Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File:                     7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier:          5BpQqmcYCRWaHiW3Eizwk2aLz7uAiXuGbiJlrenZ528=
Subject key identifier:   2F:C7:76:0D:B0:FD:92:9A:14:6D:07:52:5E:33:8E:AA:4E:A1:5E:36
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer:       /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number:          7C
Signing time:             Wed 15 Apr 2026 07:17:24 +0000
Manifest this update:     Wed 15 Apr 2026 07:17:23 +0000
Manifest next update:     Wed 22 Apr 2026 07:17:23 +0000
Files and hashes:         1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: zhxk8FmSDoP2LiGWliS9uvEA3BGGadRnhGqc0X9Xyyo=)
                          2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: b8E22OnaIEiCrA4yJOZi7F0AFzWqNO6MaNrnTrS8sIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
        Validity
            Not Before: Apr 15 07:17:23 2026 GMT
            Not After : Apr 22 07:17:23 2026 GMT
        Subject: CN=69df3b84-a577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:a8:05:bc:9b:97:16:7d:11:74:87:a0:9c:
                    50:ab:03:fa:db:a0:de:e3:f4:7e:60:3c:3d:53:01:
                    a2:dd:84:fd:25:00:c6:0f:00:bb:67:ad:e5:cc:bb:
                    f7:fb:d9:83:d4:78:51:f2:a2:88:38:91:67:98:1f:
                    a6:3e:5c:a3:d7:5a:5b:27:17:8c:1b:1c:cc:0e:82:
                    25:f4:c2:d3:11:4b:d3:a8:2e:f6:7e:b1:57:44:f1:
                    1d:af:d5:23:db:6c:d4:76:55:1b:ff:d3:c6:4d:06:
                    d3:77:93:c3:ae:19:76:f6:52:ce:2f:2e:e9:25:6a:
                    db:86:57:66:77:d5:d4:0e:dc:cc:f6:34:2c:82:cd:
                    f0:02:84:6b:41:9a:ba:2a:cb:24:fa:35:bf:c9:4f:
                    e1:7c:dd:57:3a:8e:fe:af:a8:ad:6c:fc:8c:18:28:
                    ba:d7:be:93:04:d1:7f:3a:28:c6:bb:2b:93:f5:6f:
                    42:ea:d0:0e:37:1b:c8:60:9f:73:cb:c0:f4:80:f7:
                    b4:c2:9c:59:39:12:e2:07:52:c6:a3:9c:a5:f4:d4:
                    cc:2b:29:04:22:b2:a6:3d:ec:66:b8:46:dd:9a:cd:
                    06:b9:17:ad:1e:04:de:5a:ac:6c:4a:a4:c2:4d:06:
                    06:22:c9:fb:81:60:9c:a7:18:58:d8:13:79:9d:a2:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:76:0D:B0:FD:92:9A:14:6D:07:52:5E:33:8E:AA:4E:A1:5E:36
            X509v3 Authority Key Identifier:
                keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:43:73:db:f0:4b:86:2f:24:f4:0d:4d:b8:ad:ac:bb:40:5b:
         b5:c1:af:80:fd:69:88:82:6e:7a:8a:1d:e8:f2:1e:2b:da:cd:
         25:79:82:94:06:d7:c2:a7:5f:5c:d1:43:20:6c:0c:35:9f:a9:
         3d:bb:2c:38:75:af:63:d7:93:1c:4b:68:62:a7:bf:ca:9c:53:
         e2:8c:2a:23:f5:70:62:2e:ac:df:a1:8c:b8:96:fb:be:d6:58:
         fe:4c:bb:48:32:1b:6c:14:8d:0d:51:3a:87:91:51:64:2f:85:
         93:fc:aa:f0:d9:8a:41:d7:a7:5e:56:87:a0:9f:f5:a2:e7:61:
         84:7c:0c:31:2c:b3:6d:a7:a7:03:13:b5:c0:d9:74:9f:d6:84:
         7b:29:bb:c3:c3:a5:f6:42:33:0e:93:36:4a:5b:a5:4e:d5:16:
         f2:ef:f0:ba:35:65:dc:23:26:38:2f:8b:de:8f:b1:9e:05:02:
         e9:2b:d0:f0:ec:63:ea:9e:b5:6e:5c:8e:f9:e8:41:de:59:e8:
         43:bf:3e:0f:16:7b:e3:d7:13:ba:7a:68:d0:e8:36:94:4f:7a:
         b4:80:0a:5b:23:99:fa:fe:58:49:7e:cb:54:15:15:67:5d:d2:
         11:6d:e2:8c:0d:48:f9:0b:d3:c3:be:72:cc:2d:5b:a1:a1:18:
         cd:e5:19:3e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QTlGMjExMC8GA1UEBRMoRUYwMjI1RjkxQ0ZFNDY3RjEzQkQ5MUU2QzlBMUI5REZB
NzNCQjFFQzAeFw0yNjA0MTUwNzE3MjNaFw0yNjA0MjIwNzE3MjNaMBgxFjAUBgNV
BAMTDTY5ZGYzYjg0LWE1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPBagFvJuXFn0RdIegnFCrA/rboN7j9H5gPD1TAaLdhP0lAMYPALtnreXMu/f7
2YPUeFHyoog4kWeYH6Y+XKPXWlsnF4wbHMwOgiX0wtMRS9OoLvZ+sVdE8R2v1SPb
bNR2VRv/08ZNBtN3k8OuGXb2Us4vLuklatuGV2Z31dQO3Mz2NCyCzfAChGtBmroq
yyT6Nb/JT+F83Vc6jv6vqK1s/IwYKLrXvpME0X86KMa7K5P1b0Lq0A43G8hgn3PL
wPSA97TCnFk5EuIHUsajnKX01MwrKQQisqY97Ga4Rt2azQa5F60eBN5arGxKpMJN
BgYiyfuBYJynGFjYE3mdogrzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL8d2DbD9
kpoUbQdSXjOOqk6hXjYwHwYDVR0jBBgwFoAU7wIl+Rz+Rn8TvZHmyaG536c7seww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOUYyLzBDNzgxRkQwN0Q4
QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44VHZaSG15YUc1MzZjN3Nl
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN3dJbC1Sei1SbjhUdlpIbXlhRzUzNmM3c2V3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB
OUYyLzBDNzgxRkQwN0Q4QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44
VHZaSG15YUc1MzZjN3Nldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA0Q3Pb8EuGLyT0DU24ray7QFu1wa+A/WmIgm56ih3o8h4r2s0leYKUBtfCp19c
0UMgbAw1n6k9uyw4da9j15McS2hip7/KnFPijCoj9XBiLqzfoYy4lvu+1lj+TLtI
MhtsFI0NUTqHkVFkL4WT/Krw2YpB16deVoegn/Wi52GEfAwxLLNtp6cDE7XA2XSf
1oR7KbvDw6X2QjMOkzZKW6VO1Rby7/C6NWXcIyY4L4vej7GeBQLpK9Dw7GPqnrVu
XI756EHeWehDvz4PFnvj1xO6emjQ6DaUT3q0gApbI5n6/lhJfstUFRVnXdIRbeKM
DUj5C9PDvnLMLVuhoRjN5Rk+
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:30:34 2026 by rpki-client