Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
File:                     AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json)
Hash identifier:          tW5cli2FvDVnBMY9BZi7bt/Yi3GcmjLTnyscYIPAzas=
Subject key identifier:   63:42:3D:60:20:27:E2:E3:18:92:BF:85:B0:B6:29:A2:80:A1:F8:B7
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Certificate issuer:       /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
Manifest number:          0569
Signing time:             Sat 28 Feb 2026 23:54:42 +0000
Manifest this update:     Sat 28 Feb 2026 23:54:41 +0000
Manifest next update:     Sat 07 Mar 2026 23:54:41 +0000
Files and hashes:         1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: eZxueX0ZsNowW81F29VBhyZaDXBZlKw+7FANgY0fsR4=)
                          2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: gvY7yNXsc8f6BaNnDgo1s6r58BRk/opgVjfKstxIGuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
        Validity
            Not Before: Feb 28 23:54:41 2026 GMT
            Not After : Mar  7 23:54:41 2026 GMT
        Subject: CN=69a38041-c98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:ac:e1:b2:0d:46:5b:d4:1e:cf:2c:b4:8d:
                    1e:ed:1a:53:3c:30:df:cc:04:b7:0a:3c:e9:91:de:
                    77:83:29:54:9d:fc:bd:6b:16:ad:09:64:cf:dd:d6:
                    f3:73:f3:08:7e:1c:02:d0:56:30:54:4d:3f:38:78:
                    90:5b:e0:2d:55:49:fa:5c:8b:f9:17:29:53:7b:54:
                    7f:14:4e:0a:7f:42:5b:b0:e5:7a:c2:af:57:4a:0b:
                    e7:ec:ce:db:e6:3a:7a:4b:b2:ba:4d:4d:10:40:8e:
                    f4:3a:ea:03:1d:bd:20:88:98:9e:c2:76:f1:8c:01:
                    41:20:6c:10:dc:fe:56:00:2a:9c:fe:4a:38:44:a6:
                    85:d2:eb:11:d0:82:ed:f4:51:bf:e5:e2:c3:25:ef:
                    93:ae:87:cd:dc:bc:c7:52:c4:e8:56:3d:6d:c9:05:
                    f2:7d:bc:37:db:45:ee:2f:03:6e:c9:29:62:56:8b:
                    c5:51:e0:56:48:7f:28:c1:63:37:e8:36:48:2f:c5:
                    1f:8a:ce:4d:36:a2:49:d7:92:b0:96:a2:49:34:5b:
                    27:6f:95:b1:2c:c2:76:42:71:ba:53:85:39:84:a1:
                    fb:5e:62:6d:67:47:50:99:e7:0f:91:6a:ef:a0:b5:
                    f1:2d:8a:4a:c2:88:fb:d3:3f:63:c7:be:8f:90:c7:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:42:3D:60:20:27:E2:E3:18:92:BF:85:B0:B6:29:A2:80:A1:F8:B7
            X509v3 Authority Key Identifier:
                keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:cf:d3:ba:de:bd:e9:62:1d:83:ab:4d:82:a1:95:1a:2c:
         a7:54:a2:a5:c4:51:ce:41:81:ac:ac:e5:8d:10:38:b1:88:da:
         3c:52:3e:33:bd:f3:32:f7:3a:8b:54:c1:0b:3a:66:d1:75:dd:
         6f:2f:cd:0b:a1:00:78:74:94:f2:50:97:57:f1:bf:61:29:64:
         e7:b3:f1:cf:a1:90:0c:f4:70:c9:b9:9f:54:88:f2:92:9f:fd:
         d4:cd:41:ae:c5:e0:fa:64:e3:a8:ec:88:1c:64:30:7c:0f:5f:
         5c:e4:c6:15:55:00:62:98:4e:c5:5c:1b:de:0d:a9:fe:af:0b:
         59:77:a0:e1:ba:02:6f:36:d8:54:36:09:b6:48:14:ec:51:5b:
         8d:dc:84:01:f9:0d:e4:d1:3a:1f:c7:12:c0:33:6d:0e:fb:03:
         45:b6:c4:00:6d:39:f5:93:4c:d4:52:88:4a:61:9d:94:b6:04:
         3a:9a:59:66:cd:35:95:4e:69:31:9a:cb:f9:b2:ee:9b:2c:40:
         4d:fd:c7:5a:cb:c1:07:dd:77:a2:c5:4a:db:82:53:2b:05:c1:
         9e:05:76:6e:bd:de:e9:4e:18:97:96:ca:c3:8e:ed:63:c9:c7:
         ad:c1:c1:a5:ef:23:1f:46:0c:83:69:af:b3:4d:6d:50:89:65:
         7f:19:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:58 2026 by rpki-client