Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          /jQJyUvOSrpbGGPcwVovbBoRImQ7ST6FhVSWB3FFY/A=
Subject key identifier:   73:9C:FA:01:10:A4:C9:AA:EC:67:96:53:0F:94:1D:C6:B6:F6:51:F8
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          0108
Signing time:             Mon 02 Mar 2026 13:05:25 +0000
Manifest this update:     Mon 02 Mar 2026 13:05:25 +0000
Manifest next update:     Mon 09 Mar 2026 13:05:25 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: MXBLvc0hgGspvzvwHd4CiGj30xWJHHNwKvIXOZl8qlU=)
                          2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
                          3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Mar  2 13:05:25 2026 GMT
            Not After : Mar  9 13:05:25 2026 GMT
        Subject: CN=69a58b15-ee96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5d:07:fa:3f:9f:ba:9e:a7:95:d9:7a:e9:b5:
                    dc:a1:2f:80:4b:5b:83:7a:85:2b:d5:54:b5:eb:63:
                    cc:ea:38:aa:13:f8:fd:31:61:87:b3:44:a6:a4:ff:
                    b7:e3:28:29:2a:bf:37:66:91:a7:b8:2a:c2:ab:57:
                    8f:ae:f9:73:59:44:6f:18:55:f7:7b:fa:61:6a:47:
                    3a:0d:78:23:e0:f2:6c:2a:d0:6b:a8:ac:91:da:43:
                    c8:2a:dd:e5:a5:4a:4b:f2:92:8e:a3:56:2e:b4:d9:
                    48:34:94:25:7b:9d:93:46:1d:f0:32:1d:26:39:1b:
                    53:76:a4:37:b2:fd:d9:ee:ea:a9:c5:d6:b5:47:85:
                    6e:21:10:04:04:62:93:b9:e9:b8:aa:dc:86:f6:66:
                    06:2a:61:64:85:a7:d3:b0:0f:4c:47:7e:e6:73:2e:
                    b5:16:9f:a0:79:2b:32:a4:43:b4:0e:0d:5e:34:65:
                    5e:93:10:da:48:51:5d:ea:8f:4f:32:07:ec:77:69:
                    75:29:03:d0:8b:fb:62:bf:ab:0e:1a:38:c0:91:50:
                    3d:34:4c:0e:b6:08:86:9c:5a:0f:11:a0:b0:e4:b2:
                    37:c2:44:db:ca:db:01:95:60:a2:6e:d5:11:97:b3:
                    52:8d:8a:66:38:ce:67:dd:e7:51:9c:e7:00:95:eb:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9C:FA:01:10:A4:C9:AA:EC:67:96:53:0F:94:1D:C6:B6:F6:51:F8
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:25:ff:ba:39:10:06:b8:d2:8e:f0:b7:e4:c1:96:90:12:11:
         fe:56:10:7e:ff:cb:19:3d:1c:1b:29:dc:40:01:81:1a:74:d4:
         5e:47:3f:6f:fc:28:16:16:c6:ab:82:02:7a:3c:6c:99:45:6e:
         59:88:16:7b:e1:bf:e2:28:9d:d9:12:bd:8f:29:7c:4f:6c:91:
         24:a1:e5:79:89:f5:5a:6c:22:f8:9c:38:f2:14:1e:04:f7:ec:
         f2:ba:18:f2:70:60:74:9b:d5:95:0b:8a:2d:a0:e7:f0:9b:7a:
         54:5c:c4:24:a0:66:87:50:3f:84:24:fc:17:34:36:39:00:b7:
         29:5b:07:ee:91:3e:db:b5:a2:3e:1f:ad:53:ba:91:c6:0b:8f:
         e3:69:00:6f:67:bb:3d:a2:17:4a:9c:f1:d8:94:32:33:09:db:
         0a:77:ec:ea:f0:c9:1a:39:3a:9d:24:d4:8f:9c:12:1a:ae:55:
         24:92:d6:ec:cb:1c:30:7c:f5:b3:b0:f7:bb:5b:d5:a0:fb:ad:
         77:46:e1:33:a1:b6:a8:bd:f2:30:73:5c:68:63:d9:76:37:e5:
         2d:92:f3:fd:fd:16:3a:78:37:21:9c:c7:a8:55:06:98:e3:9f:
         0b:9d:7e:42:35:32:e9:aa:10:37:b9:bd:64:64:ec:a1:d9:e9:
         cc:45:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:34 2026 by rpki-client