Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
File:                     puZHuaRPqqc-u4IEBQzGTMpFmOo.mft (raw, json)
Hash identifier:          KCmvVQ4MMWxEbuREKcw4xfOdKNLYeOOt2A8upVhZrbo=
Subject key identifier:   01:C9:D4:D7:0C:5A:79:B6:0D:07:F0:8B:5D:21:78:38:57:FA:D0:13
Authority key identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA
Certificate issuer:       /CN=A91C5319/serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
Manifest number:          014D
Signing time:             Mon 27 Jul 2026 07:07:12 +0000
Manifest this update:     Mon 27 Jul 2026 07:07:12 +0000
Manifest next update:     Mon 03 Aug 2026 07:07:12 +0000
Files and hashes:         1: puZHuaRPqqc-u4IEBQzGTMpFmOo.crl (hash: LIH7o6NZuSOJyYlgQ9AX74HMqgRIV4LxIziVNpKw/PU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl
                          rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319, serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA
        Validity
            Not Before: Jul 27 07:07:12 2026 GMT
            Not After : Aug  3 07:07:12 2026 GMT
        Subject: CN=6a6703a0-4220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:89:c6:34:7c:ac:c1:c7:9b:ba:4f:bb:4d:
                    81:f5:18:89:89:fc:57:1d:81:01:40:5f:1c:c0:2e:
                    20:a0:d9:b3:b5:e3:0b:8b:16:92:75:85:bc:4f:c5:
                    24:e4:d3:91:b0:15:86:bd:af:e1:5e:22:ae:98:c3:
                    bb:0e:49:5d:23:36:ff:5c:e5:5c:fb:b4:d1:28:91:
                    ee:16:43:e0:73:a6:4f:e2:9d:9b:0e:f8:cd:2f:45:
                    be:1a:a8:15:b0:e5:7e:30:8c:3d:54:c5:61:82:9e:
                    88:a6:1c:1d:cd:f3:5a:9f:b3:55:ee:20:e7:66:35:
                    13:30:56:3e:44:a9:17:0b:30:50:aa:ca:7b:55:d2:
                    0d:f1:d0:6d:1c:b3:46:d9:32:97:82:53:10:72:97:
                    97:6f:51:ca:97:c2:34:7b:6f:55:69:68:31:3e:eb:
                    cb:41:69:e6:0d:cf:0e:ae:8b:9b:1a:02:34:29:41:
                    32:06:49:93:e4:d1:0a:6a:d3:e0:9a:c1:0d:80:04:
                    1c:aa:b5:4b:a0:0f:48:cc:2f:a1:2e:42:b3:a0:87:
                    12:9b:61:38:08:52:61:d3:20:85:37:45:7d:8f:ce:
                    9b:83:0d:9b:cf:46:ed:45:22:74:ea:4f:55:ce:cb:
                    a4:cc:b7:1e:df:f7:fb:31:74:41:7f:a1:42:99:8b:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:D4:D7:0C:5A:79:B6:0D:07:F0:8B:5D:21:78:38:57:FA:D0:13
            X509v3 Authority Key Identifier:
                keyid:A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:72:2e:95:7c:5c:9c:05:19:1e:d9:4d:9b:c7:cd:3b:b2:0d:
         85:10:65:10:ef:7b:de:1a:b5:e7:c6:1f:92:91:61:4a:96:7a:
         5c:5c:06:36:46:2c:32:43:54:f9:29:26:99:8c:06:5a:14:60:
         64:06:0e:64:c7:ba:d6:d4:12:e2:13:8f:f1:b7:50:78:e2:79:
         fb:ac:c2:b5:74:70:f9:e8:55:a3:83:ea:ce:3e:c6:16:19:a7:
         e2:cd:28:38:3c:cc:c1:51:6d:e8:bf:87:d6:03:ac:c7:16:51:
         21:d1:ea:66:f1:a0:4d:bd:72:f2:ac:d2:16:3c:16:50:ce:b1:
         f5:72:4d:68:eb:14:a4:1c:2a:2d:e7:86:1f:15:af:b2:82:88:
         2f:d5:95:af:04:32:67:e8:ae:92:76:72:b8:6b:2b:32:97:09:
         44:3d:69:33:d5:62:5f:d8:07:76:72:79:ca:a9:df:0c:f6:2e:
         21:4b:e5:c8:a7:05:51:e1:e9:aa:3d:6e:9a:95:44:26:dd:13:
         e1:ea:d3:14:e9:44:14:44:14:18:d3:00:2d:d9:50:fc:66:99:
         64:6f:9b:29:b9:e6:77:c9:91:9c:68:14:e1:34:62:e0:50:ab:
         f7:ea:77:1b:46:e3:3f:24:d1:aa:c0:0d:b3:28:f7:a1:d0:89:
         53:00:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:08 2026 by rpki-client