Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
File:                     AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json)
Hash identifier:          LUtd+o1lt7d1UWX+CpIOvsUDXMAiBHEnDTsWJ0vYgeM=
Subject key identifier:   0C:2D:3C:60:1D:E7:0A:CB:A4:AB:A1:49:77:35:BB:0B:28:3B:F3:E0
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Certificate issuer:       /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
Manifest number:          0583
Signing time:             Thu 16 Apr 2026 23:10:24 +0000
Manifest this update:     Thu 16 Apr 2026 23:10:24 +0000
Manifest next update:     Thu 23 Apr 2026 23:10:24 +0000
Files and hashes:         1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: eEky+42vu+3Tz2rje70rQXkgU0BCbtk0wKbnOvAARrE=)
                          2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: YLl0P9jlwEhhHZ25T2nyiDfkAV9RXLStwFdD/BEgbUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
        Validity
            Not Before: Apr 16 23:10:24 2026 GMT
            Not After : Apr 23 23:10:24 2026 GMT
        Subject: CN=69e16c60-a925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:f0:0d:91:89:df:a5:79:32:b1:27:f6:28:
                    a2:33:a1:0d:dc:1f:49:04:7c:cc:f1:98:e5:a0:4e:
                    1a:06:6a:c6:5c:b5:df:fc:de:a9:4f:e2:06:ac:8f:
                    84:63:9b:1a:51:2c:ae:4f:dd:21:91:70:f2:b6:d9:
                    90:8c:cb:0e:c9:16:0f:f3:62:fc:6a:69:53:10:6b:
                    5c:bb:fb:fc:ca:eb:24:e4:d9:b0:b1:6a:c4:bf:1c:
                    5a:20:86:19:37:73:ce:89:80:ce:50:b0:6b:40:64:
                    52:4e:45:a0:01:e1:f3:2e:3c:91:26:93:26:bf:f0:
                    cd:00:4c:f5:6a:b2:f4:a6:dd:1c:34:d3:03:7b:41:
                    5c:ee:11:21:a3:aa:78:aa:a0:60:79:d5:de:f1:d1:
                    4a:c8:9c:45:db:19:5d:1b:6c:0f:ff:5f:b4:ac:22:
                    72:f6:2b:65:5a:68:a7:c4:57:17:ff:68:4b:fe:90:
                    53:83:11:e9:04:cf:70:fc:74:f3:4f:1c:db:18:db:
                    d4:bd:2a:0d:70:3f:53:52:ba:79:23:05:ff:ea:08:
                    14:e2:62:f1:a8:b4:4b:19:18:e1:cb:d6:b0:0e:b2:
                    88:7d:03:1c:2c:4d:ae:e3:72:38:a8:d6:be:f4:92:
                    09:fe:9d:02:d1:4d:a5:dc:15:3b:b6:95:87:d5:8d:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:3C:60:1D:E7:0A:CB:A4:AB:A1:49:77:35:BB:0B:28:3B:F3:E0
            X509v3 Authority Key Identifier:
                keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d5:40:21:f0:28:b1:9e:22:7a:ef:6b:0f:48:61:2f:ad:64:
         6f:79:9f:d1:eb:84:07:1d:f0:dd:91:7c:e8:cc:47:f2:d8:a7:
         dc:9f:35:3e:fb:5a:49:fb:10:61:3b:ab:98:c9:64:1b:bf:b4:
         ea:4f:5c:58:8c:b1:2d:b6:15:38:aa:b7:4d:5a:aa:40:cf:41:
         89:a1:eb:8e:9b:b5:36:5b:99:8a:fe:3e:1d:b9:90:be:43:77:
         8d:53:bb:e5:33:9e:80:40:aa:56:d0:7e:b3:6a:33:17:ca:69:
         ce:e4:ed:78:09:80:e1:e0:b0:b7:5f:33:00:79:9c:d3:34:8e:
         f4:09:f4:e8:93:50:ef:bc:1c:d8:be:05:bd:aa:1b:ae:b0:70:
         23:8f:d7:7b:7a:a7:db:db:3d:3b:66:02:ab:04:0b:f4:64:1b:
         34:2b:1f:c6:82:64:2b:8d:14:c3:e8:d8:6c:15:a8:13:59:c8:
         5b:9f:30:19:fa:43:76:09:d9:1c:d1:f4:98:d1:a8:ae:bf:49:
         73:bc:c2:81:d3:ad:ea:6e:ac:80:e2:d8:17:81:a9:29:55:ba:
         82:53:af:26:41:c6:e2:da:c2:c8:c7:06:ed:3e:e3:39:63:0c:
         20:d4:f2:aa:15:f5:a8:0a:76:4f:71:de:93:84:b3:54:3a:3c:
         49:db:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:17 2026 by rpki-client