Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
File:                     rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json)
Hash identifier:          M2lAFXjwDpc9lFY89lSOBfYuZfFMG/d39fkYLrueQ4s=
Subject key identifier:   3C:B5:A2:DA:92:0F:14:E8:11:EB:8B:F1:30:C7:CF:75:FD:60:72:63
Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
Certificate issuer:       /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
Manifest number:          6F
Signing time:             Fri 17 Jul 2026 09:15:19 +0000
Manifest this update:     Fri 17 Jul 2026 09:15:18 +0000
Manifest next update:     Fri 24 Jul 2026 09:15:18 +0000
Files and hashes:         1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: 5V6QyuoN38NM5Tm3fcfPvahCI5EnLwxBENagfw+LG30=)
                          2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=)
                          3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
        Validity
            Not Before: Jul 17 09:15:18 2026 GMT
            Not After : Jul 24 09:15:18 2026 GMT
        Subject: CN=6a59f2a6-902b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:ca:9d:c8:c1:29:51:f2:d9:d1:cf:cc:a6:
                    9f:74:b2:42:d0:e4:f9:fa:4a:a9:df:fc:ef:d9:8d:
                    b2:67:82:c6:4e:be:b8:5e:2c:40:f5:35:25:d2:c8:
                    6a:16:83:7a:08:df:cc:f6:0c:90:01:94:8d:8d:a7:
                    3b:5d:7c:d9:8c:66:19:d5:da:87:09:b2:a1:5a:01:
                    7d:25:f4:ef:39:be:6a:9b:56:f7:03:09:97:58:a3:
                    a4:a4:8b:d5:21:fe:57:76:14:1c:ed:af:c5:f7:42:
                    5a:b3:bd:af:5c:18:3f:3e:ec:4b:d6:a6:d3:c5:86:
                    f6:6c:49:48:ee:58:c0:e3:7f:43:6c:9b:6e:69:2b:
                    2b:8f:88:c5:ea:a8:3c:16:7c:52:1c:5a:0d:7c:e6:
                    f5:42:e1:f3:65:5e:fb:a1:d7:60:a2:4b:ef:39:34:
                    dd:47:40:c7:0d:51:1c:16:70:1e:48:85:56:e1:e8:
                    71:90:31:f5:a6:a3:e8:fe:51:f2:fd:22:b5:3d:c8:
                    72:7a:55:7e:b6:b5:24:b3:6a:23:0e:a4:8c:87:cf:
                    56:d7:4b:5c:31:3c:2c:81:56:2e:6b:9e:2b:79:18:
                    01:ad:f8:c8:09:dd:29:4f:67:15:45:fa:2e:9b:74:
                    98:81:8e:7f:2d:ad:26:61:83:d6:1e:b6:19:45:1a:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B5:A2:DA:92:0F:14:E8:11:EB:8B:F1:30:C7:CF:75:FD:60:72:63
            X509v3 Authority Key Identifier:
                keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:5a:75:45:74:41:3e:e1:94:29:ba:f0:a0:7d:bb:50:f1:
         6b:77:47:5c:bc:4d:43:27:df:85:58:9d:17:4b:4b:0d:40:b9:
         35:92:ef:20:bb:76:df:a2:26:25:6f:03:d4:0d:b2:21:8f:e6:
         06:53:16:ea:04:01:96:6a:2b:e0:6f:88:a9:c3:6b:ef:81:00:
         05:3e:82:2e:7d:d3:e0:63:e5:1e:76:3f:6a:2f:49:ec:95:60:
         99:82:58:36:22:47:66:35:9d:cd:bc:e9:fc:59:db:bd:48:c0:
         7a:37:e6:ed:23:f8:9b:b3:11:fb:6a:dd:79:b6:19:bd:05:f4:
         77:02:d3:61:59:d8:32:d8:c2:a3:43:66:94:e7:45:bf:62:fc:
         24:28:7f:af:d9:e7:b0:45:a1:96:51:cc:13:c8:1b:96:bc:49:
         4b:f5:46:e4:a0:2c:d7:e1:83:3d:a6:e0:0b:81:0b:33:f9:98:
         27:31:d9:4b:e0:f5:0d:f8:a9:d7:31:83:40:56:02:18:60:13:
         95:bc:94:6e:3d:a4:dd:b8:71:5e:7b:9f:8c:d3:66:7c:30:4a:
         73:b4:d0:25:9e:f5:cb:63:12:c9:af:e1:10:2d:e4:7d:b3:c0:
         2e:5b:f4:50:e9:ff:f5:49:ee:3d:ca:52:5e:4b:8c:ed:83:8d:
         2a:ea:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:14 2026 by rpki-client