Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
File:                     rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json)
Hash identifier:          VKbtGl6JLUDiNY4WwRZ3BZJ0Le16OwICGAayFxsHPBY=
Subject key identifier:   70:13:6B:7F:E3:CA:60:26:23:3A:19:A7:15:95:2B:13:B0:93:81:04
Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
Certificate issuer:       /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
Manifest number:          75
Signing time:             Wed 29 Jul 2026 09:25:49 +0000
Manifest this update:     Wed 29 Jul 2026 09:25:48 +0000
Manifest next update:     Wed 05 Aug 2026 09:25:48 +0000
Files and hashes:         1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: Sg23y/N6Pau0PAt4Xmfapf5tZzAOK/qU+gkOZV2sQJU=)
                          2: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=)
                          3: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 09:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
        Validity
            Not Before: Jul 29 09:25:48 2026 GMT
            Not After : Aug  5 09:25:48 2026 GMT
        Subject: CN=6a69c71d-ed32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:ae:01:30:23:63:0c:6b:87:b9:5f:e4:2b:
                    ae:12:66:20:c7:35:9f:02:1d:40:1b:33:9c:01:fb:
                    d6:64:7a:85:00:b1:63:34:56:ec:84:af:9f:f5:34:
                    ca:9c:b6:a7:20:5d:23:ad:88:e1:f0:25:38:3e:84:
                    28:b3:1e:33:e4:7a:f1:1e:66:dc:18:c8:57:2b:59:
                    2b:4d:96:75:45:ea:c8:67:da:11:8b:3c:48:17:79:
                    e9:a0:14:c7:66:14:43:69:28:e1:8e:c0:a5:1c:97:
                    dc:a5:0a:37:63:e2:20:50:45:93:37:b8:fe:bf:35:
                    2b:f3:2b:62:8d:2d:98:6e:a9:93:e1:c1:57:cf:b2:
                    10:8f:45:8f:e4:cc:6c:e5:27:49:82:ea:df:6f:4a:
                    0c:5b:f2:e0:40:5a:85:80:9c:83:65:7c:56:0f:91:
                    5d:cc:30:53:b0:32:54:f2:23:eb:bd:f0:f9:d7:c1:
                    2a:03:37:77:5d:f5:83:65:06:7d:4b:05:6c:c2:63:
                    47:88:f9:39:f0:d7:98:da:cf:a0:9a:a4:d0:ed:0b:
                    7d:3f:13:aa:57:33:94:dd:43:96:3f:9e:8c:ed:72:
                    c3:d4:28:cc:e3:ea:41:e7:cf:4c:0d:dd:53:88:01:
                    02:83:f0:76:6c:83:3f:df:d0:7e:f4:e8:b1:b9:99:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:6B:7F:E3:CA:60:26:23:3A:19:A7:15:95:2B:13:B0:93:81:04
            X509v3 Authority Key Identifier:
                keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:93:bb:01:a7:07:a2:64:41:01:c4:0f:5e:d2:18:b1:47:
         e7:45:bd:43:db:7a:4a:31:89:5d:44:8e:71:a4:34:11:e3:77:
         5b:00:f2:49:e7:fa:67:ca:2d:fd:ca:83:15:ae:1b:1d:71:f5:
         58:1d:44:98:02:34:fa:6b:ef:c6:db:10:7e:ac:23:44:5d:75:
         5d:a5:bb:06:6f:a4:60:05:9b:7b:db:42:40:91:83:8d:0c:b3:
         d6:f8:9d:c6:ff:1d:3a:22:c2:27:89:37:0e:30:20:92:c9:dd:
         35:11:42:0c:39:4d:63:23:84:72:aa:77:64:56:a0:9e:36:a1:
         7c:40:56:06:51:86:14:03:ec:fe:fc:ba:46:20:83:cd:fd:9e:
         a2:a7:a1:01:17:60:a7:bd:bd:5b:22:bb:6f:21:cb:1c:df:d4:
         17:3f:10:72:61:53:48:b9:4c:c2:6b:8e:e2:55:6d:66:2b:66:
         65:0d:0e:46:a2:96:7c:ba:d6:85:28:9f:4f:55:24:73:1e:23:
         90:16:3c:a1:19:e6:5e:eb:7e:8c:9b:28:ae:fb:1a:86:df:20:
         03:5d:17:d2:c7:d6:9a:56:98:cd:b5:d3:65:01:2c:76:d8:b7:
         ad:e0:49:ff:41:95:5b:e3:d0:83:ee:34:8a:aa:d4:8d:fc:6f:
         74:ea:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:36:09 2026 by rpki-client