Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          SVfGt2Oz6LWu79R7D+tZCXkhAiAXk50Z4G5Zj9sP968=
Subject key identifier:   0E:86:CE:4C:87:8C:43:15:4F:C0:8D:D7:CD:1E:A4:F2:A1:88:C9:D1
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          0612
Signing time:             Thu 16 Jul 2026 23:25:42 +0000
Manifest this update:     Thu 16 Jul 2026 23:25:41 +0000
Manifest next update:     Thu 23 Jul 2026 23:25:41 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: 6hpR/99koyWrC6yS2iqD6GWyyV9PTLYzAr3nZc8eyzo=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Jul 16 23:25:41 2026 GMT
            Not After : Jul 23 23:25:41 2026 GMT
        Subject: CN=6a596876-6a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:23:41:ab:ba:ee:0a:2e:e2:2d:ae:a9:ca:
                    ba:6c:25:dc:0a:57:38:10:d5:32:fd:71:f1:68:37:
                    22:9d:41:cb:b6:8b:40:46:4d:61:86:c7:2b:60:22:
                    b5:fa:03:34:ca:d0:2b:12:b8:36:22:b1:44:7d:1b:
                    f0:c5:d0:a0:75:24:86:40:43:e2:af:61:d3:4a:20:
                    15:ae:3d:bc:b6:f3:cf:e5:3f:c4:ba:d9:14:24:e5:
                    00:75:bd:7d:42:55:0a:9d:9a:f2:97:ab:3e:2d:37:
                    57:21:0d:4d:ab:25:51:27:f7:8e:ed:cd:d1:76:3b:
                    03:ed:79:c4:ce:16:2a:70:2e:c5:92:16:17:28:54:
                    c9:46:7b:93:b3:fd:46:77:cc:18:93:59:87:2b:49:
                    75:8d:8b:d8:0b:ba:33:c3:71:85:ad:1c:3c:1a:6d:
                    5b:2d:97:ef:2b:34:95:42:d9:5a:8f:17:44:ad:1b:
                    fb:bd:8e:3e:a6:c9:dc:06:7b:66:5c:de:a7:72:d6:
                    fb:25:df:6a:62:3a:b6:a3:2f:a8:31:98:6b:c7:bc:
                    f0:c6:ce:00:ec:fe:24:b4:35:3f:09:7d:2c:8d:14:
                    57:23:49:66:cc:66:fa:ac:6a:fb:6c:d1:40:0e:fa:
                    db:eb:23:88:01:8e:f1:16:b2:62:ca:56:12:10:36:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:86:CE:4C:87:8C:43:15:4F:C0:8D:D7:CD:1E:A4:F2:A1:88:C9:D1
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:03:85:7a:e8:01:da:2e:50:81:fb:bb:e4:21:06:44:95:9b:
         20:10:fd:5c:41:0b:01:23:06:cf:39:91:d8:b0:47:ab:ac:5a:
         43:5e:11:21:36:91:9f:fe:1d:25:80:77:e9:b4:16:2e:22:ad:
         5c:26:e2:51:99:78:21:df:8d:06:63:60:f1:e5:f0:7d:a2:b7:
         05:75:37:05:17:49:68:57:86:d0:c3:1f:d6:4f:2c:53:0b:9e:
         27:8c:1d:05:90:62:17:08:f4:3a:2a:00:67:0b:05:03:86:0e:
         2d:c4:48:07:e9:40:ec:d0:5f:5d:18:aa:ee:4f:1e:bd:64:cf:
         0b:15:42:64:19:3a:70:e0:aa:5b:b3:b5:86:10:5d:76:e4:54:
         a6:19:ec:b5:20:4a:a4:82:f7:c7:ce:87:cc:d8:d5:59:71:f3:
         a6:55:58:d4:71:ee:62:d2:e8:c5:5d:18:79:dc:55:95:62:a3:
         78:82:43:a2:2c:78:29:c0:0b:a9:1a:13:f7:a8:05:ba:7c:57:
         7c:68:ef:6d:16:42:9e:39:3e:23:18:6a:4a:b1:fa:fa:a5:ad:
         2a:3e:a9:67:66:16:61:20:99:93:76:b0:22:fa:8f:6c:cb:c3:
         90:b6:3c:07:e0:ea:32:84:09:d0:82:42:97:6e:09:46:04:cf:
         44:d9:53:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:27 2026 by rpki-client