Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          Nm/WX1ZGFtIpXFeplNEg2JlMsHkTgHW6Tt3MMLqqrsU=
Subject key identifier:   E2:1B:EC:9B:A0:80:5D:41:45:D4:C8:F4:43:19:0C:DC:E3:B8:6C:D6
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          0150
Signing time:             Thu 23 Jul 2026 06:53:42 +0000
Manifest this update:     Thu 23 Jul 2026 06:53:42 +0000
Manifest next update:     Thu 30 Jul 2026 06:53:42 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: g9so6yX/Yp6vDbZEOTqxKk3seOyvxhzN9vfbDfC2fEA=)
                          2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
                          3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Jul 23 06:53:42 2026 GMT
            Not After : Jul 30 06:53:42 2026 GMT
        Subject: CN=6a61ba76-6562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:38:1b:c3:4e:37:55:13:16:b1:c4:f7:7e:
                    89:d5:3e:2a:ff:90:96:6d:d5:22:41:f5:01:b0:69:
                    76:9c:a5:a4:32:7d:bc:76:42:8e:1d:81:9a:bf:1d:
                    5e:56:f5:e5:da:ad:3f:fc:4f:66:7b:5f:82:de:0e:
                    45:db:b6:fb:a5:6d:1f:cf:b3:9f:bd:ed:d4:12:4c:
                    17:0e:66:6f:af:c7:f5:f0:42:9c:4d:03:31:ff:d3:
                    e4:6e:42:00:23:74:1b:f1:df:35:18:4f:9f:5d:a1:
                    34:bf:2e:7a:83:9c:f1:7d:1f:fe:75:0f:2d:4b:f7:
                    54:7e:3d:e3:26:bf:9f:fc:a3:0a:bc:0d:01:59:03:
                    33:8e:a0:5d:e9:25:fb:a6:ed:10:bb:02:b7:a7:13:
                    69:54:ae:cb:2f:86:3e:a1:9b:17:78:73:33:2e:8c:
                    6c:b5:ad:3e:62:38:ba:89:9e:48:7c:d3:b9:5d:1a:
                    d3:78:a9:f9:38:dd:fa:1b:c2:18:0d:a2:e2:20:16:
                    b8:79:50:30:f7:71:05:38:42:62:f5:1c:dc:f4:c4:
                    c8:98:a4:67:b6:80:a1:b0:07:39:93:00:1e:75:1c:
                    5b:5a:82:40:ed:0f:87:cf:68:39:90:14:49:f0:20:
                    09:a4:4f:39:10:d0:5d:fc:d2:2a:95:8f:0d:cd:43:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:EC:9B:A0:80:5D:41:45:D4:C8:F4:43:19:0C:DC:E3:B8:6C:D6
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:61:5b:ae:f7:c8:fc:e2:96:47:72:c0:dd:1a:c4:98:39:15:
         70:61:8e:40:8c:a6:25:2a:f3:ce:d0:29:01:a3:7a:35:5b:77:
         87:fc:b9:51:f1:d0:0a:4c:19:59:00:f9:c4:51:d3:a5:3b:62:
         19:fd:7f:28:6f:4d:e8:4f:f0:66:3e:a3:b5:3d:75:c8:2f:1a:
         75:a3:bf:fd:a6:29:eb:df:db:f3:df:c0:2c:9a:15:6f:08:c9:
         51:0e:de:89:ed:b0:2d:3d:ee:b0:da:c4:7e:8e:48:c5:db:26:
         ce:2c:bd:59:3e:3a:c2:1f:45:54:2d:7b:a1:bc:65:0c:e4:72:
         2b:24:12:73:ff:7b:ae:7f:6b:50:eb:5f:10:af:db:b3:dc:cb:
         f4:4c:fb:f6:52:4e:1b:84:20:ee:08:5c:4a:d1:84:d0:0f:7e:
         a3:cd:0b:fc:ad:6f:f1:4e:53:b8:f6:fb:b0:8f:1f:40:ec:27:
         e9:8d:68:e4:92:68:4f:ef:c1:80:8c:90:2a:ec:69:bd:f5:ef:
         20:16:0c:b7:92:43:00:66:1f:36:3c:ae:3f:83:69:7b:af:97:
         75:f6:70:fd:49:17:e7:15:0d:87:52:ef:33:5e:b3:79:07:2a:
         fc:70:8a:3e:67:be:e0:4a:13:69:46:07:3d:0e:2b:57:d0:c0:
         49:1c:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:50:47 2026 by rpki-client