdMVzdVd3B5cEFsV2lleTdGWThxNWVfcEVsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUZCOS8yMTE0RDU2ODFEQTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBB
bFdpZXk3Rlk4cTVlX3BFbFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN9r9nJjRd23uZO46eNrk4vTYZAxDx20+E5NdXsUspLAP0L1//8Vxt0igYM9q
je3zKC/+tHJOn9fpmgpXWNLw5YaFJZ9Uu2K1STIg8stn56up7iuS9wrzJXTL28vB
3704lc6B1OrHjOxEBgVs3OhqGggmnCW57Y4pybnpGr5SNFArKLZjaSuRz7ephjtz
Wn3EDv4j/I2KXa/0wCim2JWnu6p0E5sOe8hTVC1He3Cz/hhiwmZB+woR0Xn7vp37
HX+VPow+h4f/Ok769TTfWwncVVRsidpp+t6MdlaFjt2FIsHHwDfd9p1BxLu9g0O0
vp91Ccprs7IaUJxzWDg8FPHAfA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:07 2026 by rpki-client