Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          FmKphAk1XOKe5CvAEDlyYd377RuV3W6fUg70MEk0CsE=
Subject key identifier:   99:78:5D:32:16:B2:51:83:7A:DF:75:03:F4:46:7E:03:2F:72:06:B7
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          0109
Signing time:             Tue 03 Mar 2026 05:43:48 +0000
Manifest this update:     Tue 03 Mar 2026 05:43:47 +0000
Manifest next update:     Tue 10 Mar 2026 05:43:47 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: TBvfZyl4l3SKFsT3umhUYtGcFKB6b0vWEAKjoeUva4U=)
                          2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
                          3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Mar  3 05:43:47 2026 GMT
            Not After : Mar 10 05:43:47 2026 GMT
        Subject: CN=69a67514-b303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:64:7f:9a:8b:ca:ae:96:74:0c:66:76:9b:
                    b6:4b:78:a1:05:1a:5e:e7:17:16:0d:3f:fd:57:fe:
                    2c:e5:a8:25:3a:ab:4d:cd:bd:20:81:e0:35:59:c9:
                    aa:d9:a0:72:f5:a3:8b:cc:c4:c4:9e:07:7d:34:5e:
                    13:14:6b:f4:0e:e0:5c:a8:47:fe:c1:52:93:9a:ed:
                    d6:9e:13:9b:6c:a2:17:ab:1b:86:10:5c:a2:9b:49:
                    6f:1b:6b:e4:dc:b3:db:6e:7f:1a:cd:7e:72:3f:f9:
                    54:36:c6:5a:fd:80:88:04:1d:77:07:da:55:62:ef:
                    10:1e:53:0a:b7:12:a0:50:58:05:7b:70:8c:03:0a:
                    61:ba:99:b0:f8:97:51:d8:e9:1f:55:f5:89:40:10:
                    68:5d:46:38:0c:25:2f:b8:fe:a6:1f:a3:d1:e1:b8:
                    29:d8:4d:bb:6a:53:97:1f:6e:3f:36:26:00:e1:fe:
                    11:a5:d0:bd:d3:f6:f3:5f:eb:74:94:68:23:08:b3:
                    19:b0:cd:4e:48:94:df:b8:ab:01:57:4b:5a:e6:c9:
                    c4:ed:6d:67:65:ce:33:83:80:99:22:b4:85:59:83:
                    0e:08:ac:25:8d:06:bb:04:46:be:ac:7e:89:d1:82:
                    d6:b1:b7:00:3a:73:3a:e6:38:4e:50:66:41:59:64:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:5D:32:16:B2:51:83:7A:DF:75:03:F4:46:7E:03:2F:72:06:B7
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:24:91:d0:a2:3d:89:1e:cf:6d:93:f1:89:95:f7:dc:8b:3c:
         49:3d:13:91:d2:52:9a:a6:70:b3:a4:bd:bb:10:12:7b:5f:d7:
         59:b6:14:01:01:cb:b4:d3:03:1d:fa:4d:a2:f0:71:34:6e:ca:
         05:42:74:44:a3:3c:51:c6:f3:6b:7e:be:50:ac:ab:8e:be:dc:
         c5:ca:31:1e:f6:b8:21:f6:d1:03:c0:a1:3b:84:79:e8:a6:44:
         c4:05:52:56:a0:6e:3d:cd:10:c4:df:1e:b3:ee:e7:3c:9f:25:
         a7:fb:b2:03:11:ac:23:8e:0a:f4:ee:ce:80:4a:f5:2b:b5:32:
         36:f9:1a:82:d3:42:23:85:4f:57:6d:22:b2:ed:a0:28:f1:dc:
         f6:8e:1c:c1:fe:35:83:a3:9c:e0:1f:d2:a0:8f:7c:cf:a9:0c:
         07:08:2c:fc:aa:38:3a:93:94:2f:0b:1f:30:99:be:a8:65:cf:
         cb:7e:5d:41:f7:5b:d6:1f:0c:d1:44:69:55:b4:48:84:c9:79:
         c9:e0:79:56:67:9c:09:98:e3:f3:52:2d:51:ce:49:c6:01:0a:
         05:f1:c8:02:62:cb:35:04:59:ae:3e:9e:8e:23:43:90:47:bd:
         99:73:43:07:e4:54:12:fd:e2:f6:8e:86:59:3c:86:31:74:4b:
         d2:14:8a:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE
RTc2Qzg0QkMwHhcNMjYwMzAzMDU0MzQ3WhcNMjYwMzEwMDU0MzQ3WjAYMRYwFAYD
VQQDEw02OWE2NzUxNC1iMzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/Nkf5qLyq6WdAxmdpu2S3ihBRpe5xcWDT/9V/4s5aglOqtNzb0ggeA1Wcmq
2aBy9aOLzMTEngd9NF4TFGv0DuBcqEf+wVKTmu3WnhObbKIXqxuGEFyim0lvG2vk
3LPbbn8azX5yP/lUNsZa/YCIBB13B9pVYu8QHlMKtxKgUFgFe3CMAwphupmw+JdR
2OkfVfWJQBBoXUY4DCUvuP6mH6PR4bgp2E27alOXH24/NiYA4f4RpdC90/bzX+t0
lGgjCLMZsM1OSJTfuKsBV0ta5snE7W1nZc4zg4CZIrSFWYMOCKwljQa7BEa+rH6J
0YLWsbcAOnM65jhOUGZBWWS4eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJl4XTIW
slGDet91A/RGfgMvcga3MB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx
RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV
R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeCSR0KI9iR7PbZPxiZX33Is8ST0TkdJSmqZws6S9uxASe1/XWbYUAQHLtNMD
HfpNovBxNG7KBUJ0RKM8Ucbza36+UKyrjr7cxcoxHva4IfbRA8ChO4R56KZExAVS
VqBuPc0QxN8es+7nPJ8lp/uyAxGsI44K9O7OgEr1K7UyNvkagtNCI4VPV20isu2g
KPHc9o4cwf41g6Oc4B/SoI98z6kMBwgs/Ko4OpOULwsfMJm+qGXPy35dQfdb1h8M
0URpVbRIhMl5yeB5VmecCZjj81ItUc5JxgEKBfHIAmLLNQRZrj6ejiNDkEe9mXND
B+RUEv3i9o6GWTyGMXRL0hSKSQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:51 2026 by rpki-client