Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          5Bh+erRrtH+DoRiuuAb/vHfD1gzn8eWVAM0ZjPwkm4E=
Subject key identifier:   35:AD:F2:7E:5F:12:4B:A3:10:80:0C:05:3A:9A:E6:E5:23:47:E6:52
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          014D
Signing time:             Fri 17 Jul 2026 06:26:46 +0000
Manifest this update:     Fri 17 Jul 2026 06:26:45 +0000
Manifest next update:     Fri 24 Jul 2026 06:26:45 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: 5qQkeWMyyBDrGQAChVygta1wG1Z7xP2t/cF6I+NWc/o=)
                          2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
                          3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Jul 17 06:26:45 2026 GMT
            Not After : Jul 24 06:26:45 2026 GMT
        Subject: CN=6a59cb26-200b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:3b:76:3a:d2:e7:fa:53:5a:3f:ec:d4:b8:
                    6c:bb:e4:e7:97:94:b1:7d:11:fb:ec:48:a3:a5:72:
                    ae:8c:95:4c:cb:da:0b:cc:33:9b:e8:e8:c0:be:6a:
                    e6:77:20:8f:04:4a:f7:e5:9f:e6:ea:de:59:34:56:
                    78:05:05:df:0d:72:95:e6:5a:9c:a9:84:fb:eb:97:
                    30:a5:f3:08:a1:5c:21:62:66:b1:5d:0b:a9:98:93:
                    1f:f4:3f:21:35:34:a6:0a:8a:dc:fe:f3:7c:4a:ad:
                    22:b9:a8:0d:b2:a2:86:d1:df:db:67:fe:5e:ec:fb:
                    45:47:60:b0:6c:b9:dd:dd:d8:ef:a4:9d:38:d7:1f:
                    dd:c3:11:9e:50:f1:a0:b2:65:5e:0a:b5:67:39:03:
                    e2:e4:b7:98:3a:d4:84:0a:96:8a:83:c0:8b:9d:86:
                    c9:14:9e:9e:03:6f:d9:3c:a3:4f:0a:dc:32:71:43:
                    80:b1:9a:59:c4:f5:c4:82:0b:85:8f:2d:42:c8:32:
                    1d:1b:e2:65:01:e2:38:28:6d:37:81:a9:9a:cf:50:
                    14:be:03:e0:02:ca:f3:29:55:d9:0f:18:54:53:46:
                    bb:94:d4:0a:db:bd:e0:05:b7:5a:0d:ab:19:3c:06:
                    43:92:ec:0d:9e:d2:79:18:78:c4:01:9e:1e:8f:60:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:F2:7E:5F:12:4B:A3:10:80:0C:05:3A:9A:E6:E5:23:47:E6:52
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:f0:c0:70:ef:eb:ed:3b:73:f5:7e:5a:f7:01:03:19:ce:
         6c:79:bc:aa:63:aa:78:74:61:37:84:8f:25:11:a6:bf:1f:38:
         62:be:aa:72:1d:e8:1d:f2:1b:26:e6:ce:7d:0c:0d:72:06:5a:
         21:d7:5d:ac:df:e4:bf:f8:f1:84:a5:b4:b3:fc:58:f0:d0:00:
         87:70:88:42:2a:ca:95:52:d9:12:4f:39:cb:8e:79:94:21:5b:
         23:76:93:7e:e0:43:f6:3d:d0:98:52:f7:99:32:16:b9:4c:fd:
         1b:bc:06:2f:f9:b8:cb:21:fc:d0:48:47:13:45:f4:68:ef:2e:
         10:cb:77:bc:26:4b:ac:e6:86:bd:a7:ce:01:38:f6:b7:ab:95:
         94:89:79:de:a0:6a:83:ad:e9:11:c6:9a:63:c2:90:58:db:81:
         d7:65:ad:53:b4:9b:80:d4:34:66:72:d1:19:4b:3d:32:67:e7:
         79:f1:ea:38:0f:f1:c0:e1:5c:03:89:fc:af:eb:c2:da:a9:63:
         77:28:1e:31:1c:f5:2c:0c:bf:a7:13:9e:15:45:11:d6:fc:44:
         bc:b5:db:6c:32:79:29:69:d0:3c:8a:2b:8a:2b:c3:63:b4:be:
         13:16:5e:35:70:fa:3b:b3:fc:07:42:9d:e8:83:a1:35:4a:dd:
         65:83:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:34 2026 by rpki-client