Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File:                     quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier:          hnLb7zi1lASE3NfzzN3ZNQpnUjDuxxpV/RAxHcNWJfU=
Subject key identifier:   33:B8:68:BF:BD:10:95:7F:E5:63:84:69:E1:6F:BC:4E:55:34:95:11
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer:       /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number:          013C
Signing time:             Sun 05 Jul 2026 06:06:54 +0000
Manifest this update:     Sun 05 Jul 2026 06:06:54 +0000
Manifest next update:     Sun 12 Jul 2026 06:06:54 +0000
Files and hashes:         1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: PlKjErN0sv3PcqTf9l46MqaoeJHphn9sz2LkVdrB1ng=)
                          2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: OXlWMlN/9eXJBuwyCfwBJ/3whRZMwq6quUWKtVMgPJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 06:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
        Validity
            Not Before: Jul  5 06:06:54 2026 GMT
            Not After : Jul 12 06:06:54 2026 GMT
        Subject: CN=6a49f47e-1c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:18:31:79:5a:6f:2c:b1:56:19:de:1e:b1:
                    6e:95:aa:4b:91:3b:fa:5b:b3:cb:c6:af:90:7a:69:
                    3d:60:11:7f:37:12:aa:16:59:c6:93:88:1e:03:27:
                    28:78:75:ed:6e:55:b3:d3:ff:62:98:f8:22:32:58:
                    b2:63:c4:2d:5a:39:b8:3d:7e:b5:34:bf:10:cc:1f:
                    cd:89:bb:d0:8d:18:8d:ca:ce:00:f3:5a:60:7b:cf:
                    24:31:7c:07:83:9f:44:f0:40:bb:ed:bb:0c:a8:b7:
                    0e:2a:e5:84:d0:79:bc:e3:46:f4:5e:2d:cc:de:6a:
                    b3:75:92:fe:41:38:64:2d:66:52:2e:92:55:53:bf:
                    ed:af:f4:d8:7a:b8:10:7d:f7:3c:ec:c2:8e:89:9b:
                    34:25:0b:fa:9a:39:c9:2c:d0:bc:6c:1c:3e:07:be:
                    f8:1f:3b:6d:30:60:20:54:b3:e6:4a:30:33:c6:39:
                    0f:c9:d5:9e:d1:22:97:f7:dc:d7:cd:be:10:73:99:
                    7b:fe:64:89:c2:18:93:6a:eb:6d:94:d1:4e:d3:e8:
                    83:6a:c0:bf:7e:81:18:53:cd:f7:66:9b:ea:ed:3a:
                    32:98:33:de:7a:d8:eb:6e:7a:22:10:20:ad:af:50:
                    28:fe:1f:ca:2d:b0:30:df:dc:2f:53:f7:e6:01:e1:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B8:68:BF:BD:10:95:7F:E5:63:84:69:E1:6F:BC:4E:55:34:95:11
            X509v3 Authority Key Identifier:
                keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:d1:a9:c1:2b:9c:ed:1b:68:b2:2b:c7:ee:0b:7a:90:f5:
         6a:e8:67:a1:7e:7c:d8:96:b6:db:87:d6:de:be:6b:f5:34:a5:
         f7:47:09:84:74:45:eb:ae:db:41:d3:e1:ef:57:1b:61:98:24:
         47:6d:dc:53:18:89:ea:05:07:d1:dc:d3:9a:97:7c:b9:c2:36:
         b0:d3:2e:b7:32:5c:61:2b:e4:25:b8:fd:37:0b:f8:a3:d1:59:
         2b:cc:ca:f1:a9:5c:c3:7e:fa:4c:85:07:b9:29:e2:1d:e2:e2:
         72:ac:a8:a3:75:c5:3d:9c:76:f0:ce:a5:c6:05:2f:39:78:a9:
         a9:53:ed:6d:a6:66:1a:ca:97:0c:ed:f0:a3:1f:fd:d4:6b:26:
         f2:c7:e1:8f:ec:50:69:9f:9d:ea:93:24:bf:e1:cd:4b:6a:05:
         57:a1:c0:a7:56:8a:45:02:20:76:13:af:23:12:ed:a8:56:05:
         5e:c4:d7:44:d2:22:20:ea:f4:ab:0c:d9:72:8b:d8:fe:82:df:
         39:f3:44:6b:1d:c2:7a:01:52:b1:96:6d:91:9c:f7:7f:af:6e:
         6f:e3:70:cc:59:f6:7a:50:a7:2b:3d:3e:77:a7:ea:d3:55:f9:
         35:3d:9d:8f:12:bf:77:cc:03:2e:11:a9:78:b4:a8:f9:00:97:
         06:1e:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 14:13:09 2026 by rpki-client