Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          Pgt7MOjPHXEnIHpdWuHuBIh9Rsu9Dg1ZXZ4wZO6tlIE=
Subject key identifier:   5E:F2:22:41:E6:3D:8E:D3:B2:3A:FE:D9:10:F5:E6:46:D7:6C:91:1E
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          0615
Signing time:             Wed 22 Jul 2026 23:40:01 +0000
Manifest this update:     Wed 22 Jul 2026 23:40:00 +0000
Manifest next update:     Wed 29 Jul 2026 23:40:00 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: /eaoBIUDvR3MM76QHPFpGeVT9mL3V/bD5RV6oFC2pT8=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Jul 22 23:40:00 2026 GMT
            Not After : Jul 29 23:40:00 2026 GMT
        Subject: CN=6a6154d1-b66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:8e:b5:e9:e5:ce:5c:a7:b3:b3:c0:05:27:
                    8b:14:1f:6b:f3:a7:f6:a1:6c:a6:69:8f:f5:63:59:
                    b0:94:5d:25:ef:ed:1f:9c:66:e5:b6:22:06:50:01:
                    c2:56:c9:70:a1:cf:9b:c5:7a:61:a7:90:75:de:8c:
                    5a:d5:bd:66:b2:27:4c:ce:8b:70:4c:52:a7:60:36:
                    0c:7d:a5:cf:61:5f:53:7d:67:60:2b:47:8c:f5:a3:
                    bf:33:d2:77:2a:a4:7e:13:e5:4d:22:e6:76:ec:a2:
                    f9:69:2a:04:d0:9d:e1:6d:9f:3f:c2:bc:cc:90:71:
                    b8:52:37:8a:82:33:80:74:b8:ac:c8:1c:dc:53:8d:
                    97:7a:73:38:b6:d0:e9:56:f6:4d:51:8d:6f:da:26:
                    3d:70:48:f1:26:51:cd:90:00:05:72:2c:25:ca:70:
                    b2:e5:b8:af:e4:6e:f7:fe:18:c8:bc:58:ef:08:07:
                    59:0e:e7:74:5e:af:a0:82:10:76:d1:57:4d:d9:6f:
                    9e:55:af:b1:d2:c0:09:7d:76:f6:d4:71:df:8e:78:
                    c8:b0:44:bb:71:fc:31:81:ab:ea:34:94:4b:c7:92:
                    92:e1:12:a2:b8:9d:2b:60:16:03:5b:3d:d7:4c:2f:
                    b8:60:45:c6:65:d4:72:f8:53:9f:7c:94:ae:89:f2:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F2:22:41:E6:3D:8E:D3:B2:3A:FE:D9:10:F5:E6:46:D7:6C:91:1E
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:41:64:77:7e:0d:27:54:26:2a:a8:74:7d:ad:f0:94:62:af:
         cd:de:8a:94:42:5b:4b:8c:1b:a5:cd:e0:92:8d:e4:70:81:ea:
         40:d6:8b:bc:4d:47:4e:a8:e3:0b:c2:cc:75:d6:12:d9:9c:ca:
         b8:f7:1b:6e:6d:62:70:f7:52:0e:78:ce:16:55:4a:21:6d:f3:
         22:3b:24:17:b0:51:7e:a6:2d:2f:a3:e8:79:03:11:46:31:23:
         39:72:c2:80:09:80:8d:5b:a3:20:d4:ab:72:ca:81:1c:69:31:
         1e:de:52:c9:b4:9d:0a:3a:85:c1:b9:ae:3e:bd:a5:99:c5:ba:
         a4:11:71:20:e9:35:66:47:c0:ce:32:f2:93:7c:45:34:90:25:
         a5:bd:67:09:97:50:3d:00:78:8c:f7:b9:59:ad:4c:65:2d:c4:
         a9:21:76:16:8b:5b:be:7f:14:2f:fb:5b:f9:95:a9:c8:8f:d3:
         13:ec:43:82:52:d1:7f:8d:91:9b:a2:1d:af:ac:99:98:72:79:
         97:25:0b:de:94:e1:c7:ca:09:61:71:a1:0a:ea:e4:87:48:30:
         bf:c1:a2:81:e3:67:a8:8b:41:87:d6:6a:11:2e:a5:ad:10:87:
         3e:1c:c5:77:11:d6:57:6f:1f:c4:93:09:17:0c:5c:a2:b7:e1:
         26:ee:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:53 2026 by rpki-client